last executing test programs: 4m1.318279101s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r0 = syz_io_uring_setup(0x156, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x2, 0x51}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m0.691760726s ago: executing program 2 (id=10): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x87fff, [0x9, 0x80000001], 0x24a4}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) 3m58.229300499s ago: executing program 2 (id=15): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {@fat=@debug}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_lower}, {@shortname_mixed}, {@fat=@flush}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 3m57.137018739s ago: executing program 2 (id=19): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 3m56.522453352s ago: executing program 2 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 3m54.381956789s ago: executing program 32 (id=22): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 3m50.660318261s ago: executing program 1 (id=33): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000810000009500000000ff07"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 3m49.713989853s ago: executing program 1 (id=35): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0xfffffffb}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 3m48.893238869s ago: executing program 1 (id=37): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000700)='\x00I;\xf6\xc8\x15\x94\xfa,\xc8\xb6\xac\x96\x90\x12H\xa34:~\xb3\xcaJT\xe2\xac\x1e\rXk\xe2k\x86\xe0\xaf\xf4\xb46!\x00\x83U\xd8\x02\xe5gn)\xa4\xfe\x00E\xf7\\jgN\xe0D/oj\xad\xd2\x00\x00\x00\xa6U$\xc4\a\x02\x96\x1c\xa1\x1d\xef5\xe8\x7f\xe3\x90\xfd!\xdeZ\x06\x11\x83\xf47\x01\xe1R2\xc1\xae!\xb7\xf6A\xa30\x94\xa3\x1dj$\x914z\x7f\xa20{\xfa)\xb2j\xba\x1f\x97q\x9bG\xc6\xc0u\x89\'\r\x96#6\x1f\f.m+\xa7~w\xc8+\x99\x12\x7f\xc9\x89\x0f\x05\v)\x9fO\x048\xf4bf\x18\x8b\x99\xb8\v\xeaY\xb6\xccSR\xa5\x86\xdf\xb3\x16}BN\x82\xfam\nx\x9f\xe0o\xc4*\xf0\x8d18\xd8\xf2\x1fr\xd7i,\xb0\xe9\x19\x9b[\xbe\x16\xe6\xc3N\xcb\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0) 3m44.214194821s ago: executing program 1 (id=46): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000100)={'bridge0\x00', 0x0}) epoll_create(0x101) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000100)='./cgroup/../file0/file1\x00', 0x110) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) 3m41.3090783s ago: executing program 33 (id=46): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000100)={'bridge0\x00', 0x0}) epoll_create(0x101) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000100)='./cgroup/../file0/file1\x00', 0x110) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) 2m48.623925743s ago: executing program 4 (id=147): ptrace$setregset(0x4205, 0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 2m44.13838212s ago: executing program 4 (id=159): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r1, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x8, 0xfff}}, 0x20) 2m42.131278007s ago: executing program 4 (id=165): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="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", 0x430}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c268", 0x1b}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000008300), 0x3, 0x20000020, 0x0) 2m40.68727862s ago: executing program 4 (id=170): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000680)=ANY=[@ANYBLOB='errors=remount-ro,errors=continue,errors=remount-ro,allow_utime=00000000000000000141077,discard,dmask=00000000000000000000003,iocharset=cp860,utf8,discard,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6b6565705f6c6173745f646f74732c6572726f72733d636f6e74696e75652c6d61736b3d5e4d41595f415050454e442c646566636f6e746578743d73797361646d5f752c736d61636b66736465663d212c6673636f6e746578743d73746166665f752c736d61636b6673726f6f743d2e212d8f2c2b2c856d61636b6673726f6f743d646d61736b2c6f626a5f747970653df12124215d293a27242c6f626a5f726f6c653d2f6465762f696f6d6d75002c00"], 0x1, 0x152f, &(0x7f00000037c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x5f) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) 2m39.422303468s ago: executing program 4 (id=173): prlimit64(0x0, 0xe, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) semctl$GETVAL(0xffffffffffffffff, 0x3, 0xc, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000004c0)=ANY=[], 0x102) 2m38.70598078s ago: executing program 4 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d35000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) syz_emit_vhci(0x0, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m36.438402461s ago: executing program 34 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d35000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) syz_emit_vhci(0x0, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 20.602748104s ago: executing program 6 (id=520): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x880, &(0x7f0000000140)={[{@namecase}, {@sys_tz}, {@discard}, {}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x1, 0x1548, &(0x7f0000003300)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 19.714432586s ago: executing program 5 (id=523): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 17.989631074s ago: executing program 3 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, 0x0, 0x8000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8c0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16, @ANYRESHEX, @ANYRES64, @ANYRESOCT], 0x81, 0x14ff, &(0x7f0000002a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0xffff, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1008}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) alarm(0x8000000000000001) 17.376630031s ago: executing program 0 (id=526): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17.018110595s ago: executing program 6 (id=527): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6583, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050000}, 0x44000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, 0x0, 0x8c0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000000)='\x00\x00MB\xcdl\xf5\b\x00\x00\x00\x00\x00\x00\x00\xf5^\xdb=') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(&(0x7f0000000280)=0x1, 0x1, 0x2, 0x0, 0x0, 0x0) 16.979023206s ago: executing program 7 (id=528): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) fcntl$dupfd(r2, 0x406, r2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 16.930313187s ago: executing program 5 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 9.549628425s ago: executing program 5 (id=530): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x1, 0x9e15, &(0x7f0000016380)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3}}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) openat$dir(0xffffffffffffff9c, 0x0, 0x13b003, 0x80) 9.352057746s ago: executing program 6 (id=531): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0xe, 0x0, 0xe, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=""/49, 0x31}], 0x1}}], 0x1, 0x101, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0x7fffffffffffffff, 0x3, 0x5}) shutdown(r4, 0x1) 9.277054845s ago: executing program 7 (id=532): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.271259252s ago: executing program 3 (id=542): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') mount$fuse(0x0, 0x0, 0x0, 0x10004, &(0x7f0000002140)=ANY=[]) read$FUSE(r2, &(0x7f0000006200)={0x2020}, 0xffe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, 0x0, 0x4040019) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) 7.986654297s ago: executing program 5 (id=533): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_open_procfs(0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 7.978935486s ago: executing program 0 (id=544): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 7.708917429s ago: executing program 3 (id=534): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000000800480002000000feffffff", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001"], 0x50, 0x4008066}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000008c0)={&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000003c0)="34f1", 0x2}], 0x1}, 0x40000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) timerfd_create(0x0, 0x800) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 5.418955942s ago: executing program 3 (id=535): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.262828648s ago: executing program 0 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f0000002440)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc63}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000000340)="35b3", 0x2}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x2, 0x240848c0) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400100016800c0001000000000000000fff080005000a000102060015000600000008000b000c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd699eebf900180e00fe800000000000000000000000277c9c154b37831db84f08ad000039fe80000000ebffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2000190780ffd03030900"], 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x80, 0x0, 0x3}, &(0x7f00000000c0)=[0x0], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x8cee000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000001a40)={&(0x7f0000000a40)=[0x7, 0x5, 0x1, 0x4, 0x4, 0x4, 0x5, 0x2, 0x3ff, 0x80000000, 0x9, 0x1, 0x4, 0x5, 0x1, 0x9, 0x400, 0x4, 0x101, 0x2, 0x4, 0x2bc, 0x8, 0x5, 0x8, 0xc, 0x62, 0x8, 0xfffffff8, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0x7, 0x40, 0x9, 0x1, 0x8, 0x1000, 0x400, 0x2, 0x2, 0x8, 0x1000, 0x12f600, 0x346f, 0xffffffff, 0x9, 0x7, 0xa999, 0x4, 0xb8, 0x514c, 0x5943, 0x1000, 0xfffffff9, 0x4, 0xd, 0xd, 0x10, 0x8, 0x81, 0x9, 0x9, 0x4, 0x7, 0x8, 0x0, 0x5, 0x80000000, 0x6, 0xe21c, 0x2, 0xfffffffc, 0x360, 0xc43, 0x8da0, 0x1, 0x0, 0x5a3, 0x6, 0x937f, 0x4, 0x6, 0x3, 0x5, 0x8, 0x4, 0x5, 0x9, 0x7fff, 0x400, 0x53000, 0x5, 0x6, 0xffffff81, 0x7, 0x20, 0x101, 0x7, 0xfffff801, 0xffff, 0x2, 0x9, 0x2c, 0x8, 0x5, 0x312a, 0x0, 0x578, 0x5, 0x80000, 0x9, 0x8, 0x6b, 0x71, 0x5, 0x5, 0x1, 0x5af, 0x7, 0x4, 0x2, 0x10000, 0xfffffff9, 0x6, 0x7, 0x3, 0x608, 0x6, 0x7ff, 0x7, 0x8, 0x4, 0x9, 0xffffffff, 0x2, 0xfffff801, 0x7, 0x1000, 0xa1, 0xc4, 0x401, 0x83b2, 0x800, 0x4, 0x6, 0x3, 0x89d9, 0x0, 0xfffffffb, 0x3, 0x5, 0x4b27, 0xc80, 0xa, 0x400, 0x0, 0x0, 0x8, 0x18000000, 0xebd6, 0x0, 0x80, 0xffffff80, 0x56e, 0x32b4, 0xff, 0x4, 0x6, 0x80000000, 0x7, 0xfffffffe, 0x80000001, 0x2, 0xe8, 0x80000000, 0x1, 0x3ff, 0xf90, 0x2, 0x6, 0x8, 0x400, 0x7, 0xd8, 0x4, 0x4, 0x5, 0x9, 0xffffe6c1, 0x4fc0, 0xffff, 0x10, 0x200, 0x0, 0x1, 0x800, 0x3, 0x6, 0x5, 0x80, 0x8, 0x10001, 0x9, 0x2, 0x2, 0x5, 0x9, 0x4, 0x7ff, 0x5, 0xf6, 0x3, 0x3a29, 0x3, 0xcf6, 0xfffffffb, 0x6, 0x43c2686e, 0x7, 0x3, 0x8, 0xb6, 0x6dad1303, 0x5, 0xfffffe01, 0x9, 0x4, 0x13, 0x8, 0x3, 0x6, 0x1000, 0x3, 0xffffc79e, 0x6, 0x0, 0x4, 0x10, 0x1, 0x2dcd, 0x5, 0x9eb1, 0x60, 0x5, 0xb7, 0x941, 0x7, 0xfffffff8, 0xfffffffd, 0xfe, 0x9, 0x401, 0x3, 0x10, 0x0, 0x4, 0x400, 0x6, 0x10001, 0x7, 0x4249, 0xe9c, 0x6, 0x95, 0xe, 0x5, 0x0, 0x6, 0x1, 0xa9f, 0xffff, 0x8, 0x341, 0xffffffff, 0xffffffff, 0x3, 0x7, 0x7fff, 0x4, 0x2, 0x280, 0x9, 0xff, 0x3, 0x100, 0xfc000000, 0x80000001, 0xab3e, 0x6, 0x7, 0xd6e, 0x3ff, 0x30dbfe49, 0x7, 0xbe0b, 0x8, 0x8, 0x9, 0x3, 0x2, 0x768b, 0x1000, 0x4, 0x2, 0x7, 0x0, 0x7ff, 0x64c, 0x42, 0x216f, 0xe, 0x2, 0x0, 0x6, 0x80, 0x6, 0x69, 0x1, 0x10, 0x1, 0x81, 0x100, 0x8, 0x5, 0x0, 0x10000, 0xfffff000, 0x9, 0x10, 0x6df2, 0xfffffffb, 0xf, 0x1, 0x1, 0x10001, 0x1ff, 0x2, 0x4, 0xfffffff0, 0x3, 0x9, 0x8, 0x4d4, 0x5, 0x5, 0x2, 0x1, 0xb, 0x2, 0x3f0b7687, 0x7, 0xccb2317, 0x6, 0x1, 0x6, 0x3, 0x7ad8, 0x5, 0x55a0, 0x401, 0x7, 0x7, 0x1000, 0x89, 0x3, 0x3ff, 0x8, 0x5, 0x3, 0x4b, 0x2, 0x3, 0x5, 0xc4e, 0x40, 0x0, 0x0, 0xfffffffa, 0x5, 0x6, 0xff, 0x80000001, 0xfffffffa, 0x0, 0x9, 0x9, 0x2, 0xa3, 0x9, 0x0, 0xc, 0xfffffff9, 0x4bc5, 0xcf50, 0x10, 0x59b8, 0x9, 0x1, 0x5, 0xffffffff, 0x800, 0x33, 0x6, 0x5, 0x5, 0x5, 0x34d1, 0x49f, 0x7, 0x41, 0x8, 0x8, 0x2, 0x4, 0x6, 0x81, 0x0, 0x8, 0x89b0, 0x2, 0x7, 0x1, 0x5, 0x401, 0xef2, 0x5, 0x100, 0xfe2, 0x401, 0x0, 0x4, 0x31, 0x7f, 0xfffffffb, 0x3, 0x2, 0x1, 0x9, 0x1, 0x554f, 0xc64b, 0x6, 0x5, 0x8, 0xfffffff9, 0x7ff, 0x2, 0x8b5, 0x3, 0xfffffffe, 0x400, 0x6, 0x4, 0x200, 0xfa0, 0x81, 0x4, 0x8, 0x7, 0x8, 0x7de7fe0, 0x4, 0xa, 0x3, 0x2, 0x4, 0x46e9, 0x0, 0x7, 0x78, 0x417f, 0x7, 0x6, 0x4, 0x0, 0xd3, 0xfec, 0x401, 0x1000, 0x5, 0x1000, 0x8, 0x0, 0x7f, 0x0, 0x9, 0xc, 0x2, 0x8, 0x4, 0x2, 0x9, 0xe, 0x0, 0x7, 0x0, 0x3, 0x38, 0xfffffffe, 0x1, 0x600, 0x5, 0xfffffffe, 0x90eb, 0x6, 0x3, 0x1b, 0x9, 0xffffff6c, 0x4, 0xa, 0x8, 0x4, 0x4, 0x6, 0x2, 0x1, 0x5, 0xd36, 0x9, 0xb, 0x2000, 0x1, 0x400, 0x0, 0x0, 0x7fffffff, 0x5, 0xfffffffc, 0x3, 0xc83, 0x7, 0x2, 0x8, 0x9, 0x3, 0x9, 0x800, 0x6, 0x35a, 0x10, 0x6, 0x8, 0x4, 0x401, 0xffffff2c, 0xee, 0xfff, 0x5f, 0x9, 0x8000, 0x73, 0x44, 0x6, 0x3, 0x1, 0x3, 0x6, 0x101, 0xff, 0x79d, 0x82a0, 0x1, 0x9, 0xb9, 0x80000001, 0x6, 0x3, 0x10000, 0x8, 0x3, 0xe, 0x7, 0x80, 0x0, 0x5, 0xfffffffa, 0x400, 0x80000001, 0x376e, 0x8, 0xc, 0x6, 0xe5, 0x7, 0x1, 0xfffffff8, 0x35, 0x5, 0x100, 0x9, 0x268aef99, 0xadb, 0xe, 0x4, 0x1, 0xf7, 0x8, 0x6, 0xb32, 0x0, 0xb, 0x6, 0x4d, 0x10001, 0xf88, 0x0, 0xfff, 0x3, 0x0, 0xffff7f20, 0xfffffffb, 0xfffffffe, 0x6, 0xa31, 0x2, 0x7, 0x254, 0x2, 0x1, 0x9, 0x7, 0x3, 0xa861, 0x244, 0xae, 0xae, 0x2, 0x7, 0x0, 0xc, 0x8, 0x0, 0x1, 0xf379, 0x100, 0x10, 0x1000, 0xffffff4f, 0x2, 0x6, 0x8c, 0x1, 0x4, 0x800, 0x6, 0x6, 0x3, 0x9, 0x4, 0x51944ae7, 0x5, 0x6, 0x0, 0x9, 0x8, 0xffffffff, 0x991, 0xc8be, 0x200, 0x5, 0x5, 0x5, 0xdf, 0x0, 0x4, 0x6, 0x8, 0x0, 0x2, 0xaa, 0x6, 0x0, 0x4, 0x8, 0x6, 0xb134, 0x81, 0x7313e64f, 0x3, 0xb, 0xb3, 0x52e2, 0x6, 0x5, 0x8, 0x9, 0x81, 0xf, 0x8, 0x2, 0x0, 0x2, 0xffffffff, 0x5, 0x6, 0x1000, 0x3, 0x7, 0x4bbe, 0x2, 0x400, 0x6, 0xfffffffb, 0x3, 0x49, 0x4a, 0x2, 0x986, 0x3ff, 0x0, 0x9, 0x2, 0x3862, 0x3, 0x7aa, 0xfff, 0xfa, 0x800, 0x1, 0x9, 0x100, 0x8, 0xce, 0xffffffe9, 0x3, 0x2, 0x2, 0xa, 0x0, 0xffffffff, 0x9c, 0x5, 0x6, 0xfffffffd, 0x2, 0x0, 0x81, 0x6, 0x7f, 0x9, 0x8, 0x3a5, 0xfe, 0xc3e7, 0x1, 0x8, 0x3, 0x0, 0x790, 0x3, 0xfff, 0x423, 0x1000, 0x7, 0x3, 0x79, 0x6, 0x3ff, 0x7, 0x2, 0xfffffff9, 0x6, 0x8, 0x10000, 0x8, 0x8de7, 0x2, 0x2, 0x0, 0x7f16, 0x1, 0xa, 0xb9, 0x5, 0x800, 0x5, 0x9, 0x1, 0x0, 0x1ffc0, 0xffff0e45, 0xce, 0x3, 0x10000, 0x9, 0x7c0b9e5d, 0x2, 0x1, 0x9, 0x2, 0x5, 0x6, 0x5c6, 0x85, 0x6, 0x5, 0xfffffff8, 0x80000000, 0x8c, 0x8, 0xff, 0x1, 0x0, 0x7, 0x5, 0x2, 0x7, 0x9, 0xfffffffe, 0x3, 0x1, 0x40, 0xfc98, 0x2, 0x9e2, 0x3, 0xffff8d49, 0x80000001, 0x4, 0xa3, 0x2, 0x1, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x5, 0x9, 0x1, 0x0, 0x6, 0x2c, 0x1557, 0x33bdc23, 0x9, 0x2, 0x6, 0x6, 0x27, 0x8d43, 0x5, 0x0, 0x7ff, 0x4, 0xaaf, 0x1, 0xc3, 0x0, 0x9, 0x5cd, 0xef, 0xaa43, 0x4, 0x3, 0x10000, 0x81, 0x9, 0x5, 0x5, 0x4, 0x9, 0x800, 0x2, 0x0, 0x80000000, 0x4, 0x5, 0x0, 0x10001, 0x7f, 0xd, 0x6, 0x0, 0x7ff, 0x4, 0x4, 0x4, 0xc, 0x0, 0x8, 0x6, 0x7, 0xa623, 0x9, 0x0, 0x4, 0x2, 0x5, 0x9, 0x7fff, 0x3, 0xfffffffc, 0x7, 0x4, 0x3ff, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x8, 0x7ff, 0x10, 0x7fff, 0x9, 0x9, 0xff, 0x8, 0x1, 0x401, 0x40, 0x81, 0x9, 0x214, 0xffffff81, 0x462, 0x7, 0x9, 0x401, 0x401, 0x9, 0x0, 0x2c, 0x8, 0xffffffff, 0x5, 0x0, 0x3, 0x7, 0x0, 0x9, 0x1, 0x1, 0xffffffff, 0x2, 0xfffffff5, 0x60000000, 0x1, 0xe7ca, 0x8000, 0x2, 0x6, 0x4, 0x2, 0x3, 0x4842a12c, 0x0, 0x0, 0x5, 0x43, 0x0, 0x401, 0x2, 0x401, 0x330, 0x10, 0x2, 0x7, 0x8, 0x7, 0x7, 0xc, 0x7fffffff, 0x2, 0x10, 0x81, 0x1, 0x7, 0x6, 0x6, 0x8, 0x8, 0x7, 0x2, 0xfff, 0x1, 0x1, 0x8, 0x8, 0x8, 0x4, 0x9, 0x3, 0xff, 0x7fffffff, 0x74e7, 0x9, 0x9, 0x1ff, 0x5, 0x800, 0x1, 0x1, 0x4, 0x7b7, 0x2, 0x9, 0x477b5c99, 0x2311, 0x8, 0x7e89, 0x2, 0x8, 0x3, 0x9, 0x8, 0x3, 0x0, 0x1000, 0xff, 0x6, 0x4, 0xffffffff, 0x9, 0x7, 0x5, 0x2, 0x999, 0xfca], 0x2, 0x400, 0x6}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 5.23109453s ago: executing program 6 (id=537): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x0) 5.208227772s ago: executing program 7 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) 4.686429522s ago: executing program 7 (id=539): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.496534216s ago: executing program 6 (id=540): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=[0x0], 0x1}, 0x58) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x100000}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x8002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbcd6}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x3, 0x2, 0xed}, {0x1, 0x0, 0x2}}}]}]}]}}]}, 0x54}}, 0x1d56ce4333ce878e) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 4.40994957s ago: executing program 3 (id=541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 4.223072253s ago: executing program 0 (id=543): pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2d, 0x2, 0x0) close(0x3) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x80000) fcntl$dupfd(r0, 0x406, r1) epoll_create1(0x0) epoll_create1(0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.871083988s ago: executing program 7 (id=545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x1, 