last executing test programs: 16m13.5339858s ago: executing program 32 (id=445): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) 16m1.639642513s ago: executing program 1 (id=498): r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 16m1.295519678s ago: executing program 1 (id=501): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") flock(0xffffffffffffffff, 0x1) symlink(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004840)={0x2020}, 0x2020) 16m0.921720384s ago: executing program 33 (id=502): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f0000000180), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814867b53) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000740)=""/78, 0x4e}], 0x2}, 0xf3}], 0x1, 0x10023, 0x0) 15m59.5463235s ago: executing program 1 (id=510): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r2 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x60800, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) setresuid(0xee00, 0xee01, 0xee01) setuid(0xee01) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc25c4110, &(0x7f0000000100)={0xa2, [[0x1, 0x0, 0x4, 0x0, 0x0, 0x1], [0x20000003, 0x500, 0x4], [0x3, 0x0, 0x0, 0x0, 0x5, 0x93]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5, 0x10}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x1}, {0x1, 0x401}, {0x8}], '\x00', 0x6b4}) ptrace$cont(0x18, r8, 0x7, 0x2) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) read$FUSE(r2, &(0x7f00000076c0)={0x2020}, 0x2020) 15m58.784038336s ago: executing program 1 (id=514): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r5}) 15m58.130639023s ago: executing program 34 (id=514): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r5}) 12m59.998363027s ago: executing program 35 (id=1200): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40040) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4m46.530955006s ago: executing program 36 (id=3382): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) 4m41.886253025s ago: executing program 37 (id=3405): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, [0x5, 0x0, 0x0, 0xffffffff]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) 3m13.089850166s ago: executing program 4 (id=3743): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x1, 0x186) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='2\x00', 0x2) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) 3m11.99787653s ago: executing program 4 (id=3747): syz_usb_connect(0x5, 0xbc, &(0x7f0000002240)={{0x12, 0x1, 0x110, 0xfe, 0x6c, 0xe9, 0x40, 0x1066, 0x700, 0xe224, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x8, 0x3, 0x120, 0x10, [{{0x9, 0x4, 0xf1, 0x0, 0x2, 0x8d, 0xa5, 0xb0, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x4}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0xf}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x5, 0x0, '-'}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x1, 0x6, [0x4, 0x4, 0x9, 0x1, 0x4, 0x8], 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x6, 0xc, 'j'}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x4, "306377ab"}]}], [{{0x9, 0x5, 0x9, 0x1, 0x20, 0x9, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xf, 0x1, 0xff, [@generic={0x45, 0x10, "dfe1ac941a3de94f5af91938b84aa32bcc4165d41776d8e1ca10e94e5d44e5411e119cd4dd1a797fa627dd168b8526d00b3e8ed89c3da31a143cc44fd048371bdcfae1"}]}}]}}]}}]}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 3m8.270966703s ago: executing program 4 (id=3754): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000300)=0x15, 0x4) 3m7.683846368s ago: executing program 4 (id=3756): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004a40)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae35}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff7, 0x8, 0x4}, {0x0, 0x2, 0x6}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 3m5.425691951s ago: executing program 4 (id=3763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e22, 0xe19a, @private1, 0x68e}}}, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 3m3.315901059s ago: executing program 4 (id=3765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffffff], [0xff000000], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x600, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r8, 0x5608, 0x1) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) 2m47.897592224s ago: executing program 0 (id=3806): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x48}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 2m46.364603709s ago: executing program 38 (id=3765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffffff], [0xff000000], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x600, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r8, 0x5608, 0x1) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) 2m46.350275717s ago: executing program 0 (id=3811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r3, 0x29, 0xcd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) lseek(0xffffffffffffffff, 0x4000006, 0x1) 2m45.006103476s ago: executing program 0 (id=3813): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f000093d000/0x1000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) 2m40.568795278s ago: executing program 0 (id=3826): syz_usb_connect(0x5, 0x0, 0x0, 0x0) 2m39.012107657s ago: executing program 0 (id=3833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 2m36.962030564s ago: executing program 0 (id=3836): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m25.757990553s ago: executing program 1 (id=3810): r0 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='ex\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') 2m23.616271489s ago: executing program 1 (id=3869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x40, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xa9ac}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x8c, "d76da82df9a5a7b5375a18f72fdc05ddd87bb5bf87f0d07b0c59f14b4a9585c7dd2d3dd8f502e041ec5966b44a9c222b9773dedaf84e488d8cbbd98ed4edf5f679683bb5f2c305c35e2cdd310094004e714179480242c33eb43d1768a114a167525656656a22b90a90244578b434f267212e87d4354a374d398664f8746995d16a63e3d8a58717e97518e022"}, &(0x7f0000000100)=0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) 2m20.033621207s ago: executing program 39 (id=3836): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m7.234000834s ago: executing program 40 (id=3869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x40, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xa9ac}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x8c, "d76da82df9a5a7b5375a18f72fdc05ddd87bb5bf87f0d07b0c59f14b4a9585c7dd2d3dd8f502e041ec5966b44a9c222b9773dedaf84e488d8cbbd98ed4edf5f679683bb5f2c305c35e2cdd310094004e714179480242c33eb43d1768a114a167525656656a22b90a90244578b434f267212e87d4354a374d398664f8746995d16a63e3d8a58717e97518e022"}, &(0x7f0000000100)=0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) 1m49.09121988s ago: executing program 3 (id=3970): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x8000011, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 1m48.6796374s ago: executing program 3 (id=3975): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002000000000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1b0000001c008102e00f80ecdb4cb9f207c804a00d", 0x15}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00010000"], 0x30}}, 0x0) 1m48.019275848s ago: executing program 3 (id=3977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$inet(r1, &(0x7f0000008380)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000032c0)="35f81c14607a6ea0c73b41d928bc1632e44a5f7f315cf780f0c558c90542587162a67611652d3b3cde1a3c293ad4e0536bf623230c6be1d0556a3d3c8c70b3838312f53479e3a51762e333e79adf277befa8bfe549e368e37e4b52688b15d1fd7a04e83899ae0da94e2ab2610d188dcef47d99e5eef407294b15ab066cf0599772de074cbfd532fad8b52581c544c37594f64e81cb543083cf2c641b24d2e9606210f6affe483bc64da0785b256fbaf6bc2148983c2c97222af0c5299eae835b3322f300975bdf53f84f93843e9f76e830346a44815280ef209e3e", 0xdb}, {&(0x7f0000003100)="f1ead5f626675b0192b3018c4887a3e9c63fd1f20342480158c8e53d7cb50fd485df47661e0cf5241fed51566a1ec6c87b686a269a5a69bb906355c1326304580c6e3ed84d87afcdd08fdcfb542ad86909a0958ab39f5617b689", 0x5a}, {&(0x7f0000006000)="e66836f7241e367ebbd4dfbb0c75e144aa2b18bdad91ed803031c9dd625c9fdaaeef9e0da8d29bbd2f16a0421ed85b85ac83aa3458dc2299293270400353ad2674fbfd991bffa7701261a364043efc8aa6bd77bf6476594e619312b5583dad6baf3b084a99f84a26c1969cc78428a46f6950bfc5a3ec7a94e3a32ed86092588dfaa3eb3bb980d6eaedb54f94541ca0ba428b89dab83e0cfb66f1ed5c26aeedb5b3eebec0b3b9907bdb39e95d1b5796f1e70847055f7d", 0xb6}, {&(0x7f0000004480)="b5691df1d6bc60b11b748c87a2c7aa27de0cd4770914aefe810bec03eb9459625471ff60a1d199d49699500eb4ae7174a31661ef77c3cc700f1a235edeec89b3ff263e957e2396b0e7fe2bdb427e4581faac8c370e362c2d6824d9b08697cedd15452b7ce74aea8a655489e0c1c2c543c3db738a7746417dfa332284ee9c62672ebe2719713be1a5293442658172c4a6cf", 0x91}, {&(0x7f0000004540)="e3aa7ff30c1400105b3ce0fe15d9263d807290d31f05cbb16b88e074d0ab64dbb4ba007e06cda48951f7f362e93a909474347f4e753cb685d73ea9abb0d9dd920c385b9f56a982ed055b6b9040f1759601b605eb901423960c6de1fb957fe4c7cbb756cb2900755552c88cf8b394eda2da2f70cb66b8145e4cc40d5d1f", 0x7d}, {&(0x7f00000045c0)="cd2df6c5e3dc31", 0x7}, {&(0x7f0000004600)="cf168f49309625cd6616e534544bcfd2b6b42d140c2761faef198446488a46b228cbdd06cab3c4460100"/54, 0x36}, {&(0x7f0000004640)="40cf928df3fc029682e60610b305cebeaf7b1b2c80d3263134bcda4b99896872fad2764b3038be9a236d9c134bafc9cacd1921c9db5c59320c851e620f1f5496de61dc42a89227b0fad13510e03a913c6c733d45c9edbd9980d8c3c9c44a28452c904e1c6bf48a603cfa7d", 0x6b}], 0x8}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000048c0)="0d4c5ea2c388e9904042b24bcb34f8051c7630b957edbea39744bcbf7535c372fe2f388008a5604710c61a41c3f86dad34c8f3b64b2a1ca3d277dc23584452731895dcd5cf082223829a61856605d5745493885fb894026a088afdd47affd165bbc8eec898d1835caef3212daef0716ece55dd0317493e056731d0da855e8deda99f0496f59b211544211542ac0d5de225", 0x91}, {&(0x7f0000005980)="08bc6d02a8c97fed7aa7acc40a48807ab840ad53820f0ba92eaaf935743381b3f8de8347bb1a51f696232f51991750254ec0ccfdb7dec560b72fcd531a2f0725154f85df2876e2994b9d1687e3e7dc9183d35f857c724515e4e76dbfb1f06b14a11d3780accef992d2d848", 0x6b}, {&(0x7f0000005a40)="b346b1885d8a8a3b8608b599cbc1a41389eaf01d108171e1a50ba3fa9fcb295b577138ac2574c5024e2ab808b8bad6af50a8ac2d90af748244ac3878974346f34f63d17646595d0d9fcbd50034f842c584a71cf18090a3", 0x57}], 0x3}}, {{0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f00000066c0)="77012aabc412ce5189f609e0bdaa15d86f04d91e2c3ea01c268efe381c27557b788ac4bd769dc7c5c785577012460d9ff8a5544f9471ed22ac041c63e6f82351842524e5c61d1e04000000000000002583711a7c213ff102e48a36faf911858595b7d403f030087005f5da31b65aa58051edd383b52b4e544eef02087bbc36c7f5e3a001c9dc49c4d10fa3e89c49ea52f31d28410b7eed3858fc0700000000000000b268a7da3ebaed18946ffe9651a2f8d3e380145543b5bd27bfa1d590ee0ea241c8be2b2f405b8c2cf815a57ed43244ac1c0574ff720690a3042c5fdb5a", 0xdf}, {&(0x7f0000005f00)="541a3de69fb76c9e14fb5830466588ed3eaed4a8dd9dd6b8cc0c81c9a73e6bfc89ab6f465be0198b01c3f0720db04998d3e8547a26ff50716e3383231ca291476911bfcaedc34747a108541cd274484b61e735e82eb32b2ff796bbce8edade6c097050f07b1099ed1e1390c7cfeefaed56a458715bcd8ccf99256da469d8173a8f6a187894c2ea25b68eaddeab03287c854202c2c8c22b3cef2add3cda28cd00ae98f13b5459228e7fc8bb9bb6b75f9c3ffe104cab2e6f", 0xb7}, {&(0x7f00000067c0)="f218a75a2c53d12b2ace060b4714c75b39b0eb847f092c7374a29759469cc1f995b432984c36e92c700c5f61fe0a3b6fc9fb3ff92d3f09245d4720b6a92aabb41da4a6245b4ca188d67773cf45d1c8ec8b052d54a7f3b609b2c0", 0x5a}, {&(0x7f0000006880)="0c4e88603693413315d1d12cc3bfa19162a0cea7799228763a0f7af2deaf34519cf5ab67afa41ce8f1b6cec379398d6426aebc32e65ad2a1d2f7b9f63313c052a13e92b8c6313b3ae9577ee9452eb58d4868df8c03636a846e908558f23843c6dc21a843e007207481922fee305f420aa604f642da41cefb8a256321d644dd58539835258a70db2cd8d1e42b4edb65d48a79631fe7e36f91082337658cec6d01dc40570f8c03b1665d0d2119af12cec6461ce361e9a9", 0xb6}, {&(0x7f0000006940)="d8342bf37fc282a861c9fd07db", 0xd}, {&(0x7f0000006a40)="c29ef8972db518f1f936e0be3c880a525e23309e1281854920b8d83e47014e8ed727e5c3f7b7b05fcef662227b6118a5000039c1093f22987247b268f5f1f6e02811e41778ffccaf1cd66b9460220ff24931be64f8363d6d1a2c4604429c4120b6a6ef3161973f83208700", 0x6b}], 0x6, &(0x7f0000005c40)=ANY=[], 0x98}}], 0x3, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 1m47.401994095s ago: executing program 3 (id=3980): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 1m47.075360035s ago: executing program 3 (id=3983): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8900, &(0x7f00000002c0)={0xf, 0x2}, 0x20) 1m46.831776324s ago: executing program 3 (id=3985): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1m30.292385678s ago: executing program 41 (id=3985): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 23.055406909s ago: executing program 6 (id=4238): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300), 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$xdp(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x3, r5, 0x5}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)="022cd36c9170e954ec93ef97f6dcc6efc3b33c62555ffe260cf036c139fb3af8a7aa8cff031fadb78520886bea6e0cf9e8d1bd7adb963c3c2293af1c6839c5dc1e1a6d565febb0f051191909c0f64025aa0aa2a263dd7d7a8ff49a48f13bc488b8379d984f7abd995f5f6ce78c8a0919ab00fda88c760e192a683db296ce67ec524fd1402ccd727c84237f7906bfc372f10bfa4e34", 0x95}, {&(0x7f00000001c0)="99e38a6b1891d13e62431a70e1876b89467c75b44b82bfb8485f36a8a84321604c3a31297844bc2c6e762d84932e10c923ac54a5bc71cb33627624f794241c9dd2a1f737b8", 0x45}, {&(0x7f0000000380)="f835e3b4a736b36e0276d5f794f639d2f056ddcd9fa88726fb672b7eb8afdc3644be53a9700cbac4b2fc9f9eb5c47a1362d19ac771aa9f5990265790212cc552fb4453b1dad57e624c497b6f9bd8e883ef5ec3bc6413436a101ef022a0ce9c1111b6b0bb25", 0x65}], 0x3, 0x0, 0x0, 0x4000001}, 0x8095) r6 = io_uring_setup(0x7da, &(0x7f0000000080)={0x0, 0xfac7}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 21.238781661s ago: executing program 9 (id=4242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x9, 0x80000001, 0x7b, 0x7b, 0x100000000, 0xffffffffffffffff}) ptrace$getregs(0xc, r2, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0xb, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc04c89f3d9e234b30c50997d3bef409ffcd4a524bd3ffe70c7f3f0b2f7b6aa54cc50a1fcaed1e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_setup(0x1, &(0x7f00000016c0)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={r5, 0x3}, &(0x7f0000000300)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000004c0)) 19.61633905s ago: executing program 5 (id=4247): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x2) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 19.293983904s ago: executing program 5 (id=4249): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r3, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18.831597346s ago: executing program 8 (id=4252): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380)}, 0x20) 17.72148722s ago: executing program 8 (id=4254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 17.200173739s ago: executing program 9 (id=4257): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x8ace0a3f86283e7d, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x17, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xf8, 0x0, &(0x7f0000000ac0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/106, 0x6a, 0x1, 0x35}, @fd, @fda={0x66646185, 0x5, 0x2, 0x3}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@fda={0x66646185, 0x3, 0x0, 0x24}, @fda={0x66646185, 0x8, 0x0, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/122, 0x7a, 0x1, 0x2e}}, &(0x7f0000000400)={0x0, 0x20, 0x40}}}, @free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000a40)={@ptr={0x70742a85, 0x1, &(0x7f0000000880)=""/152, 0x98, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/227, 0xe3, 0x2}}, &(0x7f0000000700)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 15.631067759s ago: executing program 6 (id=4258): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}], 0x1, 0x0) 15.299441439s ago: executing program 6 (id=4259): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) clock_gettime(0xa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x25, 0x0, &(0x7f00000007c0), 0x0, 0x702, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000340)=[{0x0}], 0x1) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x28004840) 14.000113204s ago: executing program 6 (id=4260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x1, r3, 0x0, 0x8000000000000001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @mcast2, 0x6a3}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1, {[0x5, 0xa526, 0x4, 0x3, 0xfffffff1, 0x98, 0x3b, 0x4]}}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 12.924808771s ago: executing program 5 (id=4262): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000804) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x1, 0x0, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, 0x0) write$sndseq(r4, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @time={0x3, 0x7ff}, {0xff, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 12.85739909s ago: executing program 2 (id=4263): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12.483928394s ago: executing program 2 (id=4265): symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff020000000700"/56], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed32", 0xc}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0xab1cec1f5a781c23) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r4, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x15) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) 12.295616005s ago: executing program 8 (id=4266): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380)}, 0x20) 10.833023023s ago: executing program 8 (id=4269): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)={{}, {0x0, 0xea60}}) 10.647876385s ago: executing program 8 (id=4270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_usb_connect$cdc_ncm(0x3, 0x74, 0x0, 0xfffffffffffffffc) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b80006990300000004001500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0xf1, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x3c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x9f7, 0x0, 0x80, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf3, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x9, 0xa, 0x0, 0x8, 0x9}, 0x2b, &(0x7f0000000300)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x9, 0xc, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xd6, "8841316f007f3dca237e149de78c1dc0"}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x0, 0x0}, {0x2f, &(0x7f0000000780)=@string={0x2f, 0x3, "cedba706054de45010b891acaf9c48eaf157e3b8b6ea708cef2e26195b6414c4b436c9ad589e90f1e85dfad594"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x67, &(0x7f0000000800)=@string={0x67, 0x3, "32959b9e92b932544c1ec8b7435044d4c92609a3ea8b3a82bfa77450975c2cf6195ea7a77c92a8dfd5768267629404e9d734b30a5acf9a236b58fb74012344ac825bb3a520b43926c50d2736306e84b0dd1b2753966ae7238a87a50fa271a3418a60cbd42f"}}, {0x2a, &(0x7f0000000940)=@string={0x2a, 0x3, "1e593c669d7569e10a1e3d90e9e3fe6e004be23734b370408a426aa766bce855c3954c3087ed6010"}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff0b, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.830500317s ago: executing program 9 (id=4271): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x30000, 0x1000, 0x2, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 9.366589398s ago: executing program 6 (id=4273): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r6 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x10000, 0x2, 0x30d}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0002949da00009050402000000000009058802"], 0x0) unshare(0x22020600) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10040, &(0x7f00000004c0)=ANY=[]) stat(&(0x7f0000000140)='./file0\x00', 0x0) syz_fuse_handle_req(r7, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x9, 0x4e93e32f7c580046, 0xdcf, 0x4005, 0xb, 0x32a, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.285757104s ago: executing program 9 (id=4275): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000180), 0x7f, 0x4002) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$MRT(r5, 0x0, 0xcf, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 7.96097671s ago: executing program 7 (id=4277): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.58268124s ago: executing program 7 (id=4278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 6.55555819s ago: executing program 5 (id=4279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 6.04529696s ago: executing program 5 (id=4280): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x48}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 4.668131363s ago: executing program 5 (id=4281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xde3ebb5) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.28380363s ago: executing program 2 (id=4282): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty, 0x400005}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0xfff, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0x0, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 3.822112189s ago: executing program 8 (id=4283): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x0, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x40, 0x0, 0x1, "c7"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x1, '\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.81784734s ago: executing program 2 (id=4284): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x9}, 0x1d, [0x1, 0x3, 0x7, 0x7, 0x1, 0x7fff, 0xee, 0x1000, 0x1, 0x80000000, 0x1, 0xf5, 0x363, 0x6, 0x2, 0x8, 0x6ad8, 0x9, 0xb80d, 0x2, 0x800, 0x56, 0x62, 0x8, 0xf, 0x7, 0x400, 0xe9, 0xc, 0x200, 0x3, 0x2, 0x0, 0x1, 0x6, 0x16, 0x0, 0x4, 0x1, 0x4a2d, 0x0, 0x4, 0x5, 0x10000, 0x6, 0x8, 0x1, 0x7, 0x2, 0x556, 0xb4b8, 0x1a0caf96, 0x0, 0x6, 0x2, 0x4789, 0xfffffc01, 0xa15, 0x5, 0x5, 0x1, 0x2, 0xfca, 0x2], [0x200, 0xffff, 0x18000, 0xf, 0x4, 0x66, 0x4, 0x7, 0xb, 0x3286df8d, 0x1, 0x3, 0x7, 0x0, 0xfffffffd, 0x7, 0x8, 0x0, 0x7ff, 0x5, 0x5, 0x1, 0xa314, 0x8a1b, 0x2, 0x1, 0x7fe, 0xa, 0x8c, 0x0, 0x8, 0x4, 0x9, 0x3e, 0xb8f, 0x7, 0x398f, 0x1, 0x4, 0x6e, 0x7ff, 0x9f, 0xfff, 0x9, 0x200, 0x9, 0x9b000000, 0x8, 0xe73, 0x7, 0x3, 0x2, 0xe, 0x5, 0x2, 0x6, 0x6, 0x2, 0x8, 0x3, 0x847d, 0x10, 0xffffffff, 0x6], [0xe, 0x9, 0x7, 0x4, 0x9, 0xfffffffd, 0x8, 0xfffff000, 0x401, 0xffffffff, 0x6, 0x6, 0x8a2, 0x9, 0x0, 0xfffffff8, 0x8, 0x1, 0x0, 0x6, 0x2, 0x31c, 0x4, 0x2fb30000, 0x9, 0x2, 0x3, 0x80000000, 0x8000, 0x80, 0x735, 0x8000, 0x10, 0x3, 0x21, 0x2, 0x81, 0x1, 0x6, 0x6, 0x400, 0x2, 0x2, 0x9, 0xcb, 0x5, 0x9, 0x6, 0x3, 0x9, 0x6, 0x7fffffff, 0x40, 0x9, 0xf, 0x9c6, 0x64, 0x8, 0x7f, 0x8, 0x7, 0xe, 0x800, 0x75], [0x81, 0x400, 0x8, 0x80000001, 0xa, 0x3527, 0x1000, 0x5, 0x2, 0x1, 0x2, 0x2, 0x3, 0x2, 0x8001, 0x5, 0xfffffff5, 0x7, 0x4, 0x3, 0x0, 0x80000000, 0x2, 0x80, 0x23, 0x4, 0x4, 0x2, 0x81, 0xffff, 0x5f8, 0x7, 0x8, 0x6, 0x3, 0x7, 0xf1, 0x5, 0x8, 0x9, 0x8, 0x2, 0x9, 0x401, 0x800, 0x5, 0x6, 0x1, 0x4, 0x0, 0x3, 0xfffffffb, 0x2, 0x4, 0x5, 0x5, 0xda, 0x2, 0x0, 0x7, 0x2, 0x7, 0xc5, 0x9]}, 0x45c) 3.467386288s ago: executing program 9 (id=4285): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b80006990300000004001500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) 3.327490982s ago: executing program 9 (id=4286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffffffffffe2b}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.306275633s ago: executing program 7 (id=4287): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x4, 0x225}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 3.129216297s ago: executing program 2 (id=4288): unshare(0x6a040000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) 2.856317253s ago: executing program 7 (id=4289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="090f26bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 1.460688507s ago: executing program 7 (id=4290): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 371.714831ms ago: executing program 6 (id=4291): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x54}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) 304.567753ms ago: executing program 7 (id=4292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d882dbd7000fddbdf25010000001400018008000100", @ANYRES32=r3, @ANYBLOB='!\x00', @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x128, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xf8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x8, 0x5, 0x3, 0x0, 0xf, 0xd, 0xd, 0x2, 0x14, 0x1, 0xf, 0x1, 0xb, 0x2, 0x9, 0xd], 0x1, [0x16, 0xff7f, 0x0, 0x7, 0x6, 0x5, 0x8001, 0x2, 0xb, 0x5, 0x7, 0x7, 0x67, 0x8, 0xf, 0xa40b], [0x800, 0x4, 0x2, 0x6, 0x4, 0x3, 0x4, 0x200, 0x2, 0x0, 0xc4b, 0x401, 0x6, 0x81, 0x6, 0x5]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffff345}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xb, 0x6, 0x2, 0xd, 0x9, 0x4, 0xc, 0x9, 0xe, 0x3, 0x9, 0x9, 0x10, 0x9, 0xf, 0x8], 0x0, [0xf, 0x7, 0xc4d, 0x7, 0xb, 0x9b7c, 0x8000, 0x5, 0x5, 0x1, 0x7, 0x1, 0x9, 0x4, 0x10, 0x66], [0x8, 0x1, 0x90, 0x8, 0xffff, 0xc, 0xff, 0x81, 0x187, 0x7, 0x0, 0x56db, 0x4, 0x0, 0x3, 0x4]}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 0s ago: executing program 2 (id=4293): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x48}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x0) kernel console output (not intermixed with test programs): [ 708.692758][T14079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2628'. [ 708.694192][T14082] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2630'. [ 708.734779][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2628'. [ 708.775654][T14079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2628'. [ 709.088131][T14100] xt_hashlimit: size too large, truncated to 1048576 [ 709.589890][T14128] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2648'. [ 711.722809][T14164] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2663'. [ 711.981755][T14174] loop8: detected capacity change from 0 to 128 [ 712.221901][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2670'. [ 714.122406][T14197] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2680'. [ 716.007151][T14229] loop8: detected capacity change from 0 to 512 [ 716.021884][T14229] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2689: inode has both inline data and extents flags [ 716.035259][T14229] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 716.037528][T14229] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2689: couldn't read orphan inode 15 (err -117) [ 716.046710][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 716.046735][ C0] EXT4-fs (loop8): initial error at time 1770981123: ext4_orphan_get:1391: inode 15 [ 716.046776][ C0] EXT4-fs (loop8): last error at time 1770981123: ext4_orphan_get:1391: inode 15 [ 716.084442][T14229] loop8: lost filesystem error report for type 5 error -117 [ 716.096926][T14229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.357111][ T7480] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.803636][T14247] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2696'. [ 717.830773][T14270] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2704'. [ 718.688592][T14305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 718.984725][T14313] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2722'. [ 719.874047][T14335] ip6gre1: entered allmulticast mode [ 719.934227][T14341] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2736'. [ 720.294100][T14350] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2741'. [ 720.430660][T14354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.505818][T14354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.613446][T14354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.736015][T14354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.927288][ T75] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.009663][ T75] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.110645][ T75] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.168855][ T75] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.564936][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2753'. [ 721.813999][T14393] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2758'. [ 723.161317][T14429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2773'. [ 724.030029][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2778'. [ 725.408432][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2793'. [ 727.040692][T14518] 9p: Bad value for 'wfdno' [ 729.233658][ T31] audit: type=1800 audit(1770981135.686:189): pid=14499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2797" name="file1" dev="ramfs" ino=40166 res=0 errno=0 [ 729.493053][ T29] kernel read not supported for file [fscontext] (pid: 29 comm: kworker/1:1) [ 734.705743][ T31] audit: type=1800 audit(1770981140.793:190): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2843" name="file1" dev="ramfs" ino=41091 res=0 errno=0 [ 737.077636][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2869'. [ 742.451712][ T31] audit: type=1800 audit(1770981148.033:191): pid=14755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2880" name="file1" dev="ramfs" ino=41238 res=0 errno=0 [ 742.539499][T14820] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.599220][T14820] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.686580][T14820] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.751008][T14820] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.877725][T14696] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.919519][T14696] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.940822][T14696] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.969716][T14696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.243897][T14833] xt_hashlimit: size too large, truncated to 1048576 [ 743.556767][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2914'. [ 745.247838][T14873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2929'. [ 745.525052][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2928'. [ 746.285922][T14888] xt_hashlimit: size too large, truncated to 1048576 [ 747.788782][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2951'. [ 748.469108][T14944] xt_hashlimit: size too large, truncated to 1048576 [ 749.720401][T14966] netlink: 'syz.0.2967': attribute type 8 has an invalid length. [ 749.823723][ T5820] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 750.120510][ T31] audit: type=1800 audit(1770981155.217:192): pid=14902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2940" name="file1" dev="ramfs" ino=41611 res=0 errno=0 [ 751.059276][T14988] xt_hashlimit: size too large, truncated to 1048576 [ 751.771255][T15014] loop8: detected capacity change from 0 to 128 [ 751.786704][T15014] FAT-fs (loop8): bogus number of reserved sectors [ 751.804802][T15014] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 751.816714][T15014] FAT-fs (loop8): Can't find a valid FAT filesystem [ 752.596584][T15034] Cannot find del_set index 4 as target [ 752.852031][ T5820] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 756.958251][T15066] netlink: 'syz.6.3003': attribute type 2 has an invalid length. [ 759.535659][ T5820] Bluetooth: hci6: unexpected event 0x06 length: 4 > 3 [ 760.450196][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 760.689572][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 760.707295][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.749430][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.782409][ T29] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 760.791524][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.889371][ T29] usb 9-1: config 0 descriptor?? [ 761.707916][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 761.771029][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 761.853029][ T29] usb 9-1: USB disconnect, device number 10 [ 763.640671][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3032'. [ 765.043536][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.060909][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.990303][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3051'. [ 768.213747][T15206] loop8: detected capacity change from 0 to 128 [ 768.620836][T15206] FAT-fs (loop8): bogus number of reserved sectors [ 769.282707][T15206] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 769.367163][T15206] FAT-fs (loop8): Can't find a valid FAT filesystem [ 770.360710][ T31] audit: type=1800 audit(2000000011.795:193): pid=15202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3050" name="file1" dev="ramfs" ino=41939 res=0 errno=0 [ 771.345905][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.363654][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.392792][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.409861][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.417500][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.699868][T15237] fuse: Bad value for 'fd' [ 772.099477][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3068'. [ 772.314907][T15231] chnl_net:caif_netlink_parms(): no params data found [ 773.629074][ T5820] Bluetooth: hci1: command tx timeout [ 773.835174][T15231] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.888273][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.174159][T15231] bridge_slave_0: entered allmulticast mode [ 775.470103][T15231] bridge_slave_0: entered promiscuous mode [ 775.532104][T15231] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.551528][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.578103][T15231] bridge_slave_1: entered allmulticast mode [ 775.595960][T15231] bridge_slave_1: entered promiscuous mode [ 775.741233][T15270] syz.8.3076 (15270) used greatest stack depth: 15136 bytes left [ 775.844746][ T5820] Bluetooth: hci1: command tx timeout [ 775.931750][T15231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.171743][T15231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.996718][T15231] team0: Port device team_slave_0 added [ 777.076925][T15231] team0: Port device team_slave_1 added [ 778.074658][ T5820] Bluetooth: hci1: command tx timeout [ 779.217742][T15231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.257743][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.378618][T15231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.476335][T15231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.522476][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.668037][T15231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.335230][ T5820] Bluetooth: hci1: command tx timeout [ 780.718797][ T31] audit: type=1800 audit(2000000021.542:194): pid=15323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3096" name="file1" dev="ramfs" ino=42220 res=0 errno=0 [ 780.917823][T15231] hsr_slave_0: entered promiscuous mode [ 780.948392][T15231] hsr_slave_1: entered promiscuous mode [ 781.022709][T15231] debugfs: 'hsr0' already exists in 'hsr' [ 781.028480][T15231] Cannot create hsr debugfs directory [ 781.719260][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3108'. [ 781.851910][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3110'. [ 782.353438][T15231] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.521128][T15231] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.712047][T15231] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.897561][T15231] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.416102][T15403] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3123'. [ 784.575117][T15231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 784.637815][T15231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 784.700161][T15231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 784.743496][T15231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 