last executing test programs: 21m21.358936299s ago: executing program 32 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x4, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 21m16.702427374s ago: executing program 2 (id=68): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083863090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa3647f17b28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833fea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000002480)={0x3, [0x9, 0x8, 0xf0c], [{0x7ff, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x400, 0xe5, 0x1, 0x0, 0x1}, {0xffffffff, 0xfffffffc, 0x1, 0x0, 0x1}, {0x5, 0xb, 0x1, 0x0, 0x0, 0x1}, {0x40, 0x81, 0x0, 0x1, 0x0, 0x1}, {0x101, 0x71}, {0x4319, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x28, 0x1, 0x1}, {0x8e24, 0xf1, 0x1, 0x1}, {0x4, 0x80000001, 0x1, 0x1}, {0x7, 0x7, 0x1}], 0x5}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) 21m12.141462921s ago: executing program 2 (id=72): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x40, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x40000003}, 0x0) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$inet(0x2, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) connect$netlink(r2, &(0x7f00000005c0), 0xc) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaaaa0000efda81fe25061b80db44b76dfc76e4da919ae2bad3853d8916da9620653e1756e45606ad8695771a5d4a654fb36387e34da713d2219bf72fed2c887176efbb819cb2f21891c09866f0a15365876ddd5c2bcd3d426be60fbb267a395c48db10b9167b0421aa59521b6676fce7b85f0dbbbd508d7a25477b20c25b952b9acc16a1fe53135a4a5558665c08978e62e5cf9b6bf07ff0926265a3a6b98def1c60b0bbd186071569163a609ca91220d84b71a3533bba03363100de1ec94bf401043ca8d5bb8177bf1e48f6d731621994ee21f8b54f6971a17b656bab328b19e76673dbfd8889ab642893c2a66a1310e3198782e3bda986f3b0734fedd0a6cf299b111452e6d1e18700912d62422bd957adae4c33790000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 21m7.268504768s ago: executing program 2 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sysinfo(0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 21m5.52903432s ago: executing program 2 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) socket(0x2b, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x72a, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffe3e) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="00751a68ee798fcae0891520cb472639228250fe3c6cb8704d6119173e0f4ddf2e2ea356ff686011a21f9d3cedf56b6faf93aff907d0f0bc044946049bade3ea056c5736d3305252917094420fa4f03f2a1921c6748f0fbe3e606d166900000000000000000000000a5d824968a3ffc7e1d64fc469ce0003a0994e706ff79839db237e55b3a489f85cfa81bb3940f9dd3cef6c7ac881a58a1dab8519b5aedf24c34b2ae69c6624d7314f395c48a4b4cac7b5836900"/190], 0x1, 0x173, &(0x7f0000000240)="$eJzs281KMlEcx/Hf+Po8Pi+9b1oFLWqTUyqUSy+gG2gnOok0VmQbJYgupTvpTroBhbqBJhyHSmkxzSFP6PcD6h/hN+cc8K9/FyMAC2s5fM7IUTasgiC43ZJ0chy+DWCOBXoJACyq9JPtHQCwY1hLh3PAgyM9Pt80BtEjG3N+GNZS48KRBh/yubj5Oyd83cxM5vOSfsWZX+7H+R1N5n9/cf3CVL4QOz8+/+72ZP6PpL+S/kn6L2kp+q+1Imn1k/WbU+tvxFwfMDH69BVN8wYXGHXPadv39hPms1H+IGE+F+VLhvlywnw+yhcbF34z4TWApFKW+z9t2P8Zw/4HFlm31z+r+753RUFBQfFW2P5mAvDd3OvOpdvt9ffanXrLa3nnpUr1qFIuVQ6rbjiXuybTOYCf7P1H3/ZOAAAAAAAAAAAAAABAUmuS1m1vAgAAAMBMzOJ2IttnBAAAAAAAAAAAAAAAAAAAAObFawAAAP//w0hQzg==") 21m3.452107128s ago: executing program 2 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0xd) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 21m1.320115574s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 20m46.243980954s ago: executing program 33 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 10m26.421375405s ago: executing program 5 (id=1016): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x20000000e2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 10m25.14048462s ago: executing program 5 (id=1018): socket$rxrpc(0x21, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000000000000000000002000000000", @ANYRESHEX, @ANYBLOB="5a9d2a0e4a03a50face8ef7b4755655324e70e3acaead119225b3c77a8f62bf462a3b4fd473fe9e272d6ed2c3d85baa616ae70ea623d8dbc421d3b3c55654b1a0b1ce69cfc3701e80974c67f462bc522d608d9b91fd2d5393472ea9abac0946c42772bec7a67281c7850f730017bac7f5c53ac1e9835c288510fa3", @ANYRES32=0x0, @ANYRES16], 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = getpgrp(0x0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000100)="e890d3706fa84ddffe", 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffb}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) fstatfs(r3, &(0x7f00000003c0)=""/146) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) syz_io_uring_setup(0x41cf, &(0x7f0000000640)={0x0, 0xc8eb, 0x8000, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) 10m14.522649624s ago: executing program 5 (id=1038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$unix(0x1, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x897, 0x0, 0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 10m4.0758803s ago: executing program 5 (id=1051): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x20000000e2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 10m0.75999687s ago: executing program 5 (id=1056): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x20000000e2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 9m56.071230783s ago: executing program 5 (id=1061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$unix(0x1, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x897, 0x0, 0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 9m50.692049367s ago: executing program 3 (id=1072): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xf, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x0]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0xffffffff, 0x0]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, &(0x7f0000000340)="f87b5c36d82c8ee650519b5c4ca6c461cf4c58a9d37152c47f956a178a6c1746795c210233f0aa909cdcceae84e43a0ad5a4c5eb7bbb4f8a871f41d7a2fbe36b9529e7391ec53d3d56140285beba167bb42a62499e7b06dc60e8b7b205", 0x5d, 0x40002100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2) 9m47.216942849s ago: executing program 3 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x31, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) r4 = socket$kcm(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r4) connect$inet6(r3, 0x0, 0x0) utimes(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x8, 0x10001, 0x80, r6, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x3, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'pim6reg0\x00'}) 9m45.900555409s ago: executing program 3 (id=1078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) r5 = dup(0xffffffffffffffff) ioctl$TCSETAF(r5, 0x5408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r6 