0x9e15, &(0x7f0000016380)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3}}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) openat$dir(0xffffffffffffff9c, 0x0, 0x13b003, 0x80) 1.455630551s ago: executing program 5 (id=546): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') mount$fuse(0x0, 0x0, 0x0, 0x10004, &(0x7f0000002140)=ANY=[]) read$FUSE(r2, &(0x7f0000006200)={0x2020}, 0xffe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, 0x0, 0x4040019) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) 1.439003411s ago: executing program 0 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x31, 0x0, &(0x7f00000001c0)) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xffffffff}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a6ff}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000004c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000500)=0x28) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) listen(r1, 0x2fa09656) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x18, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000080000000000000000b000000850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000800850000001000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r8, 0x330f, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xb, 0x0, &(0x7f0000000280)="24a2762ec5000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x4c) flock(r7, 0x4) open(&(0x7f00000005c0)='./file0\x00', 0x1, 0x105) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.353635367s ago: executing program 3 (id=547): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x9, 0xa9d0000, 0xffff, {0xa, 0x9}, 0x9, 0x10001}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(0x0, 0x0, 0x8042) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) 1.290056811s ago: executing program 7 (id=548): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0x8000000007}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0xb1) creat(0x0, 0x44) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000240)={0x4, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8c}, {0x3, @svalue}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @uvalue=0xc2}, {0x3, @uvalue=0x57}, {0x0, @uvalue=0xfffffffffffff800}, {0x2, @svalue=0x4}]}, 0x10000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000440)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bond_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.014184865s ago: executing program 6 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x282001, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newchain={0x510, 0x64, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe0}, {0x10, 0xd}, {0xe, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf}}, @filter_kind_options=@f_basic={{0xa}, {0x4b8, 0x2, [@TCA_BASIC_POLICE={0x4b4, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0xa, 0x4, 0xb, {0x5a, 0x2, 0xcc, 0x2, 0x3, 0x8278}, {0x7, 0x0, 0x7, 0xde, 0x9, 0x7}, 0x6f, 0x4, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x4, 0x9, 0x10, 0x8, 0x0, 0xffffffff, 0x3, 0x7, 0x200400, 0xffffffbe, 0x8, 0x7, 0x1a, 0x5, 0x3, 0xe, 0x5, 0x976b, 0x1, 0x81, 0x3, 0x9, 0x456, 0x9, 0xfffffff0, 0x8001, 0x3, 0x5, 0x3034, 0xff, 0x5, 0x5, 0x5, 0x3, 0xfffeffff, 0x7ff, 0x4, 0xfffff000, 0x7a5, 0x3, 0x81, 0x2, 0xd6a, 0x0, 0x1, 0xfffffffa, 0x8, 0x100, 0x6, 0x1, 0x3, 0xfffffff8, 0x7ff, 0xb5, 0x3ff2, 0xfff, 0x2, 0x1000000, 0xff, 0x8, 0x5, 0x6, 0x5, 0xfffffff9, 0x3, 0x4, 0xf7, 0x44e7, 0xfffffffd, 0x0, 0x8, 0xa, 0x6d, 0x5, 0x4a7, 0xffffff01, 0x9, 0x6, 0x7, 0x8, 0x1, 0x7, 0x8, 0xfffffffa, 0x7ff, 0x517, 0x5, 0x0, 0x7ff, 0x7fffffff, 0x2, 0x4e64, 0xea7, 0xfffffffd, 0x9, 0x9, 0x1800, 0x5da, 0x1, 0x9, 0xc8, 0x0, 0x4, 0xffff, 0x9, 0x8, 0x5, 0x100, 0x70, 0x0, 0x4, 0x6e, 0x5, 0x0, 0x4, 0x9, 0x4, 0x7a5, 0x3ff, 0x9, 0x0, 0x8a46, 0x40, 0x6c52, 0xc1a7, 0x4, 0x7f, 0x80, 0x0, 0x7ff, 0x8, 0x9, 0x5, 0x5, 0x130, 0x2, 0xd32a, 0x2469d16a, 0x7, 0x80000, 0x7, 0x7fffffff, 0xb617, 0xfffffff9, 0x400, 0xc2, 0x7ea8, 0x80000000, 0x8, 0x9, 0xfffffff8, 0xf2, 0x4, 0x951, 0xffffd580, 0xfffffffb, 0x7fff, 0x3, 0x80000001, 0x4, 0xff800000, 0x6c3c4dae, 0xe17, 0xa12, 0x8, 0x9, 0x6, 0x0, 0x4, 0x0, 0x1, 0x3, 0x40e, 0x800, 0x30ac, 0x8, 0x4e0a, 0x1, 0x3, 0x7ff, 0x7, 0x1b2, 0x5, 0x314, 0x0, 0xfffffe00, 0x4, 0x2, 0xffffffff, 0x7ff, 0x5, 0x8000, 0xe7a, 0x6, 0x6, 0x5, 0x8, 0x8, 0x7, 0x400, 0xffffffff, 0x9, 0x1, 0x2, 0x50, 0x1, 0x800, 0x3, 0x8, 0x0, 0x7, 0xfffffe75, 0x8, 0x7, 0x3, 0x80, 0x5, 0x482, 0x64d, 0x4, 0x2, 0xfffffff7, 0x7f, 0x6, 0x5, 0x0, 0x0, 0x4, 0x1, 0x101, 0x5, 0xd, 0x7, 0x0, 0x0, 0x10, 0x0, 0x9, 0xed, 0x5, 0x8, 0x5, 0xfff, 0x9, 0xc, 0x6, 0x40, 0x0, 0x7f, 0x3, 0x1ff, 0x174, 0x2, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14}, @TCA_POLICE_TBF={0x3c, 0x1, {0x16ac, 0x8, 0x1000, 0x894e, 0x2002, {0x10, 0x1, 0x4, 0x9, 0x6, 0x9}, {0x3, 0x2, 0x3, 0x7, 0x1, 0x2}, 0xd0000000, 0xb, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf43}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0xd}}]}, 0x510}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/59, 0x332000, 0x800, 0x0, 0x5}, 0x1c) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0xf0f024}) 567.560062ms ago: executing program 0 (id=550): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) kernel console output (not intermixed with test programs): fs directory [ 171.297377][ T5582] hsr_slave_0: entered promiscuous mode [ 171.305728][ T5582] hsr_slave_1: entered promiscuous mode [ 171.314850][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 171.320679][ T5582] Cannot create hsr debugfs directory [ 172.227047][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.250650][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.275884][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.291579][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.301648][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.320774][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.344133][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.363472][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.453033][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.484472][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.494659][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.510640][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.524314][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.541475][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.550838][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.569945][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.592860][ T5583] Bluetooth: hci0: command tx timeout [ 172.598600][ T5590] Bluetooth: hci2: command tx timeout [ 172.604349][ T4877] Bluetooth: hci1: command tx timeout [ 172.673144][ T5583] Bluetooth: hci4: command tx timeout [ 172.752971][ T5583] Bluetooth: hci3: command tx timeout [ 172.799402][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.819285][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.828781][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.847013][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.882484][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.900339][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.910454][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.929058][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.086365][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.104564][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.120096][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.137243][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.167984][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.187013][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.218629][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.236928][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.458342][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.477264][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.510183][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.535163][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.544942][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.563842][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.606440][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.626288][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.728811][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.903124][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.959553][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.005233][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.012754][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.116537][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.123993][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.207703][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.263125][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.365478][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.373076][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.475671][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.483259][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.553006][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.617049][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.704340][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.711756][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.753339][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.760795][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.842337][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.890853][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.951841][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.959322][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.082202][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.089725][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.241892][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.412100][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.419569][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.576319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.583861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.190199][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.803180][ T5585] veth0_vlan: entered promiscuous mode [ 177.869474][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.040837][ T5585] veth1_vlan: entered promiscuous mode [ 178.499030][ T5585] veth0_macvtap: entered promiscuous mode [ 178.606710][ T5585] veth1_macvtap: entered promiscuous mode [ 178.666081][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.867966][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.941702][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.108433][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.227810][ T2982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.241783][ T2982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.250821][ T2982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.310701][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.319576][ T2982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.480109][ T5581] veth0_vlan: entered promiscuous mode [ 179.706730][ T5581] veth1_vlan: entered promiscuous mode [ 179.742815][ T5582] veth0_vlan: entered promiscuous mode [ 179.913838][ T5582] veth1_vlan: entered promiscuous mode [ 180.012261][ T5593] veth0_vlan: entered promiscuous mode [ 180.052660][ T5594] veth0_vlan: entered promiscuous mode [ 180.210273][ T5593] veth1_vlan: entered promiscuous mode [ 180.274796][ T5594] veth1_vlan: entered promiscuous mode [ 180.354034][ T5581] veth0_macvtap: entered promiscuous mode [ 180.497507][ T5581] veth1_macvtap: entered promiscuous mode [ 180.586586][ T5582] veth0_macvtap: entered promiscuous mode [ 180.697891][ T5582] veth1_macvtap: entered promiscuous mode [ 180.746883][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.777445][ T5593] veth0_macvtap: entered promiscuous mode [ 180.942931][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.957653][ T5594] veth0_macvtap: entered promiscuous mode [ 180.995591][ T5593] veth1_macvtap: entered promiscuous mode [ 181.038823][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.105413][ T162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.117830][ T162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.128685][ T5594] veth1_macvtap: entered promiscuous mode [ 181.164880][ T162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.178536][ T162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.200042][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.362697][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.384990][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.407381][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.458732][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.493071][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.566972][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.630599][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.720204][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.755524][ T2982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.788647][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.819449][ T2982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.847275][ T2982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.928438][ T2982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.953897][ T2982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.988651][ T2982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.013379][ T2982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.538926][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.567502][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.811690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.838656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.352042][ T5585] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.740457][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.792371][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.974540][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.998898][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.246335][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.272531][ T5689] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 187.280558][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.491345][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 187.506776][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.519519][ T5689] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 187.527851][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.549550][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.630835][ T5689] usb 2-1: config 0 descriptor?? [ 187.695353][ T5689] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 187.807880][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.833647][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.050075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.080210][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.425314][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.465403][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.583422][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.645645][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.753776][ T2017] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.933793][ T2017] usb 3-1: Using ep0 maxpacket: 8 [ 188.962784][ T2017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 189.008589][ T2017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.045567][ T2017] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.107374][ T2017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 189.152882][ T2017] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 189.187726][ T2017] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 189.247893][ T2017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.295485][ T2017] usb 3-1: config 0 descriptor?? [ 189.402892][ T5689] gspca_sonixj: i2c_w8 err -71 [ 189.446511][ T5689] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 189.467559][ T5583] Bluetooth: hci5: urb ffff88801ad6a000 submission failed (90) [ 189.507221][ T5689] usb 2-1: USB disconnect, device number 2 [ 189.594187][ T5869] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 189.673625][ T2017] usb 3-1: USB disconnect, device number 2 [ 190.876495][ T5883] loop2: detected capacity change from 0 to 128 [ 190.903632][ T5883] ======================================================= [ 190.903632][ T5883] WARNING: The mand mount option has been deprecated and [ 190.903632][ T5883] and is ignored by this kernel. Remove the mand [ 190.903632][ T5883] option from the mount to silence this warning. [ 190.903632][ T5883] ======================================================= [ 191.025715][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 191.900019][ T5689] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 192.092637][ T5689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.135495][ T5689] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 192.189400][ T2982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.190275][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.251897][ T5689] usb 1-1: Product: syz [ 192.263276][ T5689] usb 1-1: Manufacturer: syz [ 192.274720][ T5689] usb 1-1: SerialNumber: syz [ 192.474006][ T2982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.676946][ T5689] usb 1-1: unit 5 not found! [ 192.693834][ T2982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.701383][ T5689] usb 1-1: unit 3 not found! [ 192.869268][ T2982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.189540][ T5689] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 193.243754][ T5689] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 193.298097][ T5689] usb 1-1: USB disconnect, device number 2 [ 193.392109][ T2982] bridge_slave_1: left allmulticast mode [ 193.418111][ T2982] bridge_slave_1: left promiscuous mode [ 193.457635][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.527017][ T2982] bridge_slave_0: left allmulticast mode [ 193.573119][ T2982] bridge_slave_0: left promiscuous mode [ 193.588805][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.655036][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.296057][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.316973][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.355978][ T2982] bond0 (unregistering): Released all slaves [ 194.524233][ T5904] input: syz1 as /devices/virtual/input/input5 [ 194.932284][ T5684] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 195.146634][ T5684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.191646][ T5684] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 195.240771][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 195.290969][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 195.314279][ T2982] hsr_slave_0: left promiscuous mode [ 195.330078][ T5684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.381649][ T2982] hsr_slave_1: left promiscuous mode [ 195.408796][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.440596][ T5684] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 195.455974][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.471862][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 195.513409][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.523904][ T5684] usb 5-1: Product: syz [ 195.547485][ T5684] usb 5-1: Manufacturer: syz [ 195.552853][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.567318][ T5684] usb 5-1: SerialNumber: syz [ 195.638954][ T5684] usb 5-1: config 0 descriptor?? [ 195.807556][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.832815][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.832881][ T2982] veth1_macvtap: left promiscuous mode [ 195.833017][ T2982] veth0_macvtap: left promiscuous mode [ 195.895325][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.919432][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.932810][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.941951][ T5684] radio-si470x 5-1:0.0: DeviceID=0x7275 ChipID=0x6e2f [ 196.012871][ T2982] veth1_vlan: left promiscuous mode [ 196.035079][ T2982] veth0_vlan: left promiscuous mode [ 196.174404][ T5684] radio-si470x 5-1:0.0: software version 114, hardware version 117 [ 196.390245][ T5684] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 197.433496][ T5938] process 'syz.1.31' launched './file0' with NULL argv: empty string added [ 197.710851][ T5684] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 197.746348][ T5684] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 197.797983][ T29] audit: type=1800 audit(1781110880.827:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.32" name="bus" dev="tmpfs" ino=51 res=0 errno=0 [ 197.848223][ T5684] usb 5-1: USB disconnect, device number 2 [ 198.080743][ T5583] Bluetooth: hci0: command tx timeout [ 198.853714][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.862441][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.007911][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 199.138610][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 199.219208][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 199.970742][ T5231] 8021q: adding VLAN 0 to HW filter on device eth1 [ 200.114789][ T5583] Bluetooth: hci0: command tx timeout [ 200.663702][ T5689] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.826454][ T5689] usb 1-1: Using ep0 maxpacket: 16 [ 202.100929][ T5966] loop1: detected capacity change from 0 to 4096 [ 202.197662][ T5583] Bluetooth: hci0: command tx timeout [ 202.957402][ T5966] loop1: detected capacity change from 4096 to 0 [ 202.957827][ C0] I/O error, dev loop1, sector 38 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 202.974044][ C0] Buffer I/O error on dev loop1, logical block 19, lost sync page write [ 202.988917][ T5977] ntfs3(loop1): ino=3, ntfs_set_state failed, -5. [ 203.034983][ T5977] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 203.097480][ T5977] Buffer I/O error on dev loop1, logical block 19, lost sync page write [ 203.158105][ T5977] ntfs3(loop1): ino=3, ntfs_set_state failed, -5. [ 203.662370][ T5585] ntfs3(loop1): failed to read volume at offset 0x45000 [ 203.699106][ T5689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.754652][ T5689] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 203.796900][ T5689] usb 1-1: can't read configurations, error -71 [ 204.062082][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 204.271775][ T5583] Bluetooth: hci0: command tx timeout [ 204.467634][ T5995] loop3: detected capacity change from 0 to 2048 [ 204.585930][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.587576][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.780742][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.888272][ T29] audit: type=1804 audit(1781110887.917:3): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.45" name="/newroot/7/file1/cgroup.controllers" dev="loop3" ino=18 res=1 errno=0 [ 204.925744][ T5995] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.992907][ T5995] EXT4-fs (loop3): Remounting filesystem read-only [ 205.079622][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.405594][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.622870][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.730355][ T5231] 8021q: adding VLAN 0 to HW filter on device eth2 [ 205.994510][ T6005] loop0: detected capacity change from 0 to 16 [ 206.120860][ T6005] erofs (device loop0): mounted with root inode @ nid 36. [ 206.234983][ T83] bridge_slave_1: left allmulticast mode [ 206.257954][ T83] bridge_slave_1: left promiscuous mode [ 206.285232][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.303550][ T6005] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 206.365815][ T83] bridge_slave_0: left allmulticast mode [ 206.379398][ T83] bridge_slave_0: left promiscuous mode [ 206.405112][ T6005] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 206.413813][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.530865][ T6005] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 206.586518][ T6005] erofs (device loop0): read error -117 @ 0 of nid 89 [ 206.635126][ T29] audit: type=1800 audit(1781110889.657:4): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.48" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 207.435807][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.511978][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.564506][ T83] bond0 (unregistering): Released all slaves [ 207.843910][ T6026] fuse: root generation should be zero [ 207.899388][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.949399][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.977567][ T5921] bridge_slave_0: entered allmulticast mode [ 208.004301][ T5921] bridge_slave_0: entered promiscuous mode [ 208.210707][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.233591][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.287048][ T5921] bridge_slave_1: entered allmulticast mode [ 208.319932][ T5921] bridge_slave_1: entered promiscuous mode [ 208.773704][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.789065][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.798930][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.817602][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.834869][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.861504][ T5689] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 209.041537][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 209.060919][ T5689] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.088288][ T5689] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 209.124855][ T5689] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 209.169300][ T5689] usb 5-1: config 14 has no interface number 0 [ 209.183873][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.207906][ T5689] usb 5-1: config 14 has no interface number 1 [ 209.240193][ T5689] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 209.284766][ T5689] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 209.334259][ T5689] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 209.347753][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.409287][ T5689] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 209.458162][ T5689] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 209.518106][ T5689] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.562189][ T5689] usb 5-1: config 14 interface 57 has no altsetting 0 [ 209.585664][ T5689] usb 5-1: config 14 interface 228 has no altsetting 0 [ 209.648701][ T5689] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 209.677233][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.700886][ T5689] usb 5-1: Product: syz [ 209.741660][ T5689] usb 5-1: Manufacturer: syz [ 209.751318][ T5689] usb 5-1: SerialNumber: syz [ 209.767322][ T5231] 8021q: adding VLAN 0 to HW filter on device eth3 [ 209.905894][ T83] hsr_slave_0: left promiscuous mode [ 209.964528][ T83] hsr_slave_1: left promiscuous mode [ 209.994980][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.025792][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.057435][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.082942][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.161615][ T83] veth1_macvtap: left promiscuous mode [ 210.169744][ T83] veth0_macvtap: left promiscuous mode [ 210.185468][ T83] veth1_vlan: left promiscuous mode [ 210.203405][ T83] veth0_vlan: left promiscuous mode [ 210.249863][ T5689] legousbtower 5-1:14.57: interrupt endpoints not found [ 210.648762][ T5689] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 210.686486][ T5689] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 210.851450][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050f89e00: rx timeout, send abort [ 210.912337][ T5590] Bluetooth: hci2: command tx timeout [ 211.301964][ C1] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 211.310341][ T5689] usb 5-1: USB disconnect, device number 3 [ 211.352296][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ba6e800: rx timeout, send abort [ 211.368760][ T5689] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 211.703201][ T83] team0 (unregistering): Port device team_slave_1 removed [ 211.804626][ T83] team0 (unregistering): Port device team_slave_0 removed [ 211.865690][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ba6e800: abort rx timeout. Force session deactivation [ 212.424197][ T5921] team0: Port device team_slave_0 added [ 212.523540][ T5921] team0: Port device team_slave_1 added [ 212.554429][ T6063] loop0: detected capacity change from 0 to 2048 [ 212.744919][ T6063] udf: Unknown parameter 'giˆZ' [ 212.882306][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.978504][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.014980][ T5590] Bluetooth: hci2: command tx timeout [ 213.184664][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.304426][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.329471][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.403843][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.569250][ T6080] loop4: detected capacity change from 0 to 1024 [ 213.786169][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.926866][ T6088] loop3: detected capacity change from 0 to 128 [ 213.981315][ T6080] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 214.089044][ T29] audit: type=1804 audit(1781110897.117:5): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.62" name="/newroot/13/file0/bus" dev="loop3" ino=1048605 res=1 errno=0 [ 214.129944][ T5921] hsr_slave_0: entered promiscuous mode [ 214.186147][ T5921] hsr_slave_1: entered promiscuous mode [ 214.415162][ T5593] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /10/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 214.508552][ T5593] EXT4-fs (loop4): Remounting filesystem read-only [ 214.563514][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.685527][ T6091] syz.3.62: attempt to access beyond end of device [ 214.685527][ T6091] loop3: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 214.747370][ T6091] syz.3.62: attempt to access beyond end of device [ 214.747370][ T6091] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 214.790467][ T6091] syz.3.62: attempt to access beyond end of device [ 214.790467][ T6091] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 214.841990][ T6091] syz.3.62: attempt to access beyond end of device [ 214.841990][ T6091] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 214.901021][ T6091] syz.3.62: attempt to access beyond end of device [ 214.901021][ T6091] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 214.962810][ T6091] syz.3.62: attempt to access beyond end of device [ 214.962810][ T6091] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 214.996496][ T6091] syz.3.62: attempt to access beyond end of device [ 214.996496][ T6091] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 215.072938][ T5590] Bluetooth: hci2: command tx timeout [ 216.063111][ T6108] loop3: detected capacity change from 0 to 4096 [ 216.094653][ T6108] EXT4-fs: inline encryption not supported [ 216.158022][ T6108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 216.183095][ T6108] System zones: 0-5 [ 216.300045][ T6110] loop4: detected capacity change from 0 to 2048 [ 216.328829][ T6108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.451484][ T6110] loop4: p1 < > p4 < > [ 216.558552][ T29] audit: type=1800 audit(1781110899.587:6): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 216.605371][ T6110] overlayfs: failed lookup in lower (newroot/12, name='file1', err=-40): overlapping layers [ 217.161856][ T5590] Bluetooth: hci2: command tx timeout [ 217.357730][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.979072][ T5921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.067548][ T5921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.099576][ T5921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.241001][ T6130] loop4: detected capacity change from 0 to 4096 [ 218.292115][ T5921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.325729][ T5231] 8021q: adding VLAN 0 to HW filter on device eth4 [ 218.458108][ T5921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.540966][ T5921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.585864][ T29] audit: type=1800 audit(1781110901.617:7): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.68" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 218.750254][ T5921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.848237][ T5921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.946582][ T6139] loop3: detected capacity change from 0 to 1024 [ 219.015175][ T6139] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 219.165460][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.896742][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.812528][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.843495][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.863381][ T6040] bridge_slave_0: entered allmulticast mode [ 220.887599][ T6160] loop4: detected capacity change from 0 to 2048 [ 220.897777][ T6040] bridge_slave_0: entered promiscuous mode [ 220.935894][ T6160] EXT4-fs: Ignoring removed nobh option [ 220.964641][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.004712][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.040092][ T6040] bridge_slave_1: entered allmulticast mode [ 221.057150][ T6160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.087236][ T6040] bridge_slave_1: entered promiscuous mode [ 221.156222][ T6160] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.158207][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.213412][ T29] audit: type=1800 audit(1781110904.237:8): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.72" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 221.274440][ T6160] fs-verity (loop4, inode 13): Error -22 reading file data [ 221.322961][ T6160] fs-verity (loop4, inode 13): Error -22 building Merkle tree [ 221.514296][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.576822][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.673978][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.978814][ T6040] team0: Port device team_slave_0 added [ 221.996105][ T6173] capability: warning: `syz.3.74' uses deprecated v2 capabilities in a way that may be insecure [ 222.066130][ T6040] team0: Port device team_slave_1 added [ 222.208078][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.404542][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.412272][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.515208][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.550646][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.636846][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.694805][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.724097][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.796042][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.147824][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.155346][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.408716][ T6040] hsr_slave_0: entered promiscuous mode [ 223.429633][ T6040] hsr_slave_1: entered promiscuous mode [ 223.442708][ T6040] debugfs: 'hsr0' already exists in 'hsr' [ 223.448875][ T6040] Cannot create hsr debugfs directory [ 223.467390][ T6189] Zero length message leads to an empty skb [ 223.481749][ T5231] 8021q: adding VLAN 0 to HW filter on device eth5 [ 224.089220][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 224.775743][ T6206] syz_tun: entered allmulticast mode [ 225.519802][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 225.743554][ T6040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.895122][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.961906][ T6040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.095392][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.175144][ T6040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.329520][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.395510][ T6040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.567507][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.566153][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 228.396581][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.633612][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.762292][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.769776][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.987865][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.995520][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.950460][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.386222][ T5231] 8021q: adding VLAN 0 to HW filter on device eth6 [ 232.723152][ T5921] veth0_vlan: entered promiscuous mode [ 232.860665][ T5921] veth1_vlan: entered promiscuous mode [ 233.026593][ T6295] loop4: detected capacity change from 0 to 512 [ 233.250277][ T6295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 233.401402][ T6295] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.438094][ T5921] veth0_macvtap: entered promiscuous mode [ 233.585883][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.624775][ T5921] veth1_macvtap: entered promiscuous mode [ 233.813081][ T6303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.864222][ T6303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.866962][ T6295] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.906743][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.003910][ T6303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.017682][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.067911][ T6303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.150306][ T6303] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.206757][ T170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.243158][ T170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.259233][ T6303] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.309867][ T83] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.332537][ T2982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.346899][ T6303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.381002][ T6303] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.398946][ T6312] loop0: detected capacity change from 0 to 128 [ 234.457231][ T6303] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.518356][ T6303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.550851][ T6303] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.627503][ T6303] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.755443][ T6317] loop3: detected capacity change from 0 to 1024 [ 234.834887][ T6317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.891002][ T6312] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.030222][ T6317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.119228][ T6312] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.230001][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 235.583701][ T29] audit: type=1800 audit(1781110918.617:9): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.99" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 235.711594][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.112242][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.301933][ T6040] veth0_vlan: entered promiscuous mode [ 236.353229][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.425445][ T5231] 8021q: adding VLAN 0 to HW filter on device eth7 [ 236.470218][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.510535][ T6040] veth1_vlan: entered promiscuous mode [ 236.603644][ T5590] Bluetooth: hci2: command 0x0405 tx timeout [ 236.625776][ T5582] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.105082][ T6040] veth0_macvtap: entered promiscuous mode [ 237.219252][ T6040] veth1_macvtap: entered promiscuous mode [ 237.517931][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.677560][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.792568][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.812534][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.869682][ T153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.920483][ T153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.986675][ T153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.192721][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.433169][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.673141][ T5590] Bluetooth: hci2: command 0x0405 tx timeout [ 239.872352][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.275922][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.335684][ T6382] loop3: detected capacity change from 0 to 4096 [ 240.514075][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 240.753433][ T5590] Bluetooth: hci2: command 0x0405 tx timeout [ 240.866856][ T29] audit: type=1800 audit(1781110923.897:10): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 240.967100][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.011552][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.234048][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.297611][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.642737][ T5231] 8021q: adding VLAN 0 to HW filter on device eth8 [ 242.608741][ T6408] loop3: detected capacity change from 0 to 512 [ 242.843926][ T6408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 242.903489][ T6408] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.130765][ T5590] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 243.342355][ T6408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.358291][ T6408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.391803][ T6408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.490711][ T6408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.967112][ T5594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 244.148033][ T6432] syz_tun: entered allmulticast mode [ 244.248529][ T6430] syz_tun: left allmulticast mode [ 245.151837][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.180598][ T6445] loop0: detected capacity change from 0 to 256 [ 245.391666][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.471565][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.530017][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.546987][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.564032][ T5590] Bluetooth: hci2: command 0x0405 tx timeout [ 245.964923][ T6447] loop5: detected capacity change from 0 to 4096 [ 245.987920][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.056909][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.428470][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.543771][ T29] audit: type=1800 audit(1781110929.577:11): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.119" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 246.590931][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.669035][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.893556][ T6461] fuse: Bad value for 'fd' [ 247.256702][ T29] audit: type=1800 audit(1781110930.287:12): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.119" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 247.321489][ T6467] loop6: detected capacity change from 0 to 512 [ 247.359831][ T6467] EXT4-fs: Ignoring removed oldalloc option [ 247.399199][ T6467] EXT4-fs (loop6): Test dummy encryption mode enabled [ 247.575270][ T6467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.668956][ T6467] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 249.185021][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.985345][ T6499] loop6: detected capacity change from 0 to 512 [ 250.353323][ T6499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 250.422517][ T6499] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.703544][ T5590] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 250.926139][ T6499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.994505][ T6499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.025016][ T6499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.173152][ T6499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.531557][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 252.215531][ T6521] loop6: detected capacity change from 0 to 1024 [ 252.260133][ T6521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.403364][ T6521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.613023][ T6513] netlink: 'syz.0.131': attribute type 27 has an invalid length. [ 252.682860][ T5590] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.072338][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.078584][ T5583] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.236021][ T5583] Bluetooth: hci2: command 0x0405 tx timeout [ 253.969716][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.281650][ T6552] loop4: detected capacity change from 0 to 512 [ 255.317739][ T6552] EXT4-fs: Ignoring removed oldalloc option [ 255.353952][ T6552] EXT4-fs (loop4): Test dummy encryption mode enabled [ 255.462706][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.091913][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.101688][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.110744][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.978471][ T809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 257.241728][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 257.291958][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 257.355257][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.424380][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.490707][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.562921][ T809] usb 5-1: Product: syz [ 257.583232][ T809] usb 5-1: Manufacturer: syz [ 257.605058][ T809] usb 5-1: SerialNumber: syz [ 257.667402][ T809] usb 5-1: config 0 descriptor?? [ 257.747971][ T809] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.757957][ T809] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 258.154864][ T6513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.232673][ T6513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.370855][ T809] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 258.380892][ T809] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 259.010962][ T809] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 259.049686][ T6571] netlink: 76 bytes leftover after parsing attributes in process `syz.5.142'. [ 259.060046][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.085762][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.101908][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.144463][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.234677][ T809] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 259.245464][ T809] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 259.285545][ T809] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 259.306522][ T809] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 259.323953][ T809] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 259.364722][ T809] usb 5-1: USB disconnect, device number 4 [ 259.619676][ T6588] loop5: detected capacity change from 0 to 512 [ 259.761352][ T6588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 259.853398][ T6588] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.302468][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.309081][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.400027][ T6588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.420893][ T6588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.453353][ T6588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.506461][ T6588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.685533][ T6606] loop6: detected capacity change from 0 to 64 [ 260.740913][ T6606] MINIX-fs: mounting file system with errors, running fsck is recommended [ 260.856152][ T5921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 261.518798][ T29] audit: type=1800 audit(1781110944.547:13): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.146" name="/" dev="fuse" ino=2 res=0 errno=0 [ 261.719026][ T6615] loop5: detected capacity change from 0 to 1024 [ 261.772270][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.781885][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.818197][ T6615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.889798][ T6615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.031393][ T5583] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.432197][ T5583] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.512456][ T5583] Bluetooth: hci4: command 0x0c1a tx timeout [ 262.601366][ T5583] Bluetooth: hci2: command 0x0405 tx timeout [ 262.784936][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 262.849842][ T6628] netlink: 168 bytes leftover after parsing attributes in process `syz.3.153'. [ 262.875180][ T5921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.883904][ T6628] netlink: 168 bytes leftover after parsing attributes in process `syz.3.153'. [ 262.955947][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.029249][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.617705][ T6638] fuse: fd is not a fuse device [ 263.660040][ T6635] loop5: detected capacity change from 0 to 1024 [ 264.290983][ T34] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.342499][ T34] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.382759][ T34] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.437305][ T34] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.627215][ T6643] fuse: fd is not a fuse device [ 264.745280][ T6645] syzkaller0: entered promiscuous mode [ 265.281524][ T5683] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 265.501977][ T5683] usb 7-1: unable to get BOS descriptor or descriptor too short [ 265.562029][ T5683] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 265.595230][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.638455][ T5683] usb 7-1: Product: syz [ 265.666061][ T5683] usb 7-1: Manufacturer: syz [ 265.689445][ T5683] usb 7-1: SerialNumber: syz [ 266.155528][ T5683] usb 7-1: unit 5 not found! [ 266.168456][ T5683] usb 7-1: unit 3 not found! [ 266.513114][ T5683] snd-usb-us122l 7-1:1.1: usb_set_interface error [ 266.563100][ T5683] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 266.687122][ T5683] usb 7-1: USB disconnect, device number 2 [ 266.973378][ T6673] loop5: detected capacity change from 0 to 512 [ 266.986573][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.058652][ T6673] EXT4-fs: Ignoring removed oldalloc option [ 267.089030][ T6673] EXT4-fs (loop5): Test dummy encryption mode enabled [ 267.220194][ T6673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.862924][ T40] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 267.887231][ T5921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.169295][ T6683] ±ÿC†À•Ý: renamed from lo (while UP) [ 268.304352][ T40] usb 7-1: unable to get BOS descriptor or descriptor too short [ 268.311523][ T6689] syz_tun: entered allmulticast mode [ 268.354070][ T6690] loop4: detected capacity change from 0 to 256 [ 268.354983][ T40] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 268.418602][ T6690] exfat: Deprecated parameter 'utf8' [ 268.437810][ T40] usb 7-1: can't read configurations, error -71 [ 268.555425][ T6690] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 268.811766][ T6690] loop4: detected capacity change from 256 to 0 [ 268.821196][ C0] I/O error, dev loop4, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.846847][ T5901] Buffer I/O error on dev loop4, logical block 160, async page read [ 268.867061][ T5901] Buffer I/O error on dev loop4, logical block 161, async page read [ 268.903471][ T5901] Buffer I/O error on dev loop4, logical block 162, async page read [ 268.977876][ T5901] Buffer I/O error on dev loop4, logical block 163, async page read [ 269.019772][ T5901] Buffer I/O error on dev loop4, logical block 164, async page read [ 269.058090][ T5901] Buffer I/O error on dev loop4, logical block 165, async page read [ 269.096962][ T5901] Buffer I/O error on dev loop4, logical block 166, async page read [ 269.150360][ T5901] Buffer I/O error on dev loop4, logical block 167, async page read [ 269.442960][ T6700] fuse: fd is not a fuse device [ 269.489533][ T5593] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 270.013593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810044e800: rx timeout, send abort [ 270.147480][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 270.514535][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050da5400: rx timeout, send abort [ 271.023104][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050da5400: abort rx timeout. Force session deactivation [ 273.235782][ T5590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.248567][ T5590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.262335][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.289881][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.311435][ T5590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.567915][ T6759] overlayfs: statfs failed on './file0' [ 274.628084][ T6757] loop0: detected capacity change from 0 to 512 [ 274.799424][ T6757] EXT4-fs: Ignoring removed oldalloc option [ 274.932545][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 274.949133][ T6757] EXT4-fs (loop0): Test dummy encryption mode enabled [ 275.206272][ T6757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.401488][ T5583] Bluetooth: hci3: command tx timeout [ 276.463778][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.472339][ T5583] Bluetooth: hci3: command tx timeout [ 278.967373][ T29] audit: type=1326 audit(1781110961.977:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.5.197" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe901c code=0x0 [ 279.552092][ T5583] Bluetooth: hci3: command tx timeout [ 279.885724][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.899041][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.922488][ T6731] bridge_slave_0: entered allmulticast mode [ 279.943600][ T6731] bridge_slave_0: entered promiscuous mode [ 279.982409][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.991006][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.010934][ T6731] bridge_slave_1: entered allmulticast mode [ 280.024938][ T6731] bridge_slave_1: entered promiscuous mode [ 280.041930][ T6838] loop0: detected capacity change from 0 to 2048 [ 280.108744][ T6838] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 280.188056][ T6838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.244354][ T6731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.291500][ T6731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.459943][ T6731] team0: Port device team_slave_0 added [ 280.494512][ T6731] team0: Port device team_slave_1 added [ 280.619985][ T6731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.651364][ T6731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.683493][ T6731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.705117][ T6731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.723954][ T6731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.815249][ T6731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.118418][ T6731] hsr_slave_0: entered promiscuous mode [ 281.155538][ T6731] hsr_slave_1: entered promiscuous mode [ 281.189622][ T6731] debugfs: 'hsr0' already exists in 'hsr' [ 281.221211][ T6731] Cannot create hsr debugfs directory [ 281.641900][ T5583] Bluetooth: hci3: command tx timeout [ 282.069866][ T6731] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 282.114076][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.126986][ T6731] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 282.148900][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.170187][ T6731] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 282.216035][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.226981][ T6731] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.247369][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.606280][ T6731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.688910][ T6731] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.737081][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.744676][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.793582][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.801267][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.050757][ T6731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.588637][ T6731] veth0_vlan: entered promiscuous mode [ 284.617108][ T6731] veth1_vlan: entered promiscuous mode [ 284.707783][ T6731] veth0_macvtap: entered promiscuous mode [ 284.728387][ T6731] veth1_macvtap: entered promiscuous mode [ 284.784301][ T6731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.817220][ T6731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.862097][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.875106][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.887373][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.898088][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.339815][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.348168][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.432330][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.440400][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.788874][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 286.953592][ T6916] loop7: detected capacity change from 0 to 128 [ 287.130852][ T29] audit: type=1804 audit(1781110970.157:15): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.177" name="/newroot/0/file0/bus" dev="loop7" ino=1048631 res=1 errno=0 [ 287.786056][ T6917] syz.7.177: attempt to access beyond end of device [ 287.786056][ T6917] loop7: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 287.882407][ T6917] syz.7.177: attempt to access beyond end of device [ 287.882407][ T6917] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 287.907518][ T6917] syz.7.177: attempt to access beyond end of device [ 287.907518][ T6917] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 287.934542][ T6917] syz.7.177: attempt to access beyond end of device [ 287.934542][ T6917] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 287.992905][ T6917] syz.7.177: attempt to access beyond end of device [ 287.992905][ T6917] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 288.015267][ T6917] syz.7.177: attempt to access beyond end of device [ 288.015267][ T6917] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 288.029541][ T6917] syz.7.177: attempt to access beyond end of device [ 288.029541][ T6917] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 288.056227][ T6917] syz.7.177: attempt to access beyond end of device [ 288.056227][ T6917] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 288.071904][ T6917] syz.7.177: attempt to access beyond end of device [ 288.071904][ T6917] loop7: rw=2049, sector=273, nr_sectors = 7 limit=128 [ 288.350533][ T6922] netlink: 'syz.6.201': attribute type 49 has an invalid length. [ 288.667879][ T6930] loop7: detected capacity change from 0 to 512 [ 288.715727][ T6930] EXT4-fs: Ignoring removed oldalloc option [ 288.729486][ T6930] EXT4-fs (loop7): Test dummy encryption mode enabled [ 288.906820][ T6930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.406591][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.488140][ T6731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.506339][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.622229][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.418273][ T6954] loop6: detected capacity change from 0 to 128 [ 290.532391][ T29] audit: type=1804 audit(1781110973.557:16): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.216" name="/newroot/20/file0/bus" dev="loop6" ino=1048633 res=1 errno=0 [ 291.137153][ T6967] tipc: Started in network mode [ 291.175335][ T6967] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 291.214495][ T6967] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 291.243462][ T6958] syz.6.216: attempt to access beyond end of device [ 291.243462][ T6958] loop6: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 291.287789][ T6967] tipc: Enabled bearer , priority 10 [ 291.809288][ T6973] netlink: 'syz.7.221': attribute type 27 has an invalid length. [ 292.600961][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.610642][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.139458][ T29] audit: type=1800 audit(1781110976.167:17): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.223" name="/" dev="fuse" ino=2 res=0 errno=0 [ 293.298812][ T6983] fuse: fd is not a fuse device [ 293.374627][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.515650][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.350073][ T5689] tipc: Node number set to 1 [ 294.366063][ T34] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.378174][ T34] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.400273][ T170] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.410734][ T170] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.081509][ T40] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 295.222070][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.229'. [ 295.275694][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 295.297853][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.332517][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.371586][ T40] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.400841][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.456406][ T40] usb 7-1: config 0 descriptor?? [ 295.487806][ T40] hub 7-1:0.0: USB hub found [ 295.696142][ T40] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 295.820827][ T7002] loop0: detected capacity change from 0 to 2048 [ 295.968882][ T7002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.049620][ T29] audit: type=1800 audit(1781110979.077:18): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.227" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 296.137265][ T40] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 296.168767][ T40] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 296.355198][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.491401][ T5743] usb 7-1: USB disconnect, device number 5 [ 296.793267][ T7007] fido_id[7007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 296.844150][ T7014] loop0: detected capacity change from 0 to 128 [ 296.979683][ T29] audit: type=1804 audit(1781110980.007:19): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.232" name="/newroot/38/file0/bus" dev="loop0" ino=1048635 res=1 errno=0 [ 297.679136][ T7015] bio_check_eod: 12 callbacks suppressed [ 297.679208][ T7015] syz.0.232: attempt to access beyond end of device [ 297.679208][ T7015] loop0: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 297.705109][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.233'. [ 297.706557][ T7015] syz.0.232: attempt to access beyond end of device [ 297.706557][ T7015] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 297.738156][ T7015] syz.0.232: attempt to access beyond end of device [ 297.738156][ T7015] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 297.756115][ T7015] syz.0.232: attempt to access beyond end of device [ 297.756115][ T7015] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 297.773147][ T7015] syz.0.232: attempt to access beyond end of device [ 297.773147][ T7015] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 297.795527][ T7015] syz.0.232: attempt to access beyond end of device [ 297.795527][ T7015] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 297.813052][ T7015] syz.0.232: attempt to access beyond end of device [ 297.813052][ T7015] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 297.832826][ T7015] syz.0.232: attempt to access beyond end of device [ 297.832826][ T7015] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 297.855863][ T7015] syz.0.232: attempt to access beyond end of device [ 297.855863][ T7015] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 297.877532][ T7015] syz.0.232: attempt to access beyond end of device [ 297.877532][ T7015] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 298.548781][ T7025] ip6gretap0: entered promiscuous mode [ 298.575533][ T7025] vlan2: entered promiscuous mode [ 298.812564][ T5683] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 298.973133][ T5683] usb 7-1: Using ep0 maxpacket: 16 [ 298.997297][ T5683] usb 7-1: config 0 has an invalid interface number: 9 but max is 1 [ 299.019462][ T5683] usb 7-1: config 0 has an invalid interface number: 9 but max is 1 [ 299.045276][ T5683] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 299.068746][ T5683] usb 7-1: config 0 has no interface number 0 [ 299.088025][ T5683] usb 7-1: config 0 interface 9 has no altsetting 0 [ 299.120223][ T5683] usb 7-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice= 9.a0 [ 299.140881][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.167359][ T5683] usb 7-1: Product: syz [ 299.184783][ T5683] usb 7-1: Manufacturer: syz [ 299.203268][ T5683] usb 7-1: SerialNumber: syz [ 299.240724][ T5683] usb 7-1: config 0 descriptor?? [ 299.548067][ T5683] sierra 7-1:0.9: Sierra USB modem converter detected [ 299.600636][ T5683] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 299.678436][ T5683] usb 7-1: USB disconnect, device number 6 [ 299.740680][ T5683] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 299.789040][ T7043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 299.789150][ T5683] sierra 7-1:0.9: device disconnected [ 300.893928][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.7.248'. [ 300.937088][ T7057] loop5: detected capacity change from 0 to 128 [ 301.080102][ T29] audit: type=1804 audit(1781110984.107:20): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.246" name="/newroot/31/file0/bus" dev="loop5" ino=1048637 res=1 errno=0 [ 301.427453][ T7062] overlayfs: failed to clone upperpath [ 304.554050][ T7098] warning: `syz.7.