786.006250][T15231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.196731][T15431] overlayfs: failed to clone upperpath [ 786.945728][T15231] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.810074][ T31] audit: type=1800 audit(2000000028.174:195): pid=15399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3122" name="file1" dev="ramfs" ino=43248 res=0 errno=0 [ 787.861444][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.868585][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.014464][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.021671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.265418][T15231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 788.291260][T15231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.590429][T15231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.480982][T15231] veth0_vlan: entered promiscuous mode [ 794.508938][T15231] veth1_vlan: entered promiscuous mode [ 794.546215][T15231] veth0_macvtap: entered promiscuous mode [ 794.565233][T15231] veth1_macvtap: entered promiscuous mode [ 794.608393][T15231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.617349][ T5907] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 794.630037][T15231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.727262][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.766684][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.820180][ T5907] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 794.841308][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 794.868328][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.897949][ T5907] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 794.908853][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.938700][ T5907] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 794.947985][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.958416][ T5907] usb 9-1: Product: syz [ 794.964319][ T5907] usb 9-1: Manufacturer: syz [ 794.973569][ T5907] usb 9-1: SerialNumber: syz [ 795.016827][ T5907] usb 9-1: config 0 descriptor?? [ 795.021959][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.046631][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.054400][T15489] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 795.142329][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.183781][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.229614][T15509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3160'. [ 795.313883][T15489] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 797.028556][ T5907] usb 9-1: USB disconnect, device number 11 [ 801.641166][T15547] loop8: detected capacity change from 0 to 512 [ 801.721339][T15563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3175'. [ 801.824852][T15566] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3177'. [ 803.710400][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3185'. [ 804.274946][T15594] SQUASHFS error: Failed to read block 0x0: -5 [ 804.283888][T15594] unable to read squashfs_super_block [ 804.325975][T15596] fuse: Bad value for 'fd' [ 804.739515][T15610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3193'. [ 804.889337][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3194'. [ 805.180072][ T5820] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 808.971393][T15658] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3209'. [ 809.172219][ T5820] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 809.188955][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 811.527785][T15683] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 811.783144][T15683] block device autoloading is deprecated and will be removed. [ 813.775122][ T5820] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 817.420640][ T31] audit: type=1326 audit(2000000013.413:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.9.3241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x0 [ 820.319509][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 822.487355][ T5820] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 823.412075][ T31] audit: type=1326 audit(2000000019.007:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 823.514579][T10133] libceph: connect (1)[c::]:6789 error -101 [ 823.521112][T10133] libceph: mon0 (1)[c::]:6789 connect error [ 823.610263][ T31] audit: type=1326 audit(2000000019.007:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 823.706468][ T31] audit: type=1326 audit(2000000019.007:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 823.826436][T10133] libceph: connect (1)[c::]:6789 error -101 [ 823.856086][ T31] audit: type=1326 audit(2000000019.007:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 823.856243][T10133] libceph: mon0 (1)[c::]:6789 connect error [ 823.914199][T15832] loop8: detected capacity change from 0 to 1024 [ 823.946118][T15832] EXT4-fs: Ignoring removed orlov option [ 824.040945][ T31] audit: type=1326 audit(2000000019.007:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 824.103420][T15832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.195325][ T31] audit: type=1326 audit(2000000019.007:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 824.315399][ T31] audit: type=1326 audit(2000000019.007:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 824.406719][ T7480] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.427175][ T31] audit: type=1326 audit(2000000019.007:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 824.533266][ T31] audit: type=1326 audit(2000000019.007:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 824.562064][T10133] libceph: connect (1)[c::]:6789 error -101 [ 824.572482][T10133] libceph: mon0 (1)[c::]:6789 connect error [ 824.598561][ T31] audit: type=1326 audit(2000000019.007:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b739bf79 code=0x7ffc0000 [ 824.852709][T15825] ceph: No mds server is up or the cluster is laggy [ 825.687081][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 826.746370][ T5820] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 827.886420][ T5992] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 828.148166][ T5992] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 828.402518][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.213414][ T5992] usb 1-1: config 0 descriptor?? [ 829.490042][ T5992] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 829.645419][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3286'. [ 829.877390][ T5992] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 829.939984][ T5992] [drm] Initialized udl on minor 2 [ 830.206489][ T5992] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 830.271042][ T5992] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 830.316923][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 830.347543][ T5992] usb 1-1: USB disconnect, device number 3 [ 830.386375][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 830.416509][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.423267][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 830.615987][ T5820] Bluetooth: hci6: unexpected event 0x06 length: 4 > 3 [ 836.607749][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 836.652876][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3304'. [ 837.226178][T15964] netlink: 'syz.7.3307': attribute type 12 has an invalid length. [ 839.748746][T15980] tipc: Started in network mode [ 839.753986][T15980] tipc: Node identity 4, cluster identity 4711 [ 839.760199][T15980] tipc: Node number set to 4 [ 840.104320][T15990] syz.9.3312 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 840.130057][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3312'. [ 848.023110][T16061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3336'. [ 848.155487][T16061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3336'. [ 848.278126][T16064] loop8: detected capacity change from 0 to 512 [ 849.317957][T16064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.331042][T16064] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.218653][ T7480] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.697187][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 850.697209][ T31] audit: type=1326 audit(2000000002.722:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 850.805049][ T31] audit: type=1326 audit(2000000002.750:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 851.126253][ T31] audit: type=1326 audit(2000000002.759:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 851.258080][ T31] audit: type=1326 audit(2000000002.759:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 851.340930][ T31] audit: type=1326 audit(2000000002.759:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 851.462733][ T31] audit: type=1326 audit(2000000002.759:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 851.572271][ T31] audit: type=1326 audit(2000000002.778:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 851.665571][ T31] audit: type=1326 audit(2000000002.778:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 852.693880][ T31] audit: type=1326 audit(2000000002.778:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 852.890436][ T31] audit: type=1326 audit(2000000002.778:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.8.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a179bf79 code=0x7ffc0000 [ 854.861984][T16116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3352'. [ 854.929142][T16116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3352'. [ 855.189059][T16123] tipc: Started in network mode [ 855.213621][T16123] tipc: Node identity 4, cluster identity 4711 [ 855.231886][T16123] tipc: Node number set to 4 [ 855.816166][T16134] loop0: detected capacity change from 0 to 512 [ 855.847678][T16134] EXT4-fs: Ignoring removed nobh option [ 855.897307][T16134] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 855.943168][T16134] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 856.011744][T16134] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 856.052617][T16134] EXT4-fs (loop0): 1 truncate cleaned up [ 856.076890][T16134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.349889][T15231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.047506][T16156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3365'. [ 857.306223][T16159] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3367'. [ 857.372034][T16159] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3367'. [ 858.940754][T16172] team0: No ports can be present during mode change [ 859.029027][T16139] loop8: detected capacity change from 0 to 40427 [ 859.110727][T16139] F2FS-fs (loop8): Image doesn't support compression [ 859.155426][T16139] F2FS-fs (loop8): build fault injection rate: 691 [ 859.211316][T16139] F2FS-fs (loop8): invalid crc value [ 860.745397][T16139] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 860.792730][T16139] F2FS-fs (loop8): Start checkpoint disabled! [ 860.875202][T16139] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 860.887755][T16139] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 861.389575][T16212] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3383'. [ 861.428612][T16212] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3383'. [ 861.802224][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3386'. [ 862.898981][T16229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 864.341357][T16253] overlayfs: failed to clone upperpath [ 865.303213][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3398'. [ 865.806107][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3401'. [ 866.186588][T16277] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:088d:e2ff:fe00:9ea4 error=-28 [ 869.754156][T16293] ceph: No mds server is up or the cluster is laggy [ 869.762223][ T5926] libceph: connect (1)[c::]:6789 error -22 [ 869.768245][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 870.016739][T16277] infiniband syz1: set active [ 870.041057][T16277] infiniband syz1: added syz_tun [ 870.082575][T16277] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 870.086123][T16277] infiniband syz1: Couldn't open port 1 [ 870.295307][T16277] RDS/IB: syz1: added [ 870.323742][T16277] smc: adding ib device syz1 with port count 1 [ 870.349757][T16277] smc: ib device syz1 port 1 has no pnetid [ 878.092952][T16345] loop0: detected capacity change from 0 to 4096 [ 878.356886][T16346] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 878.620700][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.652165][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.669067][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.702046][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.711493][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 880.175950][T16355] loop0: detected capacity change from 0 to 32768 [ 880.291957][T16355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3430 (16355) [ 880.323555][T16378] overlayfs: failed to clone upperpath [ 880.453198][T16355] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 880.527210][T16355] BTRFS info (device loop0): using sha256 checksum algorithm [ 880.967556][ T5820] Bluetooth: hci4: command tx timeout [ 881.756549][T16355] BTRFS info (device loop0): rebuilding free space tree [ 881.878816][T16402] xt_hashlimit: size too large, truncated to 1048576 [ 881.980720][T16355] BTRFS info (device loop0): disabling free space tree [ 882.026280][T16355] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 882.073726][T16355] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 882.202118][T16355] BTRFS info (device loop0): enabling ssd optimizations [ 882.248310][T16355] BTRFS info (device loop0): turning on async discard [ 882.294164][T16355] BTRFS info (device loop0): force clearing of disk cache [ 882.349531][T16355] BTRFS info (device loop0): enabling auto defrag [ 882.389589][T16355] BTRFS info (device loop0): max_inline set to 4096 [ 882.545121][T16230] syz.8.3382 (16230): drop_caches: 1 [ 882.841651][T15231] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 883.178930][ T5820] Bluetooth: hci4: command tx timeout [ 883.654568][T16416] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3446'. [ 883.706607][T16420] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 883.718103][T16348] chnl_net:caif_netlink_parms(): no params data found [ 883.772077][T16416] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3446'. [ 883.793740][T16420] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 883.808729][T16420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 883.820643][T16420] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 883.829536][T16420] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 885.419017][T16420] Bluetooth: hci4: command tx timeout [ 886.195305][T16420] Bluetooth: hci7: command tx timeout [ 886.580136][T16348] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.610052][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.632431][T16348] bridge_slave_0: entered allmulticast mode [ 886.688516][T16348] bridge_slave_0: entered promiscuous mode [ 887.012163][T16348] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.063962][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.113697][T16348] bridge_slave_1: entered allmulticast mode [ 887.151260][T16348] bridge_slave_1: entered promiscuous mode [ 887.478497][ T6023] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.639342][T16420] Bluetooth: hci4: command tx timeout [ 887.661328][T16348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.802130][ T6023] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.981280][T16348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.242199][T16277] bond0: (slave syz_tun): Releasing backup interface [ 888.294085][T14699] smc: removing ib device syz1 [ 888.395386][T16420] Bluetooth: hci7: command tx timeout [ 888.432988][T16348] team0: Port device team_slave_0 added [ 888.773464][ T6023] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.668524][T16348] team0: Port device team_slave_1 added [ 890.196189][ T6023] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.475110][T16348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.533351][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.624199][T16420] Bluetooth: hci7: command tx timeout [ 890.645761][T16348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.756471][T16348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.764336][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.883170][T16348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.950732][T16420] Bluetooth: Wrong link type (-22) [ 893.046251][T16420] Bluetooth: hci7: command tx timeout [ 893.093747][T16348] hsr_slave_0: entered promiscuous mode [ 893.193473][T16348] hsr_slave_1: entered promiscuous mode [ 893.228976][T16348] debugfs: 'hsr0' already exists in 'hsr' [ 893.264494][T16348] Cannot create hsr debugfs directory [ 896.210867][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 896.217228][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.985768][ T6023] bridge_slave_1: left allmulticast mode [ 897.991468][ T6023] bridge_slave_1: left promiscuous mode [ 898.865299][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.042368][ T6023] bridge_slave_0: left allmulticast mode [ 899.079151][ T6023] bridge_slave_0: left promiscuous mode [ 899.139357][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.838407][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.903801][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.992043][ T6023] bond0 (unregistering): Released all slaves [ 903.628668][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3487'. [ 903.805395][T16420] Bluetooth: hci1: command 0x0406 tx timeout [ 903.964986][T16561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3490'. [ 904.052391][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 904.558973][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3493'. [ 907.812418][T16603] syz_tun: entered allmulticast mode [ 907.916833][T16414] chnl_net:caif_netlink_parms(): no params data found [ 908.121955][ T6023] hsr_slave_0: left promiscuous mode [ 908.131529][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3505'. [ 908.152464][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3505'. [ 908.162829][ T6023] hsr_slave_1: left promiscuous mode [ 908.169078][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.196529][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3505'. [ 908.205376][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.228522][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.257564][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.319136][ T6023] veth1_macvtap: left promiscuous mode [ 908.332789][ T6023] veth0_macvtap: left promiscuous mode [ 908.363652][ T6023] veth1_vlan: left promiscuous mode [ 908.379748][ T6023] veth0_vlan: left promiscuous mode [ 908.932935][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3509'. [ 909.189546][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 909.322124][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 910.993323][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3517'. [ 911.035219][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3517'. [ 911.073094][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3517'. [ 911.132192][T16658] loop0: detected capacity change from 0 to 2048 [ 911.240493][T16542] loop0: p1 < > p3 [ 911.249603][T16542] loop0: p3 size 134217728 extends beyond EOD, truncated [ 911.306853][T16658] loop0: p1 < > p3 [ 911.356349][T16658] loop0: p3 size 134217728 extends beyond EOD, truncated [ 912.897163][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3524'. [ 912.932475][T16414] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.987305][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.032294][T16414] bridge_slave_0: entered allmulticast mode [ 913.063417][T16414] bridge_slave_0: entered promiscuous mode [ 913.100102][T16414] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.120452][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.144330][T16414] bridge_slave_1: entered allmulticast mode [ 913.161504][T16414] bridge_slave_1: entered promiscuous mode [ 913.187517][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3525'. [ 913.355615][T16671] udevd[16671]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 913.366843][T16542] udevd[16542]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 913.699037][ T6023] IPVS: stop unused estimator thread 0... [ 914.622312][T16414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.641597][T16414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.711220][T16414] team0: Port device team_slave_0 added [ 914.754843][T16414] team0: Port device team_slave_1 added [ 914.896094][T16414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.915662][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.208381][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3531'. [ 915.270734][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3531'. [ 915.315578][T16414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.340785][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3531'. [ 915.365863][T16414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.382460][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.507587][T16414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.534612][T16348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 915.611154][ T6023] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.887567][T16348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 916.963214][T16348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 917.063889][ T6023] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.138301][T16348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 917.262628][T16414] hsr_slave_0: entered promiscuous mode [ 917.303645][T16414] hsr_slave_1: entered promiscuous mode [ 917.349617][T16414] debugfs: 'hsr0' already exists in 'hsr' [ 917.380610][T16414] Cannot create hsr debugfs directory [ 917.430671][ T6023] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.646820][ T6023] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.260917][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3545'. [ 918.610073][ T6023] bond_slave_0: left promiscuous mode [ 918.626732][ T6023] bond_slave_1: left promiscuous mode [ 919.061210][ T6023] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 919.084617][ T6023] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 919.131973][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.172510][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.198175][ T6023] bond0 (unregistering): Released all slaves [ 919.255705][ T6023] bond1 (unregistering): Released all slaves [ 919.479308][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.982881][T16819] fuse: Bad value for 'fd' [ 922.030125][T16348] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.234822][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3556'. [ 922.480166][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.487334][T14696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.429190][T16837] syzkaller0: entered promiscuous mode [ 923.434718][T16837] syzkaller0: entered allmulticast mode [ 923.470394][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.477597][T14696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.792006][T16839] tipc: Enabling of bearer rejected, failed to enable media [ 925.638911][ T6023] hsr_slave_0: left promiscuous mode [ 925.653965][ T6023] hsr_slave_1: left promiscuous mode [ 925.664973][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.683359][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.703090][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.717108][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.756536][ T6023] veth1_macvtap: left promiscuous mode [ 925.769730][ T6023] veth0_macvtap: left promiscuous mode [ 925.775301][ T6023] veth1_vlan: left promiscuous mode [ 925.794499][ T6023] veth0_vlan: left promiscuous mode [ 925.933535][ T6023] pimreg (unregistering): left allmulticast mode [ 925.994492][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3568'. [ 926.458062][ C1] Unknown status report in ack skb [ 926.475918][ C1] Unknown status report in ack skb [ 926.751817][T16414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 926.762813][T16884] loop0: detected capacity change from 0 to 4096 [ 926.821521][T16414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 926.886541][T16414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 926.937795][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3579'. [ 926.941323][T16414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 927.949713][T16928] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3585'. [ 928.171433][T16414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.292087][T16414] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.362619][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.369860][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.414910][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.422136][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.587126][T16348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.685866][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3591'. [ 928.805300][T16348] veth0_vlan: entered promiscuous mode [ 928.866944][T16348] veth1_vlan: entered promiscuous mode [ 928.988705][T16348] veth0_macvtap: entered promiscuous mode [ 929.031595][T16348] veth1_macvtap: entered promiscuous mode [ 929.358238][T16348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.397722][T16348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.040863][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.071873][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.104098][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.146701][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.294309][T16978] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3598'. [ 930.407714][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.645519][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.653369][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.789125][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.819381][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.908180][T17028] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3612'. [ 932.667884][ T5828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 932.831895][T16414] veth0_vlan: entered promiscuous mode [ 932.872346][T16414] veth1_vlan: entered promiscuous mode [ 932.922755][ T5828] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 933.051244][T16414] veth0_macvtap: entered promiscuous mode [ 933.115364][T16414] veth1_macvtap: entered promiscuous mode [ 933.177672][T17037] fido_id[17037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 933.213778][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.498586][T17053] tmpfs: Bad value for 'mpol' [ 934.112416][ T5820] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 934.544788][T17071] loop0: detected capacity change from 0 to 64 [ 934.588896][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.706259][ T6023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.739703][ T6023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.770013][T17074] overlayfs: failed to clone upperpath [ 934.793514][ T6023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.813781][ T6023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.719702][T17084] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3626'. [ 935.876369][T17087] loop0: detected capacity change from 0 to 256 [ 936.226037][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.233916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.413112][T17097] loop2: detected capacity change from 0 to 4096 [ 936.464516][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.474940][T17097] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 936.504659][T17097] UDF-fs: Scanning with blocksize 512 failed [ 936.681505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.743103][T17097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.878245][T17097] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 937.939538][T17097] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 939.424207][T16420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 939.436127][T16420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 939.446097][T16420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 939.458756][T16420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 939.468462][T16420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.640545][T17174] loop2: detected capacity change from 0 to 128 [ 941.684565][T17174] FAT-fs (loop2): bogus number of reserved sectors [ 941.688912][ T5820] Bluetooth: hci0: command tx timeout [ 941.706458][T17174] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 941.818565][T17174] FAT-fs (loop2): Can't find a valid FAT filesystem [ 942.134597][T17172] syzkaller0: entered promiscuous mode [ 942.162696][T17172] syzkaller0: entered allmulticast mode [ 942.242655][ T50] syzkaller0: tun_net_xmit 48 [ 943.955754][ T5820] Bluetooth: hci0: command tx timeout [ 944.201676][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3655'. [ 944.259443][T17212] loop0: detected capacity change from 0 to 256 [ 944.271937][T17213] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3655'. [ 944.297808][T17212] exfat: Deprecated parameter 'utf8' [ 944.303256][T17212] exfat: Deprecated parameter 'namecase' [ 944.357467][T17212] exfat: Deprecated parameter 'namecase' [ 944.433134][T17212] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 945.746230][T17231] netlink: 'syz.9.3661': attribute type 4 has an invalid length. [ 946.124729][ T5820] Bluetooth: hci0: command tx timeout [ 947.948352][T17143] chnl_net:caif_netlink_parms(): no params data found [ 947.980036][T12931] syz_tun (unregistering): left allmulticast mode [ 948.023193][T17206] macvtap0: entered promiscuous mode [ 948.028733][T17206] macvtap0: entered allmulticast mode [ 948.036025][T17206] bridge0: port 3(macvtap0) entered blocking state [ 948.176119][T17206] bridge0: port 3(macvtap0) entered disabled state [ 948.255641][T17253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3669'. [ 948.348174][ T5820] Bluetooth: hci0: command tx timeout [ 948.955851][ T3534] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.003101][T17143] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.012356][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.019688][T17143] bridge_slave_0: entered allmulticast mode [ 949.031822][T17143] bridge_slave_0: entered promiscuous mode [ 949.053146][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.084524][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.103598][T17143] bridge_slave_1: entered allmulticast mode [ 949.152966][T17143] bridge_slave_1: entered promiscuous mode [ 949.207326][ T3534] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.734882][T17290] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3680'. [ 950.316065][T17282] loop2: detected capacity change from 0 to 4096 [ 950.510902][T17295] loop4: detected capacity change from 0 to 512 [ 950.516313][T17143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.627174][ T3534] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.788035][T17143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.991263][ T3534] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.088470][T17308] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3687'. [ 951.208687][T17143] team0: Port device team_slave_0 added [ 951.209174][T17306] loop4: detected capacity change from 0 to 4096 [ 951.468132][T17143] team0: Port device team_slave_1 added [ 952.097406][T17143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.098742][T17318] loop2: detected capacity change from 0 to 4096 [ 952.121701][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.215444][T17318] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 952.260981][T17318] UDF-fs: Scanning with blocksize 512 failed [ 952.282162][T17143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.350910][T17318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.475829][T17143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.516186][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.635226][T17143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.709846][T17318] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 953.306440][T17340] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3694'. [ 954.106678][ T3534] bridge_slave_1: left allmulticast mode [ 954.120227][ T3534] bridge_slave_1: left promiscuous mode [ 954.142997][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.698403][ T3534] bridge_slave_0: left allmulticast mode [ 954.747796][ T3534] bridge_slave_0: left promiscuous mode [ 954.856516][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.479799][T17356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3701'. [ 955.786831][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3700'. [ 957.050368][ T3534] gretap0 (unregistering): left promiscuous mode [ 957.463226][T17398] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3707'. [ 958.707047][ T3534] bond0 (unregistering): left promiscuous mode [ 958.750705][ T3534] bond_slave_0: left promiscuous mode [ 958.793138][ T3534] bond_slave_1: left promiscuous mode [ 958.858725][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.891094][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.912747][ T3534] bond0 (unregistering): Released all slaves [ 958.951946][T17143] hsr_slave_0: entered promiscuous mode [ 958.961444][T17143] hsr_slave_1: entered promiscuous mode [ 958.968258][T17143] debugfs: 'hsr0' already exists in 'hsr' [ 958.974155][T17143] Cannot create hsr debugfs directory [ 959.249197][ T3534] tipc: Left network mode [ 959.980015][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 960.164159][T17434] loop4: detected capacity change from 0 to 128 [ 960.301147][T17434] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 960.853167][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3720'. [ 961.783118][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.789693][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 961.902244][T17434] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 962.913798][T16414] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 963.171903][ T3534] hsr_slave_0: left promiscuous mode [ 963.220211][ T3534] hsr_slave_1: left promiscuous mode [ 963.420523][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.454170][ T3534] batadv0: mtu less than device minimum [ 963.494690][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.506471][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.517972][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.529767][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.541266][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.552783][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.564325][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.575839][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.587320][ T3534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 963.642315][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.669877][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.703879][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.741833][ T3534] batman_adv: batadv0: Interface deactivated: dummy0 [ 963.764202][ T3534] batman_adv: batadv0: Removing interface: dummy0 [ 963.861789][ T3534] veth1_macvtap: left promiscuous mode [ 963.880846][ T3534] veth0_macvtap: left promiscuous mode [ 963.921868][ T3534] veth1_vlan: left promiscuous mode [ 963.942991][ T3534] veth0_vlan: left promiscuous mode [ 964.282701][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'. [ 