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @p_u16=0x0}}) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x21, 0x0) 9m44.49728349s ago: executing program 3 (id=1081): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) socket$kcm(0x2d, 0x2, 0x0) 9m43.015355933s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) connect$unix(r2, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 9m42.023448211s ago: executing program 3 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}}}}}}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) r9 = open(&(0x7f00000003c0)='./file0\x00', 0xd41, 0x0) fcntl$setlease(r9, 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 9m39.956900711s ago: executing program 34 (id=1061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$unix(0x1, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x897, 0x0, 0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 9m26.330563565s ago: executing program 35 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}}}}}}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) r9 = open(&(0x7f00000003c0)='./file0\x00', 0xd41, 0x0) fcntl$setlease(r9, 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 3m37.974783168s ago: executing program 0 (id=1581): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xf, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x0]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0xffffffff, 0x0]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8020}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x79f5, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, &(0x7f0000000340)="f87b5c36d82c8ee650519b5c4ca6c461cf4c58a9d37152c47f956a178a6c1746795c210233f0aa909cdcceae84e43a0ad5a4c5eb7bbb4f8a871f41d7a2fbe36b9529e7391ec53d3d56140285beba167bb42a62499e7b06dc60e8b7b205", 0x5d, 0x40002100}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2) 3m35.791728314s ago: executing program 0 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000007ac0)=""/4107, 0x100b) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x26, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) 3m34.736193498s ago: executing program 0 (id=1587): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x2, {0x92e, 0x6, 0x8, 0x8}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000814) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m29.462144425s ago: executing program 0 (id=1597): r0 = creat(0x0, 0xd931d3864d39dcca) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x69, 0xfffffffe, 0x0, 0x4000000, 0xfffffffe}) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) 3m26.675886556s ago: executing program 0 (id=1604): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800802, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'macromanian'}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x21, 0x306, &(0x7f0000000240)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 3m23.792726637s ago: executing program 0 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) bind(0xffffffffffffffff, &(0x7f0000000440)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x4, 0x0, 0xf, "55375766b6dfbf7f049659658f81a5cdbad4f5fa3739731162acbc6412a98d74fbd6ef98e6a374d585a9087fed44838bfc125b7aa3e8c410540ffd3ec92623", 0x28}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x14103e, 0x0) 3m7.94781479s ago: executing program 36 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) bind(0xffffffffffffffff, &(0x7f0000000440)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x4, 0x0, 0xf, "55375766b6dfbf7f049659658f81a5cdbad4f5fa3739731162acbc6412a98d74fbd6ef98e6a374d585a9087fed44838bfc125b7aa3e8c410540ffd3ec92623", 0x28}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x14103e, 0x0) 1m17.620911216s ago: executing program 9 (id=2096): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 1m16.711504217s ago: executing program 9 (id=2099): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x3, 0x101, 0xfffffff7, 0x101, 0x18, 0x6, 0x9}, &(0x7f0000000040)=0x9c) 1m15.658691956s ago: executing program 9 (id=2104): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad337212006a3e508b8040c7bc6e583cc41170a13349e2cfcc4b64bd4fbf41ee", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]}) 1m14.761242089s ago: executing program 9 (id=2106): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x34}}, 0x404c880) 1m14.118234161s ago: executing program 9 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000001fc80)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 1m13.681078604s ago: executing program 9 (id=2112): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x2, {0x92e, 0x6, 0x8, 0x8}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) init_module(&(0x7f0000000040)=ANY=[], 0x40, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.129907262s ago: executing program 6 (id=2113): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) 1m10.39530148s ago: executing program 6 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}]}, 0x24}}, 0x0) 1m10.390295266s ago: executing program 1 (id=2117): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0]) 1m9.410391945s ago: executing program 6 (id=2118): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0x0, 0x2, 0x6, 0x3, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1m9.249638558s ago: executing program 1 (id=2119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000080026006c0900000800a00007080000080027"], 0x40}}, 0x0) 1m8.470605282s ago: executing program 6 (id=2120): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x3, 0x6ff, &(0x7f0000001240)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1m8.18149543s ago: executing program 1 (id=2123): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x2, {0x92e, 0x6, 0x8, 0x8}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) init_module(&(0x7f0000000040)=ANY=[], 0x40, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.475499916s ago: executing program 6 (id=2127): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000c, 0x31, 0xffffffffffffffff, 0xffff8000) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000000c0)=0x100000) 1m5.127702749s ago: executing program 6 (id=2133): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_setup(0x202, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000e, 0x12, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000, 0x3], [0x0, 0xfffffffffffffffd, 0xe8a6, 0x3]}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f000024c000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/188) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x108) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) 1m4.067177844s ago: executing program 4 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1805a, &(0x7f0000000180)=ANY=[], 