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 305.623112][ T29] audit: type=1326 audit(1781110988.657:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.5.255" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe901c code=0x0 [ 306.399847][ T5689] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 306.608900][ T5689] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.620095][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.634883][ T5689] usb 6-1: Product: syz [ 306.639554][ T5689] usb 6-1: Manufacturer: syz [ 306.647530][ T5689] usb 6-1: SerialNumber: syz [ 306.736464][ T5689] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.965419][ T29] audit: type=1326 audit(1781110989.997:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.259" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x0 [ 307.101363][ T40] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 307.102925][ T5683] usb 6-1: USB disconnect, device number 2 [ 307.244985][ T5683] usb 6-1: ath9k_htc: USB layer deinitialized [ 307.641995][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.263'. [ 308.070633][ T7127] loop0: detected capacity change from 0 to 128 [ 308.254134][ T29] audit: type=1804 audit(1781110991.287:23): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.265" name="/newroot/45/file0/bus" dev="loop0" ino=1048639 res=1 errno=0 [ 308.327644][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 308.358040][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.266'. [ 308.542706][ T7129] vlan2: entered promiscuous mode [ 308.582731][ T7129] syz_tun: entered promiscuous mode [ 308.626162][ T7129] vlan2: entered allmulticast mode [ 309.021313][ T7130] bio_check_eod: 10 callbacks suppressed [ 309.021378][ T7130] syz.0.265: attempt to access beyond end of device [ 309.021378][ T7130] loop0: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 309.073428][ T7130] syz.0.265: attempt to access beyond end of device [ 309.073428][ T7130] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 309.137214][ T7130] syz.0.265: attempt to access beyond end of device [ 309.137214][ T7130] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 309.186435][ T7130] syz.0.265: attempt to access beyond end of device [ 309.186435][ T7130] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 309.205831][ T7130] syz.0.265: attempt to access beyond end of device [ 309.205831][ T7130] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 309.251828][ T7130] syz.0.265: attempt to access beyond end of device [ 309.251828][ T7130] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 309.311441][ T7130] syz.0.265: attempt to access beyond end of device [ 309.311441][ T7130] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 309.368250][ T7130] syz.0.265: attempt to access beyond end of device [ 309.368250][ T7130] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 309.422664][ T7130] syz.0.265: attempt to access beyond end of device [ 309.422664][ T7130] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 309.455901][ T7130] syz.0.265: attempt to access beyond end of device [ 309.455901][ T7130] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 310.010779][ T7148] fuse: fd is not a fuse device [ 311.269289][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.294815][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.310527][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.342253][ T7163] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 311.390562][ T7163] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 311.489661][ T7163] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 311.575279][ T7163] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.692610][ T5683] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 311.798690][ T7163] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.913218][ T5683] usb 8-1: Using ep0 maxpacket: 16 [ 312.002334][ T809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 312.060053][ T5683] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 312.089854][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.112753][ T5683] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.150332][ T5683] usb 8-1: Product: syz [ 312.158229][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.164448][ T5683] usb 8-1: Manufacturer: syz [ 312.175643][ T5683] usb 8-1: SerialNumber: syz [ 312.183687][ T809] usb 6-1: Using ep0 maxpacket: 16 [ 312.193779][ T5683] usb 8-1: config 0 descriptor?? [ 312.233794][ T809] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.254018][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.273307][ T7177] binder: 7176:7177 ioctl c0306201 80000480 returned -14 [ 312.284610][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.303908][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.340694][ T809] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.352094][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.381774][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.393496][ T7163] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.413338][ T809] usb 6-1: Product: syz [ 312.427144][ T809] usb 6-1: Manufacturer: syz [ 312.443417][ T809] usb 6-1: SerialNumber: syz [ 312.480278][ T809] usb 6-1: config 0 descriptor?? [ 312.538958][ T5683] usb 8-1: USB disconnect, device number 2 [ 312.567410][ T809] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.607905][ T809] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 312.670256][ T7180] loop0: detected capacity change from 0 to 128 [ 312.792952][ T29] audit: type=1804 audit(1781110995.827:24): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.283" name="/newroot/49/file0/bus" dev="loop0" ino=1048641 res=1 errno=0 [ 312.872774][ T7182] mmap: syz.3.284 (7182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 313.168136][ T809] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 313.208428][ T809] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 313.865452][ T809] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 313.935140][ T7191] loop7: detected capacity change from 0 to 256 [ 314.070250][ T7191] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 314.308352][ T809] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 314.327021][ T809] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 314.355945][ T809] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 314.378235][ T809] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 314.428068][ T809] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 314.493842][ T809] usb 6-1: USB disconnect, device number 3 [ 317.196892][ T7227] ip6gre1: entered promiscuous mode [ 317.202445][ T7227] ip6gre1: entered allmulticast mode [ 317.682392][ T5683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.756915][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.814757][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.928706][ T7233] loop5: detected capacity change from 0 to 128 [ 318.202123][ T29] audit: type=1804 audit(1781111001.217:25): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.297" name="/newroot/39/file0/bus" dev="loop5" ino=1048644 res=1 errno=0 [ 318.752002][ T5683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.834405][ T5683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.960042][ T7252] syzkaller0: entered promiscuous mode [ 319.986415][ T7252] syzkaller0: entered allmulticast mode [ 320.643063][ T7268] loop7: detected capacity change from 0 to 1024 [ 320.716820][ T7268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-070000000000 r/w without journal. Quota mode: none. [ 321.162737][ T29] audit: type=1800 audit(1781111004.147:26): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.309" name="nullb0" dev="tmpfs" ino=521 res=0 errno=0 [ 321.636963][ T6731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-070000000000. [ 321.741894][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.750642][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.791702][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.120474][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.205108][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.308516][ T7285] ip_vti0: entered promiscuous mode [ 322.360184][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.310'. [ 322.736881][ T7291] loop5: detected capacity change from 0 to 256 [ 322.786218][ T7291] exfat: Deprecated parameter 'namecase' [ 322.817033][ T7291] exfat: Deprecated parameter 'namecase' [ 322.851774][ T7291] exfat: Deprecated parameter 'namecase' [ 322.961412][ T7291] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 323.426382][ T7301] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 324.940298][ T7298] loop6: detected capacity change from 0 to 8192 [ 325.652053][ T7314] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 325.834500][ T7314] FAT-fs (loop6): Filesystem has been set read-only [ 326.866235][ T7326] loop6: detected capacity change from 0 to 512 [ 326.977581][ T7326] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.326: invalid block [ 327.034760][ T7326] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 327.041214][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 327.057264][ C0] EXT4-fs (loop6): initial error at time 1781111010: ext4_get_branch:178: inode 11: block 4294967295 [ 327.068690][ C0] EXT4-fs (loop6): last error at time 1781111010: ext4_get_branch:178: inode 11: block 4294967295 [ 327.133667][ T7326] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.326: invalid indirect mapped block 4294967295 (level 1) [ 327.189852][ T7326] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 327.192517][ T7326] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.326: invalid indirect mapped block 4294967295 (level 1) [ 327.250414][ T7326] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 327.279075][ T7326] EXT4-fs (loop6): 2 truncates cleaned up [ 327.297295][ T7334] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 327.305680][ T7326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.348113][ T7326] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.326: bg 0: block 5: invalid block bitmap [ 328.795868][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.054122][ T7343] loop0: detected capacity change from 0 to 256 [ 329.078764][ T7343] exfat: Deprecated parameter 'namecase' [ 329.101413][ T7343] exfat: Deprecated parameter 'namecase' [ 329.132518][ T7343] exfat: Deprecated parameter 'namecase' [ 329.221452][ T7343] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 329.360837][ T7353] Bluetooth: MGMT ver 1.23 [ 329.386577][ T7345] bond1: entered allmulticast mode [ 329.401729][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.903249][ T7357] syz.3.336: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 329.947742][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.3.336 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 329.947912][ T7357] Tainted: [L]=SOFTLOCKUP [ 329.947960][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.948048][ T7357] Call Trace: [ 329.948095][ T7357] [ 329.948143][ T7357] __dump_stack+0x26/0x30 [ 329.948304][ T7357] dump_stack_lvl+0x14c/0x1c0 [ 329.948454][ T7357] dump_stack+0x1e/0x25 [ 329.948583][ T7357] warn_alloc+0x46f/0x6a0 [ 329.948724][ T7357] ? hrtimer_start_range_ns+0x170c/0x38f0 [ 329.948903][ T7357] ? kmsan_get_metadata+0xf1/0x160 [ 329.949076][ T7357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.949261][ T7357] __vmalloc_node_range_noprof+0x148/0x2cd0 [ 329.949405][ T7357] ? kmsan_get_metadata+0xf1/0x160 [ 329.949570][ T7357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.949751][ T7357] ? should_fail_ex+0x45/0x8c0 [ 329.949897][ T7357] ? kmsan_get_metadata+0xf1/0x160 [ 329.950064][ T7357] ? kmsan_get_metadata+0xf1/0x160 [ 329.950229][ T7357] ? kmsan_get_metadata+0xf1/0x160 [ 329.950397][ T7357] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.950578][ T7357] ? __kmalloc_cache_noprof+0x3b0/0x1240 [ 329.950705][ T7357] ? kmsan_get_metadata+0xf1/0x160 [ 329.950894][ T7357] vmalloc_user_noprof+0xce/0x140 [ 329.951024][ T7357] ? xskq_create+0x11d/0x290 [ 329.951148][ T7357] xskq_create+0x11d/0x290 [ 329.951284][ T7357] xsk_init_queue+0xce/0x180 [ 329.951408][ T7357] xsk_setsockopt+0x7f6/0xfe0 [ 329.951596][ T7357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.951765][ T7357] __sys_setsockopt+0x43e/0x580 [ 329.951961][ T7357] __ia32_sys_setsockopt+0xf3/0x1a0 [ 329.952149][ T7357] ia32_sys_call+0x34c3/0x4360 [ 329.952321][ T7357] __do_fast_syscall_32+0x195/0x470 [ 329.952467][ T7357] do_fast_syscall_32+0x37/0x80 [ 329.952596][ T7357] do_SYSENTER_32+0x1f/0x30 [ 329.952719][ T7357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.952906][ T7357] RIP: 0023:0xf705f01c [ 329.953024][ T7357] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 329.953130][ T7357] RSP: 002b:00000000f542c50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 329.953250][ T7357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 329.953332][ T7357] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 329.953410][ T7357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.953484][ T7357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 329.953558][ T7357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.953669][ T7357] [ 330.283795][ T7357] Mem-Info: [ 330.287078][ T7357] active_anon:9583 inactive_anon:0 isolated_anon:0 [ 330.287078][ T7357] active_file:13127 inactive_file:40014 isolated_file:0 [ 330.287078][ T7357] unevictable:768 dirty:306 writeback:0 [ 330.287078][ T7357] slab_reclaimable:5092 slab_unreclaimable:22605 [ 330.287078][ T7357] mapped:33003 shmem:4746 pagetables:1843 [ 330.287078][ T7357] sec_pagetables:0 bounce:0 [ 330.287078][ T7357] kernel_misc_reclaimable:0 [ 330.287078][ T7357] free:354836 free_pcp:10376 free_cma:0 [ 330.367972][ T7357] Node 0 active_anon:38300kB inactive_anon:0kB active_file:52508kB inactive_file:159888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132000kB dirty:1232kB writeback:0kB shmem:17508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5584kB pagetables:6968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 330.896062][ T7357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.042984][ T7357] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.239763][ T7357] lowmem_reserve[]: 0 927 1241 1241 1241 [ 331.288112][ T7357] Node 0 DMA32 free:488636kB boost:0kB min:36852kB low:46064kB high:55276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19892kB inactive_anon:0kB active_file:48044kB inactive_file:86780kB unevictable:0kB writepending:448kB zspages:0kB present:3129332kB managed:949816kB mlocked:0kB bounce:0kB free_pcp:26736kB local_pcp:13136kB free_cma:0kB [ 331.435299][ T7357] lowmem_reserve[]: 0 0 313 313 313 [ 331.468647][ T7357] Node 0 Normal free:16296kB boost:0kB min:13056kB low:16320kB high:19584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18340kB inactive_anon:0kB active_file:4464kB inactive_file:73108kB unevictable:1536kB writepending:796kB zspages:0kB present:1048580kB managed:321492kB mlocked:0kB bounce:0kB free_pcp:12968kB local_pcp:6952kB free_cma:0kB [ 331.471432][ T7353] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 331.541257][ T7357] lowmem_reserve[]: 0 0 0 0 0 [ 331.563808][ T5583] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.579369][ T7357] Node 1 Normal free:910276kB boost:0kB min:40036kB low:50044kB high:60052kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:985800kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 331.620591][ T7357] lowmem_reserve[]: 0 0 0 0 0 [ 331.638274][ T7357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 331.653513][ T7357] Node 0 DMA32: 499*4kB (UE) 984*8kB (UME) 1107*16kB (UME) 608*32kB (UME) 334*64kB (UME) 209*128kB (UM) 117*256kB (UME) 60*512kB (UM) 15*1024kB (UM) 5*2048kB (UME) 75*4096kB (UM) = 488636kB [ 331.695159][ T7357] Node 0 Normal: 164*4kB (ME) 73*8kB (UM) 11*16kB (ME) 5*32kB (M) 8*64kB (UM) 9*128kB (M) 3*256kB (UM) 2*512kB (ME) 1*1024kB (M) 1*2048kB (U) 2*4096kB (M) = 16296kB [ 331.745897][ T7357] Node 1 Normal: 1*4kB (M) 2*8kB (M) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 2*128kB (U) 4*256kB (UM) 0*512kB 3*1024kB (UM) 2*2048kB (UM) 220*4096kB (M) = 910276kB [ 331.816676][ T7357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.846952][ T7357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.876654][ T7357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.913263][ T7357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.946553][ T7357] 57901 total pagecache pages [ 331.969726][ T7357] 0 pages in swap cache [ 331.996681][ T7357] Free swap = 124996kB [ 332.015123][ T7357] Total swap = 124996kB [ 332.033133][ T7357] 2097051 pages RAM [ 332.055219][ T7357] 0 pages HighMem/MovableOnly [ 332.083682][ T7357] 1531750 pages reserved [ 332.094953][ T7357] 0 pages cma reserved [ 332.317825][ T7353] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.334322][ T7353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.377439][ T7353] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.435173][ T7353] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 332.514803][ T7353] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 333.424184][ T7373] vivid-002: disconnect [ 333.532366][ T7371] vivid-002: reconnect [ 333.631344][ T5590] Bluetooth: hci4: command 0x0c1a tx timeout [ 333.954873][ T7378] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 334.352514][ T5590] Bluetooth: hci2: command 0x0405 tx timeout [ 334.431450][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 334.665312][ T5683] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 334.763504][ T5743] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 334.845199][ T5683] usb 7-1: Using ep0 maxpacket: 8 [ 334.900925][ T5683] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 334.924127][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.942937][ T5683] usb 7-1: Product: syz [ 334.955199][ T5683] usb 7-1: Manufacturer: syz [ 334.968178][ T5683] usb 7-1: SerialNumber: syz [ 334.973596][ T5743] usb 8-1: Using ep0 maxpacket: 16 [ 334.996280][ T5743] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 335.019802][ T5683] usb 7-1: config 0 descriptor?? [ 335.033895][ T5743] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.103330][ T5743] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 335.127802][ T5743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.137299][ T5743] usb 8-1: Product: syz [ 335.142569][ T5743] usb 8-1: Manufacturer: syz [ 335.148119][ T5743] usb 8-1: SerialNumber: syz [ 335.209079][ T5743] usb 8-1: config 0 descriptor?? [ 335.267204][ T5743] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 335.282073][ T5683] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.297873][ T5743] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 335.386466][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.358'. [ 335.396944][ T7394] netlink: 36 bytes leftover after parsing attributes in process `syz.5.358'. [ 335.475257][ T7394] vlan2: entered promiscuous mode [ 335.481259][ T7394] syz_tun: entered promiscuous mode [ 335.490709][ T7394] vlan2: entered allmulticast mode [ 335.497049][ T7394] syz_tun: entered allmulticast mode [ 335.730505][ T5683] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 335.775610][ T5683] usb 7-1: USB disconnect, device number 7 [ 335.874359][ T5743] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 335.886525][ T5743] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 