964.933143][T10133] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 965.764112][T10133] usb 5-1: Using ep0 maxpacket: 8 [ 965.985890][T10133] usb 5-1: unable to get BOS descriptor or descriptor too short [ 966.025164][T10133] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 966.057350][T10133] usb 5-1: can't read configurations, error -71 [ 967.313909][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 967.815948][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 970.163447][T17503] net_ratelimit: 30 callbacks suppressed [ 970.163472][T17503] Set syz1 is full, maxelem 65536 reached [ 972.185964][T17143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.355057][T17143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.385527][T17565] loop0: detected capacity change from 0 to 128 [ 972.445955][T17143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.467444][T17565] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 972.528515][T17565] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 972.562670][T17143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 972.828709][ T3534] IPVS: stop unused estimator thread 0... [ 973.546111][ T5926] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 973.580412][T15231] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 973.770448][ T5926] usb 5-1: config 8 has an invalid interface number: 241 but max is 0 [ 973.813811][ T5926] usb 5-1: config 8 has no interface number 0 [ 973.850946][ T5926] usb 5-1: config 8 interface 241 altsetting 0 endpoint 0x3 has invalid maxpacket 9224, setting to 1024 [ 973.906308][ T5926] usb 5-1: config 8 interface 241 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.958656][T17143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.993857][ T5926] usb 5-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=e2.24 [ 974.033004][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.089723][T17143] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.129414][ T5926] usb 5-1: Product: syz [ 974.175952][ T5926] usb 5-1: Manufacturer: syz [ 974.204372][ T5926] usb 5-1: SerialNumber: syz [ 974.250925][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.258125][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.283946][T17570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 974.302131][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'. [ 974.418073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.425252][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.413771][ T5926] usb 5-1: USB disconnect, device number 4 [ 975.783190][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 976.037213][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 976.176402][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 976.192716][ T9] usb 1-1: can't read configurations, error -61 [ 976.383266][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 976.594375][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 976.661028][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 976.729377][ T9] usb 1-1: can't read configurations, error -61 [ 976.795978][ T9] usb usb1-port1: attempt power cycle [ 977.330605][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 977.743502][T17637] loop2: detected capacity change from 0 to 128 [ 977.850521][T17637] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 977.966238][T17637] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 978.941536][T16348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 978.995489][T17143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.397148][T17039] IPVS: starting estimator thread 0... [ 981.520344][T17669] IPVS: using max 26 ests per chain, 62400 per kthread [ 981.769145][ T5992] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 982.101894][ T9] usb 1-1: device descriptor read/8, error -71 [ 982.136151][ T5992] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 982.178418][ T5992] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 982.265674][ T5992] usb 5-1: config 8 has no interface number 0 [ 982.288757][ T5992] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 982.464710][ T5992] usb 5-1: config 8 interface 177 has no altsetting 0 [ 982.471813][ T5992] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 982.499479][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.871168][ T5992] ir_toy 5-1:8.177: required endpoints not found [ 983.957500][T17143] veth0_vlan: entered promiscuous mode [ 983.979581][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3770'. [ 984.016583][T17143] veth1_vlan: entered promiscuous mode [ 984.026054][T17687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.057216][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3770'. [ 984.155018][T17143] veth0_macvtap: entered promiscuous mode [ 984.178015][T17143] veth1_macvtap: entered promiscuous mode [ 984.197869][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 984.251554][T17143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.283345][T17143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.348711][ T6023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.365981][T17703] xt_hashlimit: max too large, truncated to 1048576 [ 984.386116][ T6023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.401583][ T9] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 984.422002][T17703] No such timeout policy "syz1" [ 984.428139][T17705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.460753][ T6023] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.460825][ T6023] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.504726][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.504759][ T9] usb 1-1: config 0 has no interface number 0 [ 984.504806][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 253, changing to 11 [ 984.504838][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 984.504865][ T9] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.504914][ T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 984.504940][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.514919][ T9] usb 1-1: config 0 descriptor?? [ 984.541729][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 984.812616][ T9] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 984.820338][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 984.820403][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 985.082111][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.095878][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.293028][ T9] usb 1-1: USB disconnect, device number 8 [ 986.229142][T14696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.229170][T14696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.735693][T17727] loop0: detected capacity change from 0 to 4096 [ 987.738163][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3637'. [ 987.756750][T17727] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 987.756789][T17727] UDF-fs: Scanning with blocksize 512 failed [ 987.767820][T17727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 987.914956][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 987.975423][T17727] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 987.986647][T17727] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 988.119033][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 988.129285][ T9] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 988.129320][ T9] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 988.129345][ T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 988.129370][ T9] usb 3-1: config 250 has no interface number 0 [ 988.129415][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 988.129447][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 988.129477][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 988.129505][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 988.129534][ T9] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 988.129567][ T9] usb 3-1: config 250 interface 228 has no altsetting 0 [ 988.182713][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 988.182743][ T9] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 988.182763][ T9] usb 3-1: Product: syz [ 988.182776][ T9] usb 3-1: SerialNumber: syz [ 988.250703][ T9] hub 3-1:250.228: bad descriptor, ignoring hub [ 988.250736][ T9] hub 3-1:250.228: probe with driver hub failed with error -5 [ 988.497563][ T9] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 989.701942][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 989.859919][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 989.866995][ T30] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 989.867077][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.867149][ T30] usb 6-1: config 0 has no interface number 0 [ 989.867382][ T30] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 990.044868][ T30] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 990.044908][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.044940][ T30] usb 6-1: Product: syz [ 990.044959][ T30] usb 6-1: Manufacturer: syz [ 990.044977][ T30] usb 6-1: SerialNumber: syz [ 990.049041][ T30] usb 6-1: config 0 descriptor?? [ 990.078402][ T30] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 990.078487][ T30] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 990.436392][T17752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.454595][T17752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.652383][ T30] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 990.652800][ T30] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 992.991712][ T30] usb 6-1: USB disconnect, device number 4 [ 993.735383][ T9] usb 3-1: USB disconnect, device number 4 [ 993.767367][ T9] usblp0: removed [ 993.812775][T17808] loop0: detected capacity change from 0 to 4096 [ 993.887850][T17808] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 993.887879][T17808] UDF-fs: Scanning with blocksize 512 failed [ 994.121122][T17808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 994.638575][T17808] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 994.647612][T17808] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 996.643707][T17845] loop5: detected capacity change from 0 to 128 [ 997.942238][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3804'. [ 999.621278][T16420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.625864][T16420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.626958][T16420] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.636165][T16420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.636908][T16420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.249448][T17894] loop5: detected capacity change from 0 to 128 [ 1000.305255][T17894] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1000.306144][T17894] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.463806][T17875] chnl_net:caif_netlink_parms(): no params data found [ 1001.632566][T17143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1001.814180][ T5820] Bluetooth: hci2: command tx timeout [ 1002.523065][T17875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.556146][T17875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.556420][T17875] bridge_slave_0: entered allmulticast mode [ 1002.559020][T17875] bridge_slave_0: entered promiscuous mode [ 1002.590903][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3820'. [ 1002.590972][T17917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3820'. [ 1002.590995][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3820'. [ 1002.597671][T17875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.599934][T17875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.600109][T17875] bridge_slave_1: entered allmulticast mode [ 1002.621394][T17875] bridge_slave_1: entered promiscuous mode [ 1002.781156][T17875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.821220][T17875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.717390][T17875] team0: Port device team_slave_0 added [ 1003.720377][T17875] team0: Port device team_slave_1 added [ 1004.028093][ T5820] Bluetooth: hci2: command tx timeout [ 1004.111928][T17875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.111954][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.114799][T17875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.124365][T17875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.124382][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.124412][T17875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.302925][T17875] hsr_slave_0: entered promiscuous mode [ 1005.356277][T17875] hsr_slave_1: entered promiscuous mode [ 1005.377549][T17952] loop2: detected capacity change from 0 to 128 [ 1005.420788][T17952] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1005.422827][T17952] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.304548][ T5820] Bluetooth: hci2: command tx timeout [ 1006.513031][T16348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1007.431344][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3835'. [ 1007.431372][T17965] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3835'. [ 1007.431395][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3835'. [ 1007.648616][T17970] loop2: detected capacity change from 0 to 512 [ 1008.472278][ T5820] Bluetooth: hci2: command tx timeout [ 1009.193174][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3841'. [ 1011.367759][T17875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1011.437170][T17875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1011.491840][T17875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1011.560546][T17875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1011.661099][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3849'. [ 1011.661127][T18024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3849'. [ 1011.661148][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3849'. [ 1012.733650][T18036] loop2: detected capacity change from 0 to 2048 [ 1012.774911][T18038] loop5: detected capacity change from 0 to 512 [ 1012.805361][T17875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.808345][T17739] loop2: p1 < > p3 [ 1012.814866][T17739] loop2: p3 size 134217728 extends beyond EOD, truncated [ 1012.865491][T18036] loop2: p1 < > p3 [ 1012.877549][T18036] loop2: p3 size 134217728 extends beyond EOD, truncated [ 1012.900706][T17875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.265188][T16420] Bluetooth: hci4: command 0x0406 tx timeout [ 1013.420254][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.420384][T14696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.441172][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.441282][T14696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.925596][T17571] udevd[17571]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1014.927488][T17329] udevd[17329]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1015.270516][T17875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.614885][T17875] veth0_vlan: entered promiscuous mode [ 1015.654633][T17875] veth1_vlan: entered promiscuous mode [ 1015.741164][T17875] veth0_macvtap: entered promiscuous mode [ 1015.961435][T17875] veth1_macvtap: entered promiscuous mode [ 1016.797636][T17875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.834621][T17875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.900481][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.900540][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.900581][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.900641][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.957612][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1016.957653][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1016.957676][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1018.185984][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.186012][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.286248][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.286276][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.280490][T16420] Bluetooth: hci7: command 0x0406 tx timeout [ 1024.912148][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1024.912170][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1024.912187][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1028.250921][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.251023][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.202101][T16420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.205045][T16420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.206141][T16420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.236410][T16420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.240245][T16420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.516727][T18184] chnl_net:caif_netlink_parms(): no params data found [ 1030.622778][T18215] loop5: detected capacity change from 0 to 128 [ 1030.691378][T18215] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1030.694632][T18215] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.545916][ T5820] Bluetooth: hci3: command tx timeout [ 1031.761561][T17143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1032.278914][T18184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.279050][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.279241][T18184] bridge_slave_0: entered allmulticast mode [ 1032.293720][T18184] bridge_slave_0: entered promiscuous mode [ 1032.304457][T18184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.309862][T18184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.309999][T18184] bridge_slave_1: entered allmulticast mode [ 1032.321420][T18184] bridge_slave_1: entered promiscuous mode [ 1032.496256][T18184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.512090][T18184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.685242][T18184] team0: Port device team_slave_0 added [ 1032.702549][T18184] team0: Port device team_slave_1 added [ 