0x1, 0x105ca, &(0x7f0000004240)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 1m1.314743391s ago: executing program 1 (id=2140): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 1m0.839781129s ago: executing program 1 (id=2141): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000003fffff) 1m0.323032486s ago: executing program 4 (id=2143): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m0.286592442s ago: executing program 1 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sysinfo(0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 59.514515731s ago: executing program 4 (id=2147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x3a9, 0x70bd27, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 59.428678921s ago: executing program 7 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5d36616017"}]]}, 0x50}}, 0x0) 58.890593333s ago: executing program 7 (id=2150): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x400, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, 0xfffffcf9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 58.839230698s ago: executing program 4 (id=2151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="0a0006005050"], 0x28}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000800) 58.399214679s ago: executing program 37 (id=2112): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x2, {0x92e, 0x6, 0x8, 0x8}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) init_module(&(0x7f0000000040)=ANY=[], 0x40, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 58.331888697s ago: executing program 7 (id=2153): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5d370987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b6c090890e0878f0e1ac6e7049b3b45959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07470936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1387abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf4ff0fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc2d880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b404749702202000e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe2905cc0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da4f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b26c020ff7f045fd58261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f3091239945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 58.231898131s ago: executing program 4 (id=2155): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 57.775560784s ago: executing program 7 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf04000000000000fcff1200000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a000600080211000001000014008100050001"], 0x50}}, 0x4000004) 57.480722383s ago: executing program 4 (id=2157): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x720, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x69, 0xfffffffe, 0x0, 0x4000000, 0xfffffffe}) 57.003911553s ago: executing program 7 (id=2159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0x2c, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0x4}]}]}, 0x4c}}, 0x0) 56.299416213s ago: executing program 7 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000007ac0)=""/4107, 0x100b) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x42, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x26, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) 47.989998156s ago: executing program 38 (id=2133): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_setup(0x202, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000e, 0x12, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000, 0x3], [0x0, 0xfffffffffffffffd, 0xe8a6, 0x3]}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f000024c000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/188) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x108) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) 45.094042337s ago: executing program 39 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sysinfo(0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 42.128575993s ago: executing program 40 (id=2157): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x720, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x69, 0xfffffffe, 0x0, 0x4000000, 0xfffffffe}) 40.984455323s ago: executing program 41 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000007ac0)=""/4107, 0x100b) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x42, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x26, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) 20.336760754s ago: executing program 8 (id=2183): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) 19.074372571s ago: executing program 8 (id=2184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}]}, 0x34}}, 0x0) 18.043004593s ago: executing program 8 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x800, 0x3, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x2) 17.710305443s ago: executing program 8 (id=2186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, r1, 0x101, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4080) 16.034031532s ago: executing program 8 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x64, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xfa}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xcd}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x61, 0x18, 0xae9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}]}]}, 0x64}}, 0x0) 15.409390773s ago: executing program 8 (id=2188): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 0s ago: executing program 42 (id=2188): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) kernel console output (not intermixed with test programs): state [ 1168.847162][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.854368][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.114381][ T3512] bridge_slave_1: left allmulticast mode [ 1169.120090][ T3512] bridge_slave_1: left promiscuous mode [ 1169.128761][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.175625][ T3512] bridge_slave_0: left allmulticast mode [ 1169.181335][ T3512] bridge_slave_0: left promiscuous mode [ 1169.232698][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1169.260529][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.270481][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1169.283240][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1169.321515][ T3512] bridge_slave_1: left allmulticast mode [ 1169.327577][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1169.341957][ T3512] bridge_slave_1: left promiscuous mode [ 1169.347882][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1169.362220][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.415826][ T3512] bridge_slave_0: left allmulticast mode [ 1169.421739][ T3512] bridge_slave_0: left promiscuous mode [ 1169.427995][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.968680][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1170.014087][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1170.051420][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.068921][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.088315][ T3512] bond0 (unregistering): Released all slaves [ 1170.142056][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1170.155272][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1170.168503][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1170.607392][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.620712][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.633806][ T3512] bond0 (unregistering): Released all slaves [ 1170.808515][T13585] lo speed is unknown, defaulting to 1000 [ 1171.003686][T13595] lo speed is unknown, defaulting to 1000 [ 1171.594962][ T5845] Bluetooth: hci3: command tx timeout [ 1171.653380][ T3512] hsr_slave_0: left promiscuous mode [ 1171.659705][ T3512] hsr_slave_1: left promiscuous mode [ 1171.666260][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.675612][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.703582][ T3512] hsr_slave_0: left promiscuous mode [ 1171.709943][ T3512] hsr_slave_1: left promiscuous mode [ 1171.716562][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.724261][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.733063][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.740761][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.939116][ T3512] veth1_macvtap: left promiscuous mode [ 1171.945503][ T3512] veth0_macvtap: left promiscuous mode [ 1171.951246][ T3512] veth1_vlan: left promiscuous mode [ 1171.957334][ T3512] veth0_vlan: left promiscuous mode [ 1172.244400][ T5845] Bluetooth: hci4: command tx timeout [ 1173.199016][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 1173.271207][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 1173.681604][ T5845] Bluetooth: hci3: command tx timeout [ 1174.331821][ T5845] Bluetooth: hci4: command tx timeout [ 1174.684227][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 1174.808403][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 1175.752274][ T5845] Bluetooth: hci3: command tx timeout [ 1176.362149][T13651] Invalid ELF header magic: != ELF [ 1176.412166][ T5845] Bluetooth: hci4: command tx timeout [ 1176.644228][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.945746][T13481] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1176.990128][T13315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.035270][T13481] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1177.058880][T13481] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1177.224550][T13481] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1177.611844][T13585] chnl_net:caif_netlink_parms(): no params data found [ 1177.862019][ T5845] Bluetooth: hci3: command tx timeout [ 1178.319943][T13595] chnl_net:caif_netlink_parms(): no params data found [ 1178.366159][T13481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.471156][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.479054][ T5845] Bluetooth: hci4: command tx timeout [ 1178.486629][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.493990][T13585] bridge_slave_0: entered allmulticast mode [ 1178.502488][T13585] bridge_slave_0: entered promiscuous mode [ 1178.582861][T13481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.629969][T13481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1178.660138][T13481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1178.687174][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.703326][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.710675][T13585] bridge_slave_1: entered allmulticast mode [ 1178.725729][T13585] bridge_slave_1: entered promiscuous mode [ 1178.784681][T13315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.986897][T13692] Invalid ELF header magic: != ELF [ 1179.439459][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.446627][ T6326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.461084][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.468290][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.556061][T13585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.697293][T13585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.079459][T13595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.089233][T13595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.097536][T13595] bridge_slave_0: entered allmulticast mode [ 1180.106079][T13595] bridge_slave_0: entered promiscuous mode [ 1181.029801][T13595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.054903][T13595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.075430][T13595] bridge_slave_1: entered allmulticast mode [ 1181.085839][T13595] bridge_slave_1: entered promiscuous mode [ 1181.130549][T13585] team0: Port device team_slave_0 added [ 1181.157400][T13585] team0: Port device team_slave_1 added [ 1181.319672][T13595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.398455][T13585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.411371][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.503052][T13585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.570977][T13595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.809947][T13585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.863686][T13727] Invalid ELF header magic: != ELF [ 1181.951699][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.986572][T13585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.294921][T13595] team0: Port device team_slave_0 added [ 1182.310302][T13595] team0: Port device team_slave_1 added [ 1182.427474][T13481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.558059][T13595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.580624][T13595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.614184][T13595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.681541][T13315] veth0_vlan: entered promiscuous mode [ 1182.693974][T13595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.701075][T13595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.763121][T13595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.950511][T13315] veth1_vlan: entered promiscuous mode [ 1183.012530][T13315] veth0_macvtap: entered promiscuous mode [ 1183.024450][T13315] veth1_macvtap: entered promiscuous mode [ 