336.511626][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.624721][ T7403] loop6: detected capacity change from 0 to 256 [ 336.645156][ T7403] exfat: Deprecated parameter 'namecase' [ 336.653059][ T7403] exfat: Deprecated parameter 'namecase' [ 336.668369][ T7403] exfat: Deprecated parameter 'namecase' [ 337.433680][ T5743] em28xx 8-1:0.0: AC97 vendor ID = 0x00fc00fe [ 337.466969][ T5590] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 337.476568][ T7403] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 337.711110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 337.781087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 337.813538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 337.881089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 337.901078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 338.031099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 338.081084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 338.121695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 338.210070][ T5743] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 338.218539][ T5743] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 338.606775][ T5590] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.200223][ T5743] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 339.208088][ T5743] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 339.226428][ T5743] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 339.234293][ T5743] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 339.723415][ T5743] usb 8-1: USB disconnect, device number 3 [ 340.486245][ T7415] overlayfs: statfs failed on './file0' [ 341.471369][ T5590] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 341.480171][ T5590] Bluetooth: hci4: Injecting HCI hardware error event [ 341.487786][ T5590] Bluetooth: hci4: hardware error 0x00 [ 343.553461][ T5590] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 343.667048][ T7458] loop0: detected capacity change from 0 to 512 [ 343.739117][ T7458] EXT4-fs (loop0): 1 truncate cleaned up [ 343.800774][ T7458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.917670][ T7464] loop7: detected capacity change from 0 to 256 [ 343.957641][ T7464] exfat: Deprecated parameter 'namecase' [ 343.988459][ T7464] exfat: Deprecated parameter 'namecase' [ 344.018628][ T7464] exfat: Deprecated parameter 'namecase' [ 344.041509][ T7462] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 344.111619][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.179594][ T7464] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 344.509465][ T5582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.694853][ T7472] netlink: 'syz.5.367': attribute type 7 has an invalid length. [ 345.934755][ T7479] syzkaller0: entered promiscuous mode [ 345.940664][ T7479] syzkaller0: entered allmulticast mode [ 348.231681][ T7492] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 348.698771][ T7497] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 348.722891][ T7497] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 350.026563][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 350.084937][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 350.136814][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 350.195106][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 350.239952][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 350.885914][ T7519] virt_wifi0 speed is unknown, defaulting to 1000 [ 351.536552][ T7532] syzkaller0: entered promiscuous mode [ 351.542899][ T7532] syzkaller0: entered allmulticast mode [ 352.550367][ T7540] netlink: 84 bytes leftover after parsing attributes in process `syz.5.389'. [ 354.199248][ T7556] bridge0: port 3(erspan0) entered blocking state [ 354.231561][ T7556] bridge0: port 3(erspan0) entered disabled state [ 354.254004][ T7556] erspan0: entered allmulticast mode [ 354.305457][ T7556] erspan0: entered promiscuous mode [ 354.327149][ T7556] bridge0: port 3(erspan0) entered blocking state [ 354.334271][ T7556] bridge0: port 3(erspan0) entered forwarding state [ 354.509400][ T7559] erspan0: left allmulticast mode [ 354.539782][ T7559] erspan0: left promiscuous mode [ 354.572760][ T7559] bridge0: port 3(erspan0) entered disabled state [ 355.534601][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.544555][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.894927][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.947802][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.212754][ T14] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.238514][ T14] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.263263][ T14] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.293140][ T14] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.413815][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.406'. [ 358.033880][ T7606] loop0: detected capacity change from 0 to 128 [ 359.363348][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.416'. [ 360.396368][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.418'. [ 361.897246][ T7661] loop6: detected capacity change from 0 to 128 [ 363.170450][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 365.273101][ T809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 365.514720][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 365.596427][ T809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.689212][ T809] usb 1-1: config 10 has an invalid interface number: 45 but max is 0 [ 365.776406][ T809] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 365.896328][ T809] usb 1-1: config 10 has no interface number 0 [ 365.926416][ T809] usb 1-1: config 10 interface 45 altsetting 248 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 365.972889][ T809] usb 1-1: config 10 interface 45 altsetting 248 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 366.005145][ T809] usb 1-1: config 10 interface 45 altsetting 248 has a duplicate endpoint with address 0xB, skipping [ 366.053188][ T809] usb 1-1: config 10 interface 45 altsetting 248 endpoint 0xE has invalid wMaxPacketSize 0 [ 366.064848][ T7705] fuse: fd is not a fuse device [ 366.087078][ T809] usb 1-1: config 10 interface 45 altsetting 248 bulk endpoint 0xE has invalid maxpacket 0 [ 366.148033][ T809] usb 1-1: config 10 interface 45 altsetting 248 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 366.178366][ T809] usb 1-1: config 10 interface 45 has no altsetting 0 [ 366.210511][ T809] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=66.41 [ 366.247383][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.268820][ T7706] overlayfs: statfs failed on './file0' [ 366.285059][ T809] usb 1-1: Product: syz [ 366.298819][ T809] usb 1-1: Manufacturer: syz [ 366.309206][ T809] usb 1-1: SerialNumber: syz [ 366.609796][ T809] s2255 1-1:10.45: Could not find bulk-in endpoint [ 366.628956][ T809] Sensoray 2255 driver load failed: 0xfffffff4 [ 366.643110][ T809] s2255 1-1:10.45: probe with driver s2255 failed with error -12 [ 366.698592][ T809] usb 1-1: USB disconnect, device number 5 [ 367.086579][ T7718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.439'. [ 367.094794][ T7715] loop6: detected capacity change from 0 to 4096 [ 367.185603][ T7715] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 367.196929][ T7719] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.246972][ T7715] NILFS (loop6): mounting fs with errors [ 367.499278][ T29] audit: type=1800 audit(1781111050.527:27): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.438" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 367.660350][ T29] audit: type=1800 audit(1781111050.687:28): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.438" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 367.986251][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 369.105077][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.444'. [ 369.313336][ T5683] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 369.594832][ T5683] usb 1-1: config index 0 descriptor too short (expected 255, got 27) [ 369.664484][ T5683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.759018][ T5683] usb 1-1: config 0 has no interfaces? [ 369.829373][ T5683] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 369.907360][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.979829][ T5683] usb 1-1: Product: syz [ 370.009616][ T5683] usb 1-1: Manufacturer: syz [ 370.046853][ T5683] usb 1-1: SerialNumber: syz [ 370.111393][ T5683] usb 1-1: config 0 descriptor?? [ 370.428215][ T5683] usb 1-1: USB disconnect, device number 6 [ 371.346380][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.449'. [ 371.358957][ T7763] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.524973][ T7769] loop0: detected capacity change from 0 to 256 [ 371.529470][ T7763] A link change request failed with some changes committed already. Interface 261C@] may have been left with an inconsistent configuration, please check. [ 371.563343][ T7759] virt_wifi0 speed is unknown, defaulting to 1000 [ 371.570282][ T7766] tipc: Started in network mode [ 371.580327][ T7766] tipc: Node identity e6e197e96263, cluster identity 4711 [ 371.599122][ T7766] tipc: Enabled bearer , priority 0 [ 371.816455][ T7767] syzkaller0: entered promiscuous mode [ 371.919040][ T7767] syzkaller0: entered allmulticast mode [ 372.875955][ T7772] tipc: Resetting bearer [ 372.954944][ T7764] tipc: Resetting bearer [ 373.038902][ T7764] tipc: Disabling bearer [ 373.416412][ T5683] tipc: Node number set to 2223151081 [ 373.442169][ T809] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 373.551821][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.668012][ T809] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.718649][ T809] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.815283][ T809] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 373.918842][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.969939][ T809] usb 8-1: Product: syz [ 374.001839][ T809] usb 8-1: Manufacturer: syz [ 374.027046][ T809] usb 8-1: SerialNumber: syz [ 374.410468][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.455'. [ 374.465673][ T7779] netlink: 6 bytes leftover after parsing attributes in process `syz.7.455'. [ 374.570690][ T809] usb 8-1: unit 4 not found! [ 374.860420][ T809] usb 8-1: USB disconnect, device number 4 [ 375.076869][ T6934] udevd[6934]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.717387][ T7803] loop7: detected capacity change from 0 to 512 [ 378.936052][ T7803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.246579][ T7809] netlink: 'syz.5.463': attribute type 13 has an invalid length. [ 379.327828][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 380.431774][ T7811] macvtap1: entered promiscuous mode [ 380.447082][ T7811] macvtap1: entered allmulticast mode [ 380.561886][ T7814] macvtap1: left promiscuous mode [ 380.589989][ T7814] macvtap1: left allmulticast mode [ 380.659341][ T56] bridge_slave_1: left allmulticast mode [ 380.701591][ T56] bridge_slave_1: left promiscuous mode [ 380.745371][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.836805][ T56] bridge_slave_0: left allmulticast mode [ 380.879718][ T56] bridge_slave_0: left promiscuous mode [ 380.934610][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.875488][ T7836] fuse: fd is not a fuse device [ 381.890920][ T6731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.082473][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.170373][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.237743][ T56] bond0 (unregistering): Released all slaves [ 382.965666][ T7850] netlink: 76 bytes leftover after parsing attributes in process `syz.3.468'. [ 383.060510][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.469'. [ 383.120495][ T56] hsr_slave_0: left promiscuous mode [ 383.193914][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.200633][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.219057][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.469'. [ 383.243808][ T56] hsr_slave_1: left promiscuous mode [ 383.324646][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.409326][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.614279][ T56] team0 (unregistering): Port device team_slave_1 removed [ 384.663501][ T7874] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 384.775748][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 384.792463][ T56] team0 (unregistering): Port device team_slave_0 removed [ 385.971970][ T7874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.276310][ T7895] loop5: detected capacity change from 0 to 1024 [ 386.319199][ T7895] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 386.321400][ T7877] bond2: entered promiscuous mode [ 386.389912][ T7895] JBD2: no valid journal superblock found [ 386.427435][ T7895] EXT4-fs (loop5): Could not load journal inode [ 386.619168][ T7879] bond2: (slave dummy0): making interface the new active one [ 386.660668][ T7879] dummy0: entered promiscuous mode [ 386.707065][ T7879] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 386.771436][ T5689] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 386.993089][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.040924][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 387.093514][ T5689] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 387.136214][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.259419][ T5689] usb 6-1: config 0 descriptor?? [ 387.595754][ T7895] netlink: 'syz.5.477': attribute type 3 has an invalid length. [ 387.690902][ T5231] 8021q: adding VLAN 0 to HW filter on device eth10 [ 388.660124][ T5689] ath6kl: Failed to submit usb control message: -71 [ 388.682814][ T5689] ath6kl: unable to send the bmi data to the device: -71 [ 388.694805][ T5689] ath6kl: Unable to send get target info: -71 [ 388.705547][ T5689] ath6kl: Failed to init ath6kl core: -71 [ 388.714457][ T5689] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 389.510144][ T7925] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 389.685669][ T5689] usb 6-1: USB disconnect, device number 4 [ 389.984471][ T7926] tc action pedit 'at' offset 6 out of bounds [ 390.277075][ T7933] syzkaller0: entered promiscuous mode [ 390.358703][ T7933] syzkaller0: entered allmulticast mode [ 395.223329][ T7966] loop5: detected capacity change from 0 to 1024 [ 395.282943][ T5231] 8021q: adding VLAN 0 to HW filter on device eth9 [ 395.305370][ T7966] hfsplus: failed to load extents file [ 395.664528][ T5683] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 395.793405][ T5689] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 395.914697][ T5683] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 395.957448][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.001317][ T5683] usb 1-1: Product: syz [ 396.018619][ T5689] usb 8-1: not running at top speed; connect to a high speed hub [ 396.018681][ T5683] usb 1-1: Manufacturer: syz [ 396.018771][ T5683] usb 1-1: SerialNumber: syz [ 396.072772][ T5689] usb 8-1: config 45 has an invalid interface number: 2 but max is 0 [ 396.116092][ T5689] usb 8-1: config 45 has no interface number 0 [ 396.148867][ T5689] usb 8-1: config 45 interface 2 has no altsetting 0 [ 396.153208][ T5683] usb 1-1: config 0 descriptor?? [ 396.208387][ T5689] usb 8-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 396.256266][ T5689] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.298697][ T5689] usb 8-1: Product: syz [ 396.319500][ T5689] usb 8-1: Manufacturer: syz [ 396.361335][ T5689] usb 8-1: SerialNumber: syz [ 396.929550][ T5689] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 396.969137][ T7987] tipc: Enabling of bearer rejected, failed to enable media [ 397.000081][ T5689] dvb-usb: bulk message failed: -22 (3/0) [ 397.006383][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.6.499'. [ 397.071765][ T5689] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 397.122461][ T5689] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 397.147997][ T5689] usb 8-1: media controller created [ 397.178385][ T5689] dvb-usb: bulk message failed: -22 (5/0) [ 397.199685][ T5689] dvb-usb: MAC address reading failed. [ 397.248574][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.327243][ T5683] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 397.335732][ T5689] dvb-usb: bulk message failed: -22 (6/0) [ 397.364044][ T5689] dvb-usb: bulk message failed: -22 (6/0) [ 397.366205][ T5683] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 397.388165][ T5689] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 397.449950][ T5689] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input6 [ 397.546682][ T5689] dvb-usb: schedule remote query interval to 100 msecs. [ 397.596890][ T5689] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 397.664164][ T5689] usb 8-1: USB disconnect, device number 5 [ 397.881702][ T5689] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 398.451351][ T8006] fuse: fd is not a fuse device [ 398.582525][ T5689] usb 1-1: USB disconnect, device number 7 [ 398.893399][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.902770][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.804073][ T8000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.577189][ T8039] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 400.748888][ T8004] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 400.768508][ T8004] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 400.935000][ T6582] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.959504][ T6582] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.986579][ T5231] 8021q: adding VLAN 0 to HW filter on device eth11 [ 401.230251][ T8040] bond1: (slave bridge2): making interface the new active one [ 401.275197][ T8040] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 401.412760][ T8041] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 401.517865][ T8052] loop7: detected capacity change from 0 to 256 [ 401.534467][ T8042] macvlan2: entered promiscuous mode [ 401.549703][ T8052] exfat: Bad value for 'uid' [ 401.556522][ T8042] macvlan2: entered allmulticast mode [ 401.575628][ T8052] exfat: Bad value for 'uid' [ 401.633759][ T8042] bond1: entered promiscuous mode [ 401.665737][ T8042] bridge2: entered promiscuous mode [ 401.720067][ T8042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.745717][ T5590] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 401.785361][ T8042] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 401.853234][ T8042] bond1: left promiscuous mode [ 401.905578][ T8042] bridge2: left promiscuous mode [ 401.918332][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 402.202527][ T8050] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 402.247287][ T6582] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.340893][ T6582] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.419330][ T8047] tipc: Started in network mode [ 402.450066][ T8047] tipc: Node identity 080211000001, cluster identity 4711 [ 402.500744][ T8047] tipc: Enabled bearer , priority 0 [ 403.168012][ T8069] loop7: detected capacity change from 0 to 256 [ 403.236276][ T8069] exFAT-fs (loop7): invalid fs_name [ 403.272040][ T8069] exFAT-fs (loop7): failed to read boot sector [ 403.306417][ T8069] exFAT-fs (loop7): failed to recognize exfat type [ 403.811521][ T5683] tipc: Node number set to 134418688 [ 405.139488][ T8085] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 405.982287][ T8092] netlink: 14 bytes leftover after parsing attributes in process `syz.7.516'. [ 406.336014][ T29] audit: type=1326 audit(1781111089.247:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 407.106174][ T8087] loop7: detected capacity change from 0 to 2048 [ 407.142999][ T29] audit: type=1326 audit(1781111089.247:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 407.228094][ T29] audit: type=1326 audit(1781111089.267:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 407.883485][ T29] audit: type=1326 audit(1781111089.267:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 407.926817][ T40] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 407.942168][ T29] audit: type=1326 audit(1781111089.267:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 407.971645][ T29] audit: type=1326 audit(1781111089.277:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 407.987198][ T8087] loop7: p1 p2 p3 [ 407.987198][ T8087] p1: [ 407.998763][ T29] audit: type=1326 audit(1781111089.277:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 408.030575][ T29] audit: type=1326 audit(1781111089.287:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 408.109389][ T8087] loop7: p1 size 16779263 extends beyond EOD, truncated [ 408.133334][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 408.156764][ T29] audit: type=1326 audit(1781111089.287:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 408.195355][ T40] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 408.227231][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.239978][ T8087] loop7: p2 size 458752 extends beyond EOD, truncated [ 408.266547][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.293183][ T29] audit: type=1326 audit(1781111089.297:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.6.518" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0501c code=0x7ffc0000 [ 408.338513][ T8087] loop7: p3 start 3036741376 is beyond EOD, truncated [ 408.346926][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.383813][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.413714][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.441549][ T4937] loop7: p1 p2 p3 [ 408.441549][ T4937] p1: [ 408.463863][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.489848][ T4937] loop7: p1 size 16779263 extends beyond EOD, truncated [ 408.526702][ T4937] loop7: p2 size 458752 extends beyond EOD, truncated [ 408.620812][ T4937] loop7: p3 start 3036741376 is beyond EOD, truncated [ 409.158673][ T40] usb 6-1: can't set config #16, error -71 [ 409.228393][ T40] usb 6-1: USB disconnect, device number 5 [ 410.056241][ T8109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.720598][ T8127] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 410.808161][ T6934] udevd[6934]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 410.829355][ T6912] udevd[6912]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 410.854565][ T8127] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 410.907962][ T8128] syzkaller0: entered promiscuous mode [ 410.920588][ T8128] syzkaller0: entered allmulticast mode [ 411.252858][ T6912] udevd[6912]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 411.273765][ T6934] udevd[6934]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 419.590528][ T5231] 8021q: adding VLAN 0 to HW filter on device eth12 [ 419.726318][ T8156] loop5: detected capacity change from 0 to 128 [ 419.813986][ T8156] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 419.820200][ T8160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.908778][ T8156] hpfs: filesystem error: improperly stopped [ 419.958757][ T8156] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 420.020408][ T8156] hpfs: You really don't want any checks? You are crazy... [ 420.071708][ T8156] hpfs: hpfs_map_sector(): read error [ 420.106994][ T8156] hpfs: code page support is disabled [ 420.150140][ T8156] hpfs: hpfs_map_4sectors(): unaligned read [ 420.178817][ T8156] hpfs: hpfs_map_4sectors(): unaligned read [ 420.216059][ T8156] hpfs: filesystem error: unable to find root dir [ 424.218598][ T8188] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.972376][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 425.972448][ T29] audit: type=1800 audit(1781111108.997:53): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.540" name="nullb0" dev="tmpfs" ino=449 res=0 errno=0 [ 426.164678][ T8215] loop7: detected capacity change from 0 to 128 [ 426.263611][ T8215] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 426.350582][ T8215] hpfs: filesystem error: improperly stopped [ 426.381630][ T8215] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 426.444269][ T8215] hpfs: You really don't want any checks? You are crazy... [ 426.490858][ T8215] hpfs: hpfs_map_sector(): read error [ 426.532043][ T8215] hpfs: code page support is disabled [ 426.576159][ T8215] hpfs: hpfs_map_4sectors(): unaligned read [ 426.623647][ T8215] hpfs: hpfs_map_4sectors(): unaligned read [ 426.665692][ T8215] hpfs: filesystem error: unable to find root dir [ 427.615314][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.659461][ T8222] random: crng reseeded on system resumption [ 427.673501][ T8225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.683430][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.732351][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 428.833895][ C0] ===================================================== [ 428.841113][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 428.849877][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 428.856298][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 428.863402][ C0] __sysvec_call_function_single+0x48/0x350 [ 428.869444][ C0] sysvec_call_function_single+0x7c/0x90 [ 428.875247][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 428.881367][ C0] filter_irq_stacks+0xaa/0x190 [ 428.886320][ C0] stack_depot_save_flags+0x35/0x790 [ 428.891735][ C0] stack_depot_save+0x12/0x20 [ 428.896525][ C0] __msan_poison_alloca+0x100/0x1a0 [ 428.901868][ C0] alloc_vmap_area+0x5b/0x2db0 [ 428.906742][ C0] __get_vm_area_node+0x263/0x3b0 [ 428.911885][ C0] __vmalloc_node_range_noprof+0x43c/0x2cd0 [ 428.917931][ C0] vzalloc_noprof+0xce/0x140 [ 428.922637][ C0] xt_counters_alloc+0x70/0xa0 [ 428.927535][ C0] __do_replace+0x6b/0x1100 [ 428.932178][ C0] do_ip6t_set_ctl+0x1618/0x1d60 [ 428.937292][ C0] nf_setsockopt+0x4fb/0x550 [ 428.942047][ C0] ipv6_setsockopt+0x1c3/0x2f0 [ 428.946940][ C0] tcp_setsockopt+0x157/0x180 [ 428.951734][ C0] sock_common_setsockopt+0xf5/0x140 [ 428.957165][ C0] __sys_setsockopt+0x43e/0x580 [ 428.962167][ C0] __ia32_compat_sys_socketcall+0x441/0x1b70 [ 428.968290][ C0] ia32_sys_call+0x2c57/0x4360 [ 428.973206][ C0] __do_fast_syscall_32+0x195/0x470 [ 428.978525][ C0] do_fast_syscall_32+0x37/0x80 [ 428.983483][ C0] do_SYSENTER_32+0x1f/0x30 [ 428.988106][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.994588][ C0] [ 428.996960][ C0] Local variable cycles.i created at: [ 429.002381][ C0] clockevents_program_event+0x178/0x830 [ 429.008141][ C0] tick_program_event+0xfb/0x190 [ 429.013205][ C0] [ 429.015599][ C0] CPU: 0 UID: 0 PID: 5921 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(lazy) [ 429.026757][ C0] Tainted: [L]=SOFTLOCKUP [ 429.031137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.041284][ C0] ===================================================== [ 429.048292][ C0] Disabling lock debugging due to kernel taint [ 429.054520][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 429.061025][ C0] CPU: 0 UID: 0 PID: 5921 Comm: syz-executor Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 429.072203][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 429.077806][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.087940][ C0] Call Trace: [ 429.091298][ C0] [ 429.094201][ C0] __dump_stack+0x26/0x30 [ 429.098660][ C0] dump_stack_lvl+0x50/0x1c0 [ 429.103377][ C0] ? dump_stack+0x12/0x25 [ 429.107840][ C0] dump_stack+0x1e/0x25 [ 429.112113][ C0] vpanic+0x7b4/0x1430 [ 429.116393][ C0] panic+0x15d/0x160 [ 429.120502][ C0] kmsan_report+0x31a/0x320 [ 429.125187][ C0] ? __msan_warning+0x1b/0x30 [ 429.129995][ C0] ? __flush_smp_call_function_queue+0x343/0x1810 [ 429.136568][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 429.143837][ C0] ? __sysvec_call_function_single+0x48/0x350 [ 429.150047][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 429.156021][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 429.162334][ C0] ? filter_irq_stacks+0xaa/0x190 [ 429.167476][ C0] ? stack_depot_save_flags+0x35/0x790 [ 429.173062][ C0] ? stack_depot_save+0x12/0x20 [ 429.178037][ C0] ? __msan_poison_alloca+0x100/0x1a0 [ 429.183561][ C0] ? alloc_vmap_area+0x5b/0x2db0 [ 429.188616][ C0] ? __get_vm_area_node+0x263/0x3b0 [ 429.193927][ C0] ? __vmalloc_node_range_noprof+0x43c/0x2cd0 [ 429.200128][ C0] ? vzalloc_noprof+0xce/0x140 [ 429.205010][ C0] ? xt_counters_alloc+0x70/0xa0 [ 429.210058][ C0] ? __do_replace+0x6b/0x1100 [ 429.214869][ C0] ? do_ip6t_set_ctl+0x1618/0x1d60 [ 429.220119][ C0] ? nf_setsockopt+0x4fb/0x550 [ 429.225026][ C0] ? ipv6_setsockopt+0x1c3/0x2f0 [ 429.230094][ C0] ? tcp_setsockopt+0x157/0x180 [ 429.235064][ C0] ? sock_common_setsockopt+0xf5/0x140 [ 429.240667][ C0] ? __sys_setsockopt+0x43e/0x580 [ 429.245847][ C0] ? __ia32_compat_sys_socketcall+0x441/0x1b70 [ 429.252133][ C0] ? ia32_sys_call+0x2c57/0x4360 [ 429.257240][ C0] ? __do_fast_syscall_32+0x195/0x470 [ 429.262739][ C0] ? do_fast_syscall_32+0x37/0x80 [ 429.267882][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 429.272664][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.279321][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 429.285841][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.291112][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.296399][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 429.302878][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.308145][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.314124][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.319409][ C0] __msan_warning+0x1b/0x30 [ 429.324053][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 429.330632][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.335925][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 429.343026][ C0] __sysvec_call_function_single+0x48/0x350 [ 429.349075][ C0] sysvec_call_function_single+0x7c/0x90 [ 429.354879][ C0] [ 429.357864][ C0] [ 429.360851][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 429.366960][ C0] RIP: 0010:filter_irq_stacks+0xaa/0x190 [ 429.372712][ C0] Code: 00 81 0f 92 c1 48 81 fb 60 18 00 81 0f 92 c2 30 ca 49 81 fc 60 18 00 81 41 0f 92 c7 89 c1 44 08 f1 84 d1 75 7c 44 20 f8 75 77 <45> 20 fe 0f 85 91 00 00 00 49 81 fd 50 04 fc 90 0f 93 c1 48 81 fb [ 429.392453][ C0] RSP: 0018:ffff8880368a32f8 EFLAGS: 00000246 [ 429.398635][ C0] RAX: ffff8880360a3300 RBX: ffffffff828edb63 RCX: 00000000360a3301 [ 429.406710][ C0] RDX: ffff8880364a3300 RSI: 0000000000000001 RDI: 0000000007b20002 [ 429.414783][ C0] RBP: ffff8880368a3348 R08: ffffea000000000f R09: 0000000000000dc0 [ 429.422857][ C0] R10: ffff888051169ba0 R11: ffffffff81ddb240 R12: ffffffff828edb63 [ 429.430925][ C0] R13: ffffffff828edb63 R14: 0000000000000001 R15: ffff8880368a3300 [ 429.439004][ C0] ? __get_vm_area_node+0x263/0x3b0 [ 429.444325][ C0] ? __get_vm_area_node+0x263/0x3b0 [ 429.449635][ C0] ? __get_vm_area_node+0x263/0x3b0 [ 429.454953][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 429.461305][ C0] ? filter_irq_stacks+0x49/0x190 [ 429.466448][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.472431][ C0] stack_depot_save_flags+0x35/0x790 [ 429.477842][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.483832][ C0] stack_depot_save+0x12/0x20 [ 429.488626][ C0] __msan_poison_alloca+0x100/0x1a0 [ 429.493968][ C0] ? alloc_vmap_area+0x5b/0x2db0 [ 429.499014][ C0] ? __get_vm_area_node+0x263/0x3b0 [ 429.504332][ C0] ? should_fail_ex+0x45/0x8c0 [ 429.509244][ C0] alloc_vmap_area+0x5b/0x2db0 [ 429.514118][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.519397][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.524660][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.529925][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.535906][ C0] ? __kmalloc_cache_node_noprof+0x414/0x12e0 [ 429.542105][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.548087][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.553364][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.559342][ C0] __get_vm_area_node+0x263/0x3b0 [ 429.564506][ C0] __vmalloc_node_range_noprof+0x43c/0x2cd0 [ 429.570622][ C0] ? xt_counters_alloc+0x70/0xa0 [ 429.575677][ C0] ? kfree+0x753/0x1100 [ 429.579975][ C0] ? kvfree+0x42/0x60 [ 429.584097][ C0] ? translate_compat_table+0x3a61/0x3a90 [ 429.589965][ C0] ? filter_irq_stacks+0x49/0x190 [ 429.595110][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.600390][ C0] vzalloc_noprof+0xce/0x140 [ 429.605099][ C0] ? xt_counters_alloc+0x70/0xa0 [ 429.610163][ C0] xt_counters_alloc+0x70/0xa0 [ 429.615045][ C0] __do_replace+0x6b/0x1100 [ 429.619703][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 429.624979][ C0] do_ip6t_set_ctl+0x1618/0x1d60 [ 429.630048][ C0] ? do_ipv6_setsockopt+0x426d/0x49c0 [ 429.635619][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 429.641036][ C0] nf_setsockopt+0x4fb/0x550 [ 429.645797][ C0] ipv6_setsockopt+0x1c3/0x2f0 [ 429.650702][ C0] ? __pfx_ipv6_setsockopt+0x10/0x10 [ 429.656120][ C0] tcp_setsockopt+0x157/0x180 [ 429.660927][ C0] ? __pfx_tcp_setsockopt+0x10/0x10 [ 429.666237][ C0] sock_common_setsockopt+0xf5/0x140 [ 429.671665][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 429.677695][ C0] __sys_setsockopt+0x43e/0x580 [ 429.682715][ C0] __ia32_compat_sys_socketcall+0x441/0x1b70 [ 429.688866][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 429.695364][ C0] ia32_sys_call+0x2c57/0x4360 [ 429.700286][ C0] __do_fast_syscall_32+0x195/0x470 [ 429.705625][ C0] do_fast_syscall_32+0x37/0x80 [ 429.710604][ C0] do_SYSENTER_32+0x1f/0x30 [ 429.715241][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.721712][ C0] RIP: 0023:0xf7fe901c [ 429.725863][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 429.745595][ C0] RSP: 002b:00000000ffab02e0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 429.754135][ C0] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000ffab0308 [ 429.762202][ C0] RDX: 00000000ffab06f0 RSI: 00000000f7477a00 RDI: 00000000f7474ff4 [ 429.770262][ C0] RBP: 00000000f74779a8 R08: 0000000000000000 R09: 0000000000000000 [ 429.778312][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 429.786365][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.794450][ C0] [ 429.797880][ C0] Kernel Offset: disabled [ 429.802240][ C0] Rebooting in 86400 seconds..