1032.855764][T18184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.855788][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.855821][T18184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.870756][T18184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.870777][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.870810][T18184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.160525][T18184] hsr_slave_0: entered promiscuous mode [ 1033.161760][T18184] hsr_slave_1: entered promiscuous mode [ 1033.162525][T18184] debugfs: 'hsr0' already exists in 'hsr' [ 1033.162546][T18184] Cannot create hsr debugfs directory [ 1033.669466][T18248] loop2: detected capacity change from 0 to 512 [ 1033.725455][ T5820] Bluetooth: hci3: command tx timeout [ 1033.980702][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3893'. [ 1033.980724][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3893'. [ 1033.980740][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3893'. [ 1035.864245][T18271] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3896'. [ 1035.925219][T18282] loop2: detected capacity change from 0 to 128 [ 1035.927197][ T5820] Bluetooth: hci3: command tx timeout [ 1035.977312][T18282] FAT-fs (loop2): bogus number of reserved sectors [ 1035.977351][T18282] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1035.977365][T18282] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1036.330973][ T5820] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1037.488518][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1037.653553][T18300] loop5: detected capacity change from 0 to 512 [ 1037.712275][T16420] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1037.714261][T16420] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1037.714922][T16420] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1037.715824][T16420] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1037.716423][T16420] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1038.149503][T16420] Bluetooth: hci3: command tx timeout [ 1038.633304][T18184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1038.705281][T18184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1038.786694][T18184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1038.828601][T18184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1039.945632][T16420] Bluetooth: hci8: command tx timeout [ 1040.740072][T18301] chnl_net:caif_netlink_parms(): no params data found [ 1040.772556][T18340] loop5: detected capacity change from 0 to 128 [ 1040.800817][T18340] FAT-fs (loop5): bogus number of reserved sectors [ 1040.800838][T18340] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1040.800853][T18340] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1042.179896][ T5820] Bluetooth: hci8: command tx timeout [ 1042.221335][T18184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.370881][T18184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.534653][T14699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.534767][T14699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.557502][T18301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.557663][T18301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.557923][T18301] bridge_slave_0: entered allmulticast mode [ 1042.559978][T18301] bridge_slave_0: entered promiscuous mode [ 1042.562411][T18301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.562517][T18301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.607566][T18301] bridge_slave_1: entered allmulticast mode [ 1042.629438][T18301] bridge_slave_1: entered promiscuous mode [ 1043.275014][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.275125][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.371763][T18301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.414390][T18301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.610188][T18301] team0: Port device team_slave_0 added [ 1043.654059][T18301] team0: Port device team_slave_1 added [ 1043.794028][T18301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.794053][T18301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.794087][T18301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.799005][T18301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.799024][T18301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.799058][T18301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.006127][T18385] loop2: detected capacity change from 0 to 128 [ 1044.079045][T18385] FAT-fs (loop2): bogus number of reserved sectors [ 1044.079080][T18385] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1044.079099][T18385] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1044.491813][ T5820] Bluetooth: hci8: command tx timeout [ 1044.492555][ T5820] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1045.171193][T18301] hsr_slave_0: entered promiscuous mode [ 1045.185973][T18301] hsr_slave_1: entered promiscuous mode [ 1045.186816][T18301] debugfs: 'hsr0' already exists in 'hsr' [ 1045.186839][T18301] Cannot create hsr debugfs directory [ 1045.297129][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3924'. [ 1045.315576][T18395] loop2: detected capacity change from 0 to 4096 [ 1046.062379][T18395] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1046.062407][T18395] UDF-fs: Scanning with blocksize 512 failed [ 1046.086235][T18395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1046.114354][T18395] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1046.118464][T18395] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1046.703750][T16420] Bluetooth: hci8: command tx timeout [ 1046.782848][T18184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.074134][T18432] loop2: detected capacity change from 0 to 128 [ 1047.087081][T18432] FAT-fs (loop2): bogus number of reserved sectors [ 1047.087106][T18432] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1047.087126][T18432] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1047.168324][T18184] veth0_vlan: entered promiscuous mode [ 1047.185612][T18184] veth1_vlan: entered promiscuous mode [ 1047.262793][T18184] veth0_macvtap: entered promiscuous mode [ 1047.287446][T18184] veth1_macvtap: entered promiscuous mode [ 1047.444683][T16420] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1048.405651][T18184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.938668][T18184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.239287][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.239352][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.239398][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.239441][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.253191][T18453] loop2: detected capacity change from 0 to 4096 [ 1049.263523][T18453] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1049.263548][T18453] UDF-fs: Scanning with blocksize 512 failed [ 1049.309518][T18453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.377151][T18453] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1049.396305][T18453] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1049.725318][T18184] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 1049.859966][T18301] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1050.874051][T18301] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1050.917688][T18301] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1051.085607][T18301] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1051.134636][T14696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.134664][T14696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.175511][T18184] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 1051.352533][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.352562][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.774096][T17039] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1051.948968][T17039] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 1051.949014][T17039] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1051.949039][T17039] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1051.949063][T17039] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1051.949096][T17039] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00 [ 1051.949126][T17039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.965115][T17039] usb 6-1: config 0 descriptor?? [ 1051.966103][T18488] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1051.994407][T18301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.088521][T18301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.147976][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.148081][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.149944][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.150044][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.476872][T17039] hid-corsair-void 0003:1B1C:0A51.0003: unknown main item tag 0x0 [ 1052.511187][T17039] hid-corsair-void 0003:1B1C:0A51.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:0a51] on usb-dummy_hcd.5-1/input0 [ 1052.669613][T17039] hid-corsair-void 0003:1B1C:0A51.0003: failed to request firmware (reason: -71) [ 1052.677877][T17039] usb 6-1: USB disconnect, device number 5 [ 1052.824855][ T5926] hid-corsair-void 0003:1B1C:0A51.0003: failed to request battery (reason: -71) [ 1053.771571][T18509] fido_id[18509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1054.052857][T18520] loop3: detected capacity change from 0 to 512 [ 1055.043251][T18301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.220180][T18543] loop5: detected capacity change from 0 to 4096 [ 1055.339464][T18543] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1055.339492][T18543] UDF-fs: Scanning with blocksize 512 failed [ 1055.392750][T18543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1055.431480][T18543] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1055.434322][T18543] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1055.756980][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1056.738649][T18570] loop5: detected capacity change from 0 to 512 [ 1057.200831][T16944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1057.246543][T18301] veth0_vlan: entered promiscuous mode [ 1057.303415][T18301] veth1_vlan: entered promiscuous mode [ 1057.395097][T16944] usb 3-1: Using ep0 maxpacket: 32 [ 1057.406340][T16944] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1057.406372][T16944] usb 3-1: config 0 has no interface number 0 [ 1057.423908][T16944] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1057.423945][T16944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.423979][T16944] usb 3-1: Product: syz [ 1057.423998][T16944] usb 3-1: Manufacturer: syz [ 1057.424016][T16944] usb 3-1: SerialNumber: syz [ 1057.428536][T16944] usb 3-1: config 0 descriptor?? [ 1057.443740][T18301] veth0_macvtap: entered promiscuous mode [ 1057.471599][T18301] veth1_macvtap: entered promiscuous mode [ 1057.547386][T18301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.566629][T18301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.623371][ T1156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.623442][ T1156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.623512][ T1156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.623557][ T1156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.888428][T16944] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1057.888473][T16944] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1058.219764][T18620] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3987'. [ 1058.308614][T18301] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 1059.695374][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.695403][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.735640][T18301] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 1059.837560][T14696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.837590][T14696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.020471][T16944] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 1060.020748][T16944] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1060.042188][T16944] usb 3-1: USB disconnect, device number 5 [ 1060.787561][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3999'. [ 1060.863348][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3997'. [ 1060.883179][T18659] batadv0: entered promiscuous mode [ 1060.885053][T18659] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1060.888085][T18659] batadv0: left promiscuous mode [ 1063.034698][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4012'. [ 1063.124783][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1063.283400][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1063.285932][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1063.285961][ T9] usb 3-1: config 0 has no interface number 0 [ 1063.289335][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1063.289366][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.289391][ T9] usb 3-1: Product: syz [ 1063.289410][ T9] usb 3-1: Manufacturer: syz [ 1063.289428][ T9] usb 3-1: SerialNumber: syz [ 1063.302184][ T9] usb 3-1: config 0 descriptor?? [ 1063.358384][ T5992] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1063.521080][ T5992] usb 6-1: Using ep0 maxpacket: 32 [ 1063.523581][ T5992] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1063.523611][ T5992] usb 6-1: config 0 has no interface number 0 [ 1063.523683][ T5992] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1063.527386][ T5992] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1063.527444][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.527470][ T5992] usb 6-1: Product: syz [ 1063.527490][ T5992] usb 6-1: Manufacturer: syz [ 1063.527508][ T5992] usb 6-1: SerialNumber: syz [ 1063.561931][ T5992] usb 6-1: config 0 descriptor?? [ 1064.427245][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1064.427285][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1064.785252][T18736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.249393][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4019'. [ 1066.571284][T18751] fuse: Unknown parameter 'use00000000000000000000' [ 1066.740443][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1066.740673][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1066.751842][ T9] usb 3-1: USB disconnect, device number 6 [ 1068.178353][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4027'. [ 1068.196135][T18780] erspan0: entered promiscuous mode [ 1068.197983][T18780] erspan0: left promiscuous mode [ 1068.664702][ T5992] f81534 6-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 1068.664749][ T5992] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1068.664766][ T5992] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1068.664827][ T5992] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1068.735418][ T5992] usb 6-1: USB disconnect, device number 6 [ 1069.551000][T18793] loop2: detected capacity change from 0 to 128 [ 1069.620227][T18793] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1069.641990][T18793] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.946285][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1070.733985][T16348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1070.926464][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.929750][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.935388][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1070.940848][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1070.941505][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1071.614956][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1071.614983][T18821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1071.615005][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1072.579326][T18804] chnl_net:caif_netlink_parms(): no params data found [ 1072.953510][T18804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.953666][T18804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.953779][T18804] bridge_slave_0: entered allmulticast mode [ 1072.955432][T18804] bridge_slave_0: entered promiscuous mode [ 1072.957827][T18804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.962314][T18804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.962434][T18804] bridge_slave_1: entered allmulticast mode [ 1072.966172][T18804] bridge_slave_1: entered promiscuous mode [ 1072.995415][T18804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.998243][T18804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.026242][T18804] team0: Port device team_slave_0 added [ 1073.028781][T18804] team0: Port device team_slave_1 added [ 1073.054386][T18804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.054402][T18804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.054425][T18804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.057470][T18804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.057483][T18804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.057506][T18804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.129934][T16420] Bluetooth: hci5: command tx timeout [ 1073.154400][T18804] hsr_slave_0: entered promiscuous mode [ 1073.213436][T18804] hsr_slave_1: entered promiscuous mode [ 1073.222557][T18804] debugfs: 'hsr0' already exists in 'hsr' [ 1073.222585][T18804] Cannot create hsr debugfs directory [ 1073.471433][T16420] Bluetooth: hci0: command 0x0406 tx timeout [ 1074.020115][T18804] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.334459][T18804] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.531903][T16420] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1074.544660][T16420] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1074.546259][T16420] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1074.574993][T16420] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1074.575999][T16420] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1074.649875][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1074.649898][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1074.673272][T18804] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.987479][T18804] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 