1183.045952][T13315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.078292][T13315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.099862][T13315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.108855][T13315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.124349][T13315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.137163][T13315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.215039][T13585] hsr_slave_0: entered promiscuous mode [ 1183.222535][T13585] hsr_slave_1: entered promiscuous mode [ 1183.230594][T13585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.274265][T13585] Cannot create hsr debugfs directory [ 1184.250440][T13595] hsr_slave_0: entered promiscuous mode [ 1184.258095][T13595] hsr_slave_1: entered promiscuous mode [ 1184.264977][T13595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1184.274082][T13595] Cannot create hsr debugfs directory [ 1185.923578][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.942640][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.000991][ T48] bridge_slave_1: left allmulticast mode [ 1186.010654][ T48] bridge_slave_1: left promiscuous mode [ 1186.017012][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.059868][ T48] bridge_slave_0: left allmulticast mode [ 1186.066899][ T48] bridge_slave_0: left promiscuous mode [ 1186.075306][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.578758][T13780] Invalid ELF header magic: != ELF [ 1187.457769][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.469892][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.480565][ T48] bond0 (unregistering): Released all slaves [ 1187.641295][ T48] hsr_slave_0: left promiscuous mode [ 1187.658384][ T48] hsr_slave_1: left promiscuous mode [ 1187.677914][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.707332][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.753763][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1188.834545][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1190.270023][T13481] veth0_vlan: entered promiscuous mode [ 1191.228655][T13481] veth1_vlan: entered promiscuous mode [ 1191.464520][T13481] veth0_macvtap: entered promiscuous mode [ 1191.518202][T13481] veth1_macvtap: entered promiscuous mode [ 1191.877544][T13481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.983308][T13481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.643750][T13835] Invalid ELF header magic: != ELF [ 1193.171636][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1193.186697][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1193.196899][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1193.209632][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1193.217489][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1193.363776][T13481] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.401922][T13481] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.410684][T13481] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.459791][T13481] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.511484][T13585] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1193.536367][T13585] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1193.797484][T13837] lo speed is unknown, defaulting to 1000 [ 1193.829146][T13585] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1193.902233][T13843] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1535'. [ 1194.283750][T13585] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1194.421397][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.724103][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.887792][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.040433][T13585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.065410][T13585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.126750][T13585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.140464][T13585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.182742][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.284153][ T5848] Bluetooth: hci1: command tx timeout [ 1195.484131][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.575245][T13859] ceph: No mds server is up or the cluster is laggy [ 1195.870893][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1195.882840][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.902535][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1195.948663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.955916][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.974330][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.981500][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.175198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.207072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.758296][T13837] chnl_net:caif_netlink_parms(): no params data found [ 1197.056518][T13886] block device autoloading is deprecated and will be removed. [ 1197.265767][T13890] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1545'. [ 1197.371994][ T5848] Bluetooth: hci1: command tx timeout [ 1199.323882][T13907] Invalid ELF header magic: != ELF [ 1199.432444][ T5848] Bluetooth: hci1: command tx timeout [ 1199.952976][ T48] bridge_slave_1: left allmulticast mode [ 1199.999543][ T48] bridge_slave_1: left promiscuous mode [ 1200.030111][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.159212][ T48] bridge_slave_0: left allmulticast mode [ 1200.172850][ T48] bridge_slave_0: left promiscuous mode [ 1200.187155][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.522040][ T5848] Bluetooth: hci1: command tx timeout [ 1202.301711][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.325381][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.344049][ T48] bond0 (unregistering): Released all slaves [ 1202.410992][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.418298][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.425699][T13837] bridge_slave_0: entered allmulticast mode [ 1202.434179][T13837] bridge_slave_0: entered promiscuous mode [ 1202.529380][T13944] Invalid ELF header magic: != ELF [ 1203.038220][T13585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.175365][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.220149][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.262791][T13837] bridge_slave_1: entered allmulticast mode [ 1203.300446][T13837] bridge_slave_1: entered promiscuous mode [ 1204.123833][T13956] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1556'. [ 1204.839109][T13595] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1206.425643][T13837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.492123][T13595] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1206.531465][T13595] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1206.725152][T13837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.052586][T13595] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1207.507028][T13837] team0: Port device team_slave_0 added [ 1207.874528][T14012] Invalid ELF header magic: != ELF [ 1208.172786][ T48] hsr_slave_0: left promiscuous mode [ 1208.195607][ T48] hsr_slave_1: left promiscuous mode [ 1208.217627][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.244046][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.335912][T14015] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1569'. [ 1208.451899][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.460455][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.556487][ T48] veth1_macvtap: left promiscuous mode [ 1208.568866][ T48] veth0_macvtap: left promiscuous mode [ 1209.315620][ T48] veth1_vlan: left promiscuous mode [ 1209.461021][ T48] veth0_vlan: left promiscuous mode [ 1209.952315][T14035] Invalid ELF header magic: != ELF [ 1210.949442][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1211.000690][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1211.563395][T13837] team0: Port device team_slave_1 added [ 1211.849519][T13595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.870594][T13595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.938995][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.946241][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.962904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.970094][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.014645][T13837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.021709][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.072618][T13837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.176365][T13837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.196414][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.254217][T13837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.578114][T13837] hsr_slave_0: entered promiscuous mode [ 1212.598499][T13837] hsr_slave_1: entered promiscuous mode [ 1212.638087][T13837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.665485][T13837] Cannot create hsr debugfs directory [ 1212.804603][T13585] veth0_vlan: entered promiscuous mode [ 1212.980634][T13595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1213.067324][T14080] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1213.553411][T14083] loop8: detected capacity change from 0 to 16 [ 1213.996856][T14083] erofs (device loop8): algorithm 1 isn't enabled on this kernel [ 1214.257703][T13585] veth1_vlan: entered promiscuous mode [ 1214.612172][T14089] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1581'. [ 1214.787204][T13585] veth0_macvtap: entered promiscuous mode [ 1214.828465][T13585] veth1_macvtap: entered promiscuous mode [ 1215.387086][T14100] Invalid ELF header magic: != ELF [ 1215.931314][T13585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.144874][T13585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.195898][T13585] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.242473][T13585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.251233][T13585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.313186][T13585] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.971149][T14139] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1592'. [ 1218.725259][T13595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.758604][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.804099][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.859297][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.870943][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.174635][T13837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1220.416992][T13837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1220.613230][T13837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1221.002166][T13837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1221.363868][T13595] veth0_vlan: entered promiscuous mode [ 1221.446132][T13595] veth1_vlan: entered promiscuous mode [ 1221.641653][T13595] veth0_macvtap: entered promiscuous mode [ 1221.676031][T13837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.699482][T13595] veth1_macvtap: entered promiscuous mode [ 1221.741656][T13837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.821526][T13595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.871656][T13595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.908246][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.915448][ T6427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.015833][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.023059][ T6427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.378218][T13595] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.483728][T13595] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.604086][T13595] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.715906][T13595] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.011685][T14173] loop8: detected capacity change from 0 to 32768 [ 1223.074052][T14173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1596 (14173) [ 1223.128371][T14202] loop7: detected capacity change from 0 to 256 [ 1223.276107][T14206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1223.859529][T14173] BTRFS info (device loop8 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1223.889974][T14173] BTRFS info (device loop8 state S): using crc32c (crc32c-x86_64) checksum algorithm [ 1223.979452][ T6038] BTRFS warning (device loop8 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 1224.021434][ T6038] BTRFS warning (device loop8 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 1224.066053][ T1155] BTRFS warning (device loop8 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 1224.095028][ T1155] BTRFS warning (device loop8 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored [ 1224.101263][T14202] FAT-fs (loop7): Directory bread(block 64) failed [ 1224.174786][T14173] BTRFS error (device loop8 state S): logical 6881280 len 1638400 found bg but no related chunk [ 1224.194994][T14202] FAT-fs (loop7): Directory bread(block 65) failed [ 1224.209254][T14202] FAT-fs (loop7): Directory bread(block 66) failed [ 1224.225027][T14202] FAT-fs (loop7): Directory bread(block 67) failed [ 1224.242000][T14202] FAT-fs (loop7): Directory bread(block 68) failed [ 1224.255553][T14202] FAT-fs (loop7): Directory bread(block 69) failed [ 1224.270173][T14202] FAT-fs (loop7): Directory bread(block 70) failed [ 1224.283387][T14202] FAT-fs (loop7): Directory bread(block 71) failed [ 1224.290211][T14202] FAT-fs (loop7): Directory bread(block 72) failed [ 1224.302575][T14202] FAT-fs (loop7): Directory bread(block 73) failed [ 1224.359237][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.404205][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.446612][T14173] BTRFS error (device loop8 state S): open_ctree failed: -4 [ 1224.610847][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.641950][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.663972][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.319059][T14277] loop9: detected capacity change from 0 to 256 [ 1227.338052][T14277] exfat: Deprecated parameter 'namecase' [ 1227.399617][T14277] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1227.800032][T14238] loop7: detected capacity change from 0 to 32768 [ 1228.110940][T14295] vlan0: entered promiscuous mode [ 1228.376338][T14297] loop9: detected capacity change from 0 to 4096 [ 1228.455335][T13837] veth0_vlan: entered promiscuous mode [ 1228.565572][T13837] veth1_vlan: entered promiscuous mode [ 1228.630064][T14307] netlink: 'syz.4.1623': attribute type 3 has an invalid length. [ 1228.944824][T13837] veth0_macvtap: entered promiscuous mode [ 1229.119310][T14314] ceph: No mds server is up or the cluster is laggy [ 1229.183151][T13912] libceph: connect (1)[c::]:6789 error -101 [ 1229.567927][T13912] libceph: mon0 (1)[c::]:6789 connect error [ 1229.589532][T13837] veth1_macvtap: entered promiscuous mode [ 1229.985981][T14324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1626'. [ 1230.062233][T13837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.126456][T13837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.200820][T13837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.263758][T13837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.291931][T13837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.342352][T13837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.458847][T14336] loop9: detected capacity change from 0 to 16 [ 1230.512518][T14336] erofs (device loop9): mounted with root inode @ nid 36. [ 1230.595325][T14336] erofs (device loop9): readahead error at folio 0 @ nid 89 [ 1230.750452][T14340] loop7: detected capacity change from 0 to 16 [ 1230.798173][T14340] erofs (device loop7): algorithm 1 isn't enabled on this kernel [ 1232.030603][T14336] erofs (device loop9): readahead error at folio 8 @ nid 89 [ 1232.097466][T14336] erofs (device loop9): readahead error at folio 4 @ nid 89 [ 1232.122069][T14336] erofs (device loop9): read error -117 @ 0 of nid 89 [ 1232.129081][ T30] audit: type=1800 audit(1748879285.874:321): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1632" name="file3" dev="loop9" ino=89 res=0 errno=0 [ 1232.537664][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.557287][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.503869][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.597139][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.877087][T14367] loop7: detected capacity change from 0 to 4096 [ 1234.112809][T14373] netlink: 11 bytes leftover after parsing attributes in process `syz.9.1636'. [ 1237.100031][T14406] ceph: No mds server is up or the cluster is laggy [ 1237.111437][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1237.543751][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1238.101151][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.687557][T14454] fuse: Bad value for 'fd' [ 1243.519344][T14495] delete_channel: no stack [ 1243.524158][T14495] delete_channel: no stack [ 1246.078691][T14528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1246.120430][T14528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1246.137038][T14528] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1246.147756][T14528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1246.157836][T14528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1247.249566][T14521] lo speed is unknown, defaulting to 1000 [ 1247.250553][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 1247.825946][T14553] Invalid ELF header magic: != ELF [ 1248.232328][T14528] Bluetooth: hci6: command tx timeout [ 1249.688756][T14521] chnl_net:caif_netlink_parms(): no params data found [ 1249.744300][T14573] netlink: 'syz.9.1687': attribute type 15 has an invalid length. [ 1250.312563][T14528] Bluetooth: hci6: command tx timeout [ 1250.499339][T14572] loop6: detected capacity change from 0 to 4096 [ 1252.392001][T14528] Bluetooth: hci6: command tx timeout [ 1253.694082][T14591] loop7: detected capacity change from 0 to 32768 [ 1254.249004][T14593] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1254.465012][T14591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1692 (14591) [ 1254.474917][T14528] Bluetooth: hci6: command tx timeout [ 1254.566665][T14591] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1254.580611][T14591] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 1254.593004][T14591] BTRFS info (device loop7): using free-space-tree [ 1254.742292][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.770012][T14521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.822924][T14521] bridge_slave_0: entered allmulticast mode [ 1254.862001][T14521] bridge_slave_0: entered promiscuous mode [ 1254.972906][T14521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.980847][T14521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.031158][T14521] bridge_slave_1: entered allmulticast mode [ 1255.044127][T14521] bridge_slave_1: entered promiscuous mode [ 1255.429706][T14630] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1697'. [ 1255.649239][T14627] loop6: detected capacity change from 0 to 256 [ 1256.137885][T14627] FAT-fs (loop6): Directory bread(block 64) failed [ 1256.415756][T14627] FAT-fs (loop6): Directory bread(block 65) failed [ 1256.443175][T14650] loop8: detected capacity change from 0 to 256 [ 1257.119466][T14627] FAT-fs (loop6): Directory bread(block 66) failed [ 1257.290836][T14627] FAT-fs (loop6): Directory bread(block 67) failed [ 1257.299605][T14627] FAT-fs (loop6): Directory bread(block 68) failed [ 1257.306485][T14627] FAT-fs (loop6): Directory bread(block 69) failed [ 1257.313168][T14627] FAT-fs (loop6): Directory bread(block 70) failed [ 1257.319806][T14627] FAT-fs (loop6): Directory bread(block 71) failed [ 1257.326523][T14627] FAT-fs (loop6): Directory bread(block 72) failed [ 1257.352567][T14627] FAT-fs (loop6): Directory bread(block 73) failed [ 1257.504310][T14650] FAT-fs (loop8): Directory bread(block 64) failed [ 1257.519156][T14650] FAT-fs (loop8): Directory bread(block 65) failed [ 1257.546871][T14650] FAT-fs (loop8): Directory bread(block 66) failed [ 1257.567223][T14650] FAT-fs (loop8): Directory bread(block 67) failed [ 1257.585516][T14650] FAT-fs (loop8): Directory bread(block 68) failed [ 1257.616521][T14650] FAT-fs (loop8): Directory