1074.988106][T18804] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.018315][T18889] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4062'. [ 1075.354234][T16420] Bluetooth: hci5: command tx timeout [ 1076.375405][T18912] syzkaller0: entered promiscuous mode [ 1076.375436][T18912] syzkaller0: entered allmulticast mode [ 1076.392008][T18804] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1076.494830][T18804] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1076.522156][T18804] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1076.810286][T16420] Bluetooth: hci9: command tx timeout [ 1076.924209][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1077.017723][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4074'. [ 1077.105512][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1077.108466][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1077.109603][ T10] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1077.133285][ T10] usb 9-1: string descriptor 0 read error: -22 [ 1077.133422][ T10] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1077.133443][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.147504][ T10] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1077.185314][ T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1077.185731][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1077.185783][ T10] usb 9-1: media controller created [ 1077.351435][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1077.428983][T18931] usb 9-1: dvb_usb_au6610: wlen=0, aborting [ 1077.513120][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1077.581540][T16420] Bluetooth: hci5: command tx timeout [ 1077.665444][ T10] usb 9-1: USB disconnect, device number 12 [ 1079.030691][T16420] Bluetooth: hci9: command tx timeout [ 1079.802067][T16420] Bluetooth: hci5: command tx timeout [ 1081.264779][T16420] Bluetooth: hci9: command tx timeout [ 1081.453266][T18966] Set syz1 is full, maxelem 65536 reached [ 1081.859665][T18979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.019951][T18982] loop8: detected capacity change from 0 to 128 [ 1083.044178][T18982] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1083.044519][T18982] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.234494][T18804] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1083.290296][T18874] chnl_net:caif_netlink_parms(): no params data found [ 1083.358609][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4081'. [ 1083.477512][T16420] Bluetooth: hci9: command tx timeout [ 1084.206786][T18301] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1084.796108][T18874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.796260][T18874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.796415][T18874] bridge_slave_0: entered allmulticast mode [ 1084.817121][T18874] bridge_slave_0: entered promiscuous mode [ 1084.826703][T18874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.826791][T18874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.826906][T18874] bridge_slave_1: entered allmulticast mode [ 1084.829476][T18874] bridge_slave_1: entered promiscuous mode [ 1084.976863][T18874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.990543][T18874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.086503][T18874] team0: Port device team_slave_0 added [ 1085.090263][T18874] team0: Port device team_slave_1 added [ 1085.213920][T18874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.213938][T18874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.213962][T18874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.226491][T18874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.247144][T18874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.247172][T18874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.407772][T18804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.492547][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4089'. [ 1085.496713][T19028] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 1085.496749][T19028] caif:caif_disconnect_client(): nothing to disconnect [ 1085.504301][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4083'. [ 1085.539100][T19028] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 1085.539123][T19028] chnl_net:chnl_net_open(): state disconnected [ 1085.539141][T19028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1086.108010][T19013] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1086.153730][T18804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.206094][T18874] hsr_slave_0: entered promiscuous mode [ 1086.211437][T18874] hsr_slave_1: entered promiscuous mode [ 1086.212054][T18874] debugfs: 'hsr0' already exists in 'hsr' [ 1086.212072][T18874] Cannot create hsr debugfs directory [ 1086.370927][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.371029][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.411414][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.411494][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.849358][T18804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.194212][T19073] loop2: detected capacity change from 0 to 128 [ 1089.253466][T19073] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1089.272441][T19073] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.291040][T18874] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1090.388423][T18874] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1090.470573][T16348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.681759][T18874] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1092.224132][T18874] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1092.486610][T19100] netlink: 'syz.9.4098': attribute type 2 has an invalid length. [ 1092.810253][T19081] Set syz1 is full, maxelem 65536 reached [ 1092.916726][T19102] netlink: 'syz.9.4098': attribute type 2 has an invalid length. [ 1092.967832][T19100] !: entered promiscuous mode [ 1093.150952][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1093.151018][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.585151][T18874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.621331][T18874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.631401][T18804] veth0_vlan: entered promiscuous mode [ 1093.668350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.668436][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.697155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.697234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.881268][T18804] veth1_vlan: entered promiscuous mode [ 1094.932535][T18874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.984083][T19137] loop5: detected capacity change from 0 to 128 [ 1095.004209][T18804] veth0_macvtap: entered promiscuous mode [ 1095.022159][T18804] veth1_macvtap: entered promiscuous mode [ 1095.143745][T19137] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1095.172338][T19137] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.176329][T18804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.218398][T18804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.598513][T14699] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.137367][T14696] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.175250][T17143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1096.184089][T14699] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.184154][T14699] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.184258][T19136] netlink: 'syz.8.4105': attribute type 1 has an invalid length. [ 1096.642171][T18804] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 1096.833321][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.833349][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.857324][T18804] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 1097.118993][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.119016][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.127553][T18874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.308650][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1099.406834][T19193] vlan2: entered allmulticast mode [ 1099.406856][T19193] bridge0: entered allmulticast mode [ 1100.760515][T19205] loop7: detected capacity change from 0 to 128 [ 1100.907544][T19205] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1100.922950][T19205] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.901307][T18804] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1102.236773][T18874] veth0_vlan: entered promiscuous mode [ 1102.276202][T18874] veth1_vlan: entered promiscuous mode [ 1102.393529][T18874] veth0_macvtap: entered promiscuous mode [ 1102.460843][T18874] veth1_macvtap: entered promiscuous mode [ 1102.606543][T18874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.609698][T18874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.650373][ T3534] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.650430][ T3534] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.650473][ T3534] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.650505][ T3534] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.011486][T18874] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 1103.250472][T18874] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 1103.300105][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.300130][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.354332][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.354357][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.744864][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4054'. [ 1104.744891][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4054'. [ 1104.744913][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4054'. [ 1106.352518][T19264] loop5: detected capacity change from 0 to 128 [ 1106.404855][T19264] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1106.569607][T19264] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.785942][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4135'. [ 1107.841898][T19290] vlan2: entered allmulticast mode [ 1107.841924][T19290] bridge0: entered allmulticast mode [ 1107.857326][T17143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1109.307539][T19291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.534766][T19321] loop2: detected capacity change from 0 to 4096 [ 1110.613494][T19321] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1110.613520][T19321] UDF-fs: Scanning with blocksize 512 failed [ 1110.652897][T19321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.662336][T19321] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1112.687073][T19345] netlink: 'syz.2.4146': attribute type 39 has an invalid length. [ 1119.113886][T19430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.320774][ T1156] bridge_slave_1: left allmulticast mode [ 1119.320799][ T1156] bridge_slave_1: left promiscuous mode [ 1119.320965][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.330540][ T1156] bridge_slave_0: left allmulticast mode [ 1119.330560][ T1156] bridge_slave_0: left promiscuous mode [ 1119.330731][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.676082][T19456] loop2: detected capacity change from 0 to 4096 [ 1121.728277][T19456] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1121.728305][T19456] UDF-fs: Scanning with blocksize 512 failed [ 1121.767251][T19456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1121.776059][T19456] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1123.281545][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.309117][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.322230][ T1156] bond0 (unregistering): Released all slaves [ 1123.354174][ T1156] bond1 (unregistering): Released all slaves [ 1123.460750][T19482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.460781][T19482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.512114][T19482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.512144][T19482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.627557][T19480] syzkaller0: entered promiscuous mode [ 1123.627580][T19480] syzkaller0: entered allmulticast mode [ 1125.166234][T19514] CUSE: info not properly terminated [ 1125.186034][ T1156] hsr_slave_0: left promiscuous mode [ 1125.189491][ T1156] hsr_slave_1: left promiscuous mode [ 1125.190797][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.190822][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.306533][ T1156] veth1_macvtap: left promiscuous mode [ 1125.306576][ T1156] veth0_macvtap: left promiscuous mode [ 1125.306680][ T1156] veth1_vlan: left promiscuous mode [ 1125.306755][ T1156] veth0_vlan: left promiscuous mode [ 1127.568897][T19553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1127.633794][T19556] loop6: detected capacity change from 0 to 128 [ 1127.879909][T19556] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1127.880390][T19556] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.723589][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1128.780249][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1130.114010][T18874] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1130.330186][T19589] CUSE: info not properly terminated [ 1133.231623][ T1156] IPVS: stop unused estimator thread 0... [ 1133.691629][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 1136.493786][T19663] CUSE: info not properly terminated [ 1139.660265][T19715] CUSE: info not properly terminated [ 1141.218437][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1141.394360][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1141.406488][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1141.406521][ T9] usb 3-1: config 0 has no interface number 0 [ 1141.406565][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1141.427009][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1141.427037][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.427056][ T9] usb 3-1: Product: syz [ 1141.427069][ T9] usb 3-1: Manufacturer: syz [ 1141.427083][ T9] usb 3-1: SerialNumber: syz [ 1141.429566][ T9] usb 3-1: config 0 descriptor?? [ 1143.506794][ T5926] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1143.683799][ T5926] usb 6-1: config 8 has an invalid interface number: 241 but max is 0 [ 1143.683869][ T5926] usb 6-1: config 8 has no interface number 0 [ 1143.683925][ T5926] usb 6-1: config 8 interface 241 altsetting 0 endpoint 0x3 has invalid maxpacket 9224, setting to 1024 [ 1143.683988][ T5926] usb 6-1: config 8 interface 241 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1143.691458][ T5926] usb 6-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=e2.24 [ 1143.691492][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.691516][ T5926] usb 6-1: Product: syz [ 1143.691535][ T5926] usb 6-1: Manufacturer: syz [ 1143.691553][ T5926] usb 6-1: SerialNumber: syz [ 1143.704397][T19762] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1143.854825][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4243'. [ 1143.870535][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4243'. [ 1144.048979][ T5926] usb 6-1: USB disconnect, device number 7 [ 1144.834611][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 1144.834660][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1144.834676][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1144.834739][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1144.857115][ T9] usb 3-1: USB disconnect, device number 7 [ 1145.686198][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1146.616251][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1146.788186][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.136939][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1147.136986][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.137012][ T9] usb 6-1: Product: syz [ 1147.137031][ T9] usb 6-1: Manufacturer: syz [ 1147.137050][ T9] usb 6-1: SerialNumber: syz [ 1147.140217][ T9] usb 6-1: config 0 descriptor?? [ 1147.405947][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1148.564491][ T1156] usb 6-1: Failed to submit usb control message: -110 [ 1148.564548][ T1156] usb 6-1: unable to send the bmi data to the device: -110 [ 1148.564565][ T1156] usb 6-1: unable to get target info from device [ 1148.564580][ T1156] usb 6-1: could not get target info (-110) [ 1148.564769][ T1156] usb 6-1: could not probe fw (-110) [ 1151.284212][T19860] vivid-007: disconnect [ 1151.411835][ T10] usb 6-1: USB disconnect, device number 8 [ 1151.743612][T19857] vivid-007: reconnect [ 1152.670225][T10133] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1153.383501][T10133] usb 6-1: device descriptor read/64, error -71 [ 1153.641882][T10133] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1153.799204][T19897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1153.811282][T10133] usb 6-1: device descriptor read/64, error -71 [ 1153.835757][T19897] random: crng reseeded on system resumption [ 1153.916408][T19897] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1153.916479][T19897] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1153.916513][T19897] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1153.916535][T19897] PM: hibernation: Basic memory bitmaps created [ 1153.955032][T19900] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 1153.965011][T10133] usb usb6-port1: attempt power cycle [ 1154.011054][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1154.173778][T19878] PM: hibernation: Basic memory bitmaps freed [ 1154.334875][T10133] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1154.363731][T10133] usb 6-1: device descriptor read/8, error -71 [ 1154.613045][T10133] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1154.634884][T10133] usb 6-1: device descriptor read/8, error -71 [ 1154.762789][T10133] usb usb6-port1: unable to enumerate USB device [ 1158.350492][T19937] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1158.831572][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1158.831641][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1159.557046][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1161.058982][T16420] Bluetooth: hci3: command 0x0406 tx timeout [ 1161.101111][T19967] uinput: write device info first [ 1161.123499][ T5992] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1161.335520][ T5992] usb 9-1: Using ep0 maxpacket: 32 [ 1161.347976][ T5992] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1161.348012][ T5992] usb 9-1: config 0 has no interface number 0 [ 1161.348060][ T5992] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1161.365950][ T5992] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1161.365997][ T5992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.366022][ T5992] usb 9-1: Product: syz [ 1161.366065][ T5992] usb 9-1: Manufacturer: syz [ 1161.366084][ T5992] usb 9-1: SerialNumber: syz [ 1161.378492][ T5992] usb 9-1: config 0 descriptor?? [ 1163.076084][T19985] netlink: 'syz.7.4290': attribute type 10 has an invalid length. [ 1163.108927][T19985] team0: Port device dummy0 added [ 1163.154776][T19985] netlink: 'syz.7.4290': attribute type 10 has an invalid length. [ 1163.909915][T19985] team0: Port device dummy0 removed [ 1163.929770][T19985] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1164.806542][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4292'. [ 1165.679407][ T32] INFO: task syz.0.3836:17968 blocked for more than 143 seconds. [ 1165.679568][ T32] Tainted: G L syzkaller #0 [ 1165.679663][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1165.679702][ T32] task:syz.0.3836 state:D stack:27768 pid:17968 tgid:17967 ppid:15231 task_flags:0x400140 flags:0x00080002 [ 1165.680142][ T32] Call Trace: [ 1165.680179][ T32] [ 1165.680292][ T32] __schedule+0x157c/0x52b0 [ 1165.680709][ T32] ? __pfx___schedule+0x10/0x10 [ 1165.680881][ T32] ? schedule+0x90/0x360 [ 1165.681049][ T32] schedule+0x164/0x360 [ 1165.681183][ T32] schedule_preempt_disabled+0x13/0x30 [ 1165.681293][ T32] __mutex_lock+0x7fe/0x1300 [ 1165.681430][ T32] ? __mutex_lock+0x5ac/0x1300 [ 1165.681578][ T32] ? tty_open+0x22d/0xd70 [ 1165.681722][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1165.681914][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.682039][ T32] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1165.682107][ T32] ? tomoyo_check_open_permission+0x38e/0x470 [ 1165.682188][ T32] ? tty_open+0x10e/0xd70 [ 1165.682258][ T32] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1165.682385][ T32] tty_open+0x22d/0xd70 [ 1165.682647][ T32] ? __pfx_tty_open+0x10/0x10 [ 1165.682714][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.682847][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.682942][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 1165.683117][ T32] chrdev_open+0x4cd/0x5e0 [ 1165.683266][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1165.683317][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.683399][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1165.683545][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1165.683622][ T32] do_dentry_open+0x785/0x14e0 [ 1165.683844][ T32] vfs_open+0x3b/0x340 [ 1165.683899][ T32] ? path_openat+0x2df0/0x3860 [ 1165.684018][ T32] path_openat+0x2e08/0x3860 [ 1165.684341][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.684448][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1165.684594][ T32] ? stack_depot_save_flags+0x33/0x810 [ 1165.684945][ T32] ? __pfx_path_openat+0x10/0x10 [ 1165.685037][ T32] ? __x64_sys_openat+0x138/0x170 [ 1165.685180][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.685239][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 1165.685476][ T32] do_file_open+0x23e/0x4a0 [ 1165.685629][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1165.685962][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1165.686018][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.686099][ T32] ? alloc_fd+0x64b/0x6c0 [ 1165.686311][ T32] do_sys_openat2+0x113/0x200 [ 1165.686415][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.686473][ T32] ? __se_sys_futex+0x3a8/0x450 [ 1165.686579][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1165.686691][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.686775][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.686856][ T32] ? rcu_is_watching+0x15/0xb0 [ 1165.686999][ T32] __x64_sys_openat+0x138/0x170 [ 1165.687183][ T32] do_syscall_64+0x14d/0xf80 [ 1165.687293][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.687347][ T32] ? trace_irq_disable+0x37/0x100 [ 1165.687492][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.687547][ T32] RIP: 0033:0x7fd0f039bf79 [ 1165.687620][ T32] RSP: 002b:00007fd0f1310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1165.687701][ T32] RAX: ffffffffffffffda RBX: 00007fd0f0615fa0 RCX: 00007fd0f039bf79 [ 1165.687771][ T32] RDX: 0000000000002982 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 1165.687817][ T32] RBP: 00007fd0f04327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.687917][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.687965][ T32] R13: 00007fd0f0616038 R14: 00007fd0f0615fa0 R15: 00007fff23a39838 [ 1165.688263][ T32] [ 1165.688754][ T32] INFO: task syz.0.3836:17974 blocked for more than 143 seconds. [ 1165.688874][ T32] Tainted: G L syzkaller #0 [ 1165.688916][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1165.688965][ T32] task:syz.0.3836 state:D stack:28120 pid:17974 tgid:17967 ppid:15231 task_flags:0x400040 flags:0x00080002 [ 1165.689467][ T32] Call Trace: [ 1165.689503][ T32] [ 1165.689574][ T32] __schedule+0x157c/0x52b0 [ 1165.689872][ T32] ? __pfx___schedule+0x10/0x10 [ 1165.690094][ T32] ? schedule+0x90/0x360 [ 1165.690248][ T32] schedule+0x164/0x360 [ 1165.690341][ T32] schedule_preempt_disabled+0x13/0x30 [ 1165.690426][ T32] __mutex_lock+0x7fe/0x1300 [ 1165.690494][ T32] ? __mutex_lock+0x5ac/0x1300 [ 1165.690802][ T32] ? tty_open+0x22d/0xd70 [ 1165.690873][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1165.690917][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.690959][ T32] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1165.691021][ T32] ? tomoyo_check_open_permission+0x38e/0x470 [ 1165.691051][ T32] ? tty_open+0x10e/0xd70 [ 1165.691087][ T32] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1165.691131][ T32] tty_open+0x22d/0xd70 [ 1165.691216][ T32] ? __pfx_tty_open+0x10/0x10 [ 1165.691252][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.691289][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.691344][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 1165.691390][ T32] chrdev_open+0x4cd/0x5e0 [ 1165.691418][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1165.691442][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.691496][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1165.691540][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1165.691564][ T32] do_dentry_open+0x785/0x14e0 [ 1165.691610][ T32] vfs_open+0x3b/0x340 [ 1165.691979][ T32] ? path_openat+0x2df0/0x3860 [ 1165.692024][ T32] path_openat+0x2e08/0x3860 [ 1165.692106][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.692141][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1165.692186][ T32] ? stack_depot_save_flags+0x33/0x810 [ 1165.692253][ T32] ? __pfx_path_openat+0x10/0x10 [ 1165.692289][ T32] ? __x64_sys_openat+0x138/0x170 [ 1165.692327][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.692358][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 1165.692422][ T32] do_file_open+0x23e/0x4a0 [ 1165.692466][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1165.692559][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1165.692586][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.692618][ T32] ? alloc_fd+0x64b/0x6c0 [ 1165.692663][ T32] do_sys_openat2+0x113/0x200 [ 1165.692715][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.692747][ T32] ? __se_sys_futex+0x3a8/0x450 [ 1165.692778][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1165.692813][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.692869][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.692900][ T32] ? rcu_is_watching+0x15/0xb0 [ 1165.692940][ T32] __x64_sys_openat+0x138/0x170 [ 1165.693016][ T32] do_syscall_64+0x14d/0xf80 [ 1165.693049][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.693075][ T32] ? trace_irq_disable+0x37/0x100 [ 1165.693114][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.693166][ T32] RIP: 0033:0x7fd0f039bf79 [ 1165.693190][ T32] RSP: 002b:00007fd0f12ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1165.693219][ T32] RAX: ffffffffffffffda RBX: 00007fd0f0616090 RCX: 00007fd0f039bf79 [ 1165.693240][ T32] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1165.693260][ T32] RBP: 00007fd0f04327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.693278][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.693318][ T32] R13: 00007fd0f0616128 R14: 00007fd0f0616090 R15: 00007fff23a39838 [ 1165.693360][ T32] [ 1165.693416][ T32] [ 1165.693416][ T32] Showing all locks held in the system: [ 1165.693430][ T32] 5 locks held by kworker/u8:1/13: [ 1165.693470][ T32] 3 locks held by kworker/1:2/30: [ 1165.693486][ T32] #0: ffff88813fe07548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1165.693564][ T32] #1: ffffc90000a67c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1165.693661][ T32] #2: ffffffff8e764540 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1165.693764][ T32] 1 lock held by khungtaskd/32: [ 1165.693779][ T32] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1165.693919][ T32] 2 locks held by getty/5571: [ 1165.693935][ T32] #0: ffff8880334130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1165.694017][ T32] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1165.694126][ T32] 2 locks held by kworker/0:3/5801: [ 1165.694143][ T32] 2 locks held by kworker/1:6/5926: [ 1165.694158][ T32] #0: ffff88813fe07548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1165.694264][ T32] #1: ffffc9000ac8fc40 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1165.694361][ T32] 5 locks held by kworker/0:7/5992: [ 1165.694377][ T32] #0: ffff8880222a7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1165.694452][ T32] #1: ffffc9000adcfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1165.694558][ T32] #2: ffff888029e2c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1165.694662][ T32] #3: ffff888027ed7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1165.694729][ T32] #4: ffff88802b1ff160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1165.694830][ T32] 4 locks held by syz.4.3765/17670: [ 1165.694849][ T32] 1 lock held by syz.0.3836/17968: [ 1165.694865][ T32] #0: ffffffff8efec9c8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 1165.694974][ T32] 1 lock held by syz.0.3836/17974: [ 1165.694990][ T32] #0: ffffffff8efec9c8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 1165.695071][ T32] 1 lock held by syz.1.3869/18126: [ 1165.695087][ T32] #0: ffffffff8efec9c8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 1165.695192][ T32] 1 lock held by syz.3.3985/18606: [ 1165.695208][ T32] #0: ffffffff8efec9c8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70 [ 1165.695312][ T32] 4 locks held by udevd/18980: [ 1165.695328][ T32] #0: ffff88806824bc30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1165.695433][ T32] #1: ffff8880551a7c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1165.695521][ T32] #2: ffff8880573a6e18 (kn->active#16){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1165.695628][ T32] #3: ffff888027ed7198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1165.695734][ T32] 1 lock held by syz.5.4281/19956: [ 1165.695750][ T32] 1 lock held by syz.9.4286/19970: [ 1165.695767][ T32] 2 locks held by dhcpcd-run-hook/19986: [ 1165.695784][ T32] 1 lock held by syz.6.4291/19994: [ 1165.695800][ T32] 2 locks held by syz.6.4291/20006: [ 1165.695816][ T32] 2 locks held by syz.7.4292/20002: [ 1165.695833][ T32] 2 locks held by syz.7.4292/20005: [ 1165.695873][ T32] 4 locks held by syz.2.4293/20003: [ 1165.695889][ T32] #0: ffff88807896a488 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1165.695986][ T32] #1: ffffffff8fc309b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1165.696092][ T32] #2: ffff8880321b00d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 1165.696189][ T32] #3: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1165.696271][ T32] [ 1165.696301][ T32] ============================================= [ 1165.696301][ T32] [ 1165.696313][ T32] NMI backtrace for cpu 0 [ 1165.696333][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.696364][ T32] Tainted: [L]=SOFTLOCKUP [ 1165.696373][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1165.696387][ T32] Call Trace: [ 1165.696396][ T32] [ 1165.696406][ T32] dump_stack_lvl+0xe8/0x150 [ 1165.696446][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1165.696486][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1165.696520][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1165.696564][ T32] sys_info+0x135/0x170 [ 1165.696598][ T32] watchdog+0xf90/0xfe0 [ 1165.696638][ T32] ? watchdog+0x209/0xfe0 [ 1165.696680][ T32] kthread+0x388/0x470 [ 1165.696717][ T32] ? __pfx_watchdog+0x10/0x10 [ 1165.696749][ T32] ? __pfx_kthread+0x10/0x10 [ 1165.696787][ T32] ret_from_fork+0x51e/0xb90 [ 1165.696821][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.696849][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.696878][ T32] ? __switch_to+0xc7d/0x1400 [ 1165.696908][ T32] ? __pfx_kthread+0x10/0x10 [ 1165.696947][ T32] ret_from_fork_asm+0x1a/0x30 [ 1165.697009][ T32] [ 1165.697039][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1165.697067][ C1] NMI backtrace for cpu 1 [ 1165.697083][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.697113][ C1] Tainted: [L]=SOFTLOCKUP [ 1165.697121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1165.697136][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1165.697163][ C1] RIP: 0010:___slab_alloc+0x153/0x6a0 [ 1165.697193][ C1] Code: 24 49 83 7e 40 00 74 0d 89 e8 25 00 01 00 00 0f 85 a0 01 00 00 81 e5 e0 ec 3b 01 4c 89 f7 89 ee 89 da e8 b0 ec ff ff 48 85 c0 <0f> 84 60 04 00 00 48 89 c5 48 89 c6 0f 1f 44 00 00 45 31 c0 41 f7 [ 1165.697213][ C1] RSP: 0018:ffffc900001278b8 EFLAGS: 00000286 [ 1165.697232][ C1] RAX: ffffea0000d72200 RBX: 00000000ffffffff RCX: 0000000000000003 [ 1165.697248][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888035c8f010 [ 1165.697263][ C1] RBP: 0000000000082820 R08: dffffc0000000000 R09: ffff888035c8f000 [ 1165.697279][ C1] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000082820 [ 1165.697293][ C1] R13: 0000000000000000 R14: ffff88813fe9e140 R15: ffffffff8716655a [ 1165.697316][ C1] FS: 0000000000000000(0000) GS:ffff8881255a0000(0000) knlGS:0000000000000000 [ 1165.697337][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.697352][ C1] CR2: 000056101d63de50 CR3: 00000000572d6000 CR4: 0000000000350ef0 [ 1165.697371][ C1] Call Trace: [ 1165.697378][ C1] [ 1165.697387][ C1] ? __pcs_replace_empty_main+0x239/0x620 [ 1165.697415][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1165.697446][ C1] __kmalloc_node_track_caller_noprof+0x304/0x7b0 [ 1165.697484][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1165.697508][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 1165.697547][ C1] __alloc_skb+0x2c1/0x7d0 [ 1165.697574][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 1165.697611][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1165.697641][ C1] process_scheduled_works+0xaec/0x17a0 [ 1165.697687][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1165.697725][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.697753][ C1] ? assign_work+0x3d5/0x5e0 [ 1165.697784][ C1] worker_thread+0xa50/0xfc0 [ 1165.697824][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.697857][ C1] kthread+0x388/0x470 [ 1165.697891][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1165.697919][ C1] ? __pfx_kthread+0x10/0x10 [ 1165.697954][ C1] ret_from_fork+0x51e/0xb90 [ 1165.697984][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.698010][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.698037][ C1] ? __switch_to+0xc7d/0x1400 [ 1165.698062][ C1] ? __pfx_kthread+0x10/0x10 [ 1165.698099][ C1] ret_from_fork_asm+0x1a/0x30 [ 1165.698145][ C1] [ 1165.848733][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1165.848764][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.848801][ T32] Tainted: [L]=SOFTLOCKUP [ 1165.848811][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1165.848827][ T32] Call Trace: [ 1165.848837][ T32] [ 1165.848848][ T32] vpanic+0x56c/0xa60 [ 1165.848890][ T32] ? __pfx___schedule+0x10/0x10 [ 1165.848921][ T32] ? __pfx_vpanic+0x10/0x10 [ 1165.848968][ T32] panic+0xc5/0xd0 [ 1165.849002][ T32] ? __pfx_panic+0x10/0x10 [ 1165.849039][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.849070][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1165.849105][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.849135][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1165.849188][ T32] watchdog+0xfda/0xfe0 [ 1165.849229][ T32] ? watchdog+0x209/0xfe0 [ 1165.849272][ T32] kthread+0x388/0x470 [ 1165.849311][ T32] ? __pfx_watchdog+0x10/0x10 [ 1165.849344][ T32] ? __pfx_kthread+0x10/0x10 [ 1165.849384][ T32] ret_from_fork+0x51e/0xb90 [ 1165.849420][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.849449][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1165.849480][ T32] ? __switch_to+0xc7d/0x1400 [ 1165.849511][ T32] ? __pfx_kthread+0x10/0x10 [ 1165.849551][ T32] ret_from_fork_asm+0x1a/0x30 [ 1165.849610][ T32] [ 1165.850051][ T32] Kernel Offset: disabled