bread(block 69) failed [ 1258.181071][T14650] FAT-fs (loop8): Directory bread(block 70) failed [ 1258.277663][T14650] FAT-fs (loop8): Directory bread(block 71) failed [ 1258.289288][T14650] FAT-fs (loop8): Directory bread(block 72) failed [ 1258.304910][T14650] FAT-fs (loop8): Directory bread(block 73) failed [ 1258.370302][T14521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.566148][T14521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.242791][T14521] team0: Port device team_slave_0 added [ 1260.264872][T14521] team0: Port device team_slave_1 added [ 1260.524685][T14684] loop6: detected capacity change from 0 to 128 [ 1262.164408][T14521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.171410][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.321943][T14521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.357038][T14521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.379802][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.464584][T14521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.486104][T14705] loop6: detected capacity change from 0 to 2048 [ 1262.537966][T14705] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1262.711978][T13585] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1263.406228][T14723] loop6: detected capacity change from 0 to 2048 [ 1263.854827][T14521] hsr_slave_0: entered promiscuous mode [ 1263.870066][T14725] loop8: detected capacity change from 0 to 512 [ 1263.943327][T14521] hsr_slave_1: entered promiscuous mode [ 1263.954053][T14725] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1263.997042][T14521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1264.011971][T14725] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1264.036224][T14521] Cannot create hsr debugfs directory [ 1264.284355][T14725] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1264.382247][T14725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1264.436901][T14725] System zones: 0-2, 18-18, 34-35 [ 1264.494945][T14725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.511071][T14733] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1265.110712][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.605826][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1734'. [ 1265.715140][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1734'. [ 1266.320067][T14742] loop9: detected capacity change from 0 to 32768 [ 1266.385296][T14742] ERROR: (device loop9): dbAlloc: the hint is outside the map [ 1266.385296][T14742] [ 1266.388143][T14760] ptrace attach of "./syz-executor exec"[14761] was attempted by "./syz-executor exec"[14760] [ 1266.597741][T14764] loop8: detected capacity change from 0 to 4096 [ 1266.655523][T14764] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1266.672749][ T1155] read_mapping_page failed! [ 1266.688529][ T1155] ERROR: (device loop9): txCommit: [ 1266.688529][ T1155] [ 1266.701152][T14768] loop7: detected capacity change from 0 to 512 [ 1266.721908][ T1155] jfs_write_inode: jfs_commit_inode failed! [ 1266.768215][T14768] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.1740: inode #15: comm syz.7.1740: iget: illegal inode # [ 1266.806258][T14764] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1266.836047][T13898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.849450][T14768] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1740: couldn't read orphan inode 15 (err -117) [ 1266.903907][T14768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.080987][T13585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.276689][T13898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.631035][T14785] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1744'. [ 1268.807028][T13898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.844736][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1750'. [ 1268.864966][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1749'. [ 1269.387418][T13898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.491446][T14803] ipvlan2: entered promiscuous mode [ 1269.500566][T14803] ipvlan2: entered allmulticast mode [ 1269.516967][T14803] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1270.596975][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1756'. [ 1270.944584][ T30] audit: type=1400 audit(1748879324.614:322): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14808 comm="syz.7.1756" [ 1273.003866][T14843] loop7: detected capacity change from 0 to 16 [ 1273.285649][T14843] erofs (device loop7): algorithm 1 isn't enabled on this kernel [ 1274.417573][T14857] loop7: detected capacity change from 0 to 256 [ 1274.435092][T14857] exfat: Bad value for 'gid' [ 1274.439781][T14857] exfat: Bad value for 'gid' [ 1275.573207][T14868] Invalid ELF header magic: != ELF [ 1276.289318][T13898] bridge_slave_1: left allmulticast mode [ 1276.322608][T13898] bridge_slave_1: left promiscuous mode [ 1276.328417][T13898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.407954][T13898] bridge_slave_0: left allmulticast mode [ 1276.471637][T13898] bridge_slave_0: left promiscuous mode [ 1276.572201][T13912] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1276.617408][T13898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.892137][T13912] usb 10-1: Using ep0 maxpacket: 32 [ 1277.100727][T13912] usb 10-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1277.202015][T13912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.210159][T13912] usb 10-1: Product: syz [ 1277.234143][T13912] usb 10-1: Manufacturer: syz [ 1277.238888][T13912] usb 10-1: SerialNumber: syz [ 1277.255876][T13912] usb 10-1: config 0 descriptor?? [ 1277.275845][T13912] cypress_m8 10-1:0.0: HID->COM RS232 Adapter converter detected [ 1277.296034][T13912] cyphidcom ttyUSB0: required endpoint is missing [ 1277.480072][ T5894] usb 10-1: USB disconnect, device number 2 [ 1277.516497][ T5894] cypress_m8 10-1:0.0: device disconnected [ 1277.640318][T14898] loop6: detected capacity change from 0 to 4096 [ 1277.751732][T14910] ucma_write: process 170 (syz.8.1792) changed security contexts after opening file descriptor, this is not allowed. [ 1277.794534][T14898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.881351][T14898] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 1277.920760][T14898] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1277.936564][T14898] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1788: Failed to acquire dquot type 1 [ 1278.072312][ T5899] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1278.144824][T13837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.231530][T14915] usb usb8: usbfs: process 14915 (syz.9.1795) did not claim interface 0 before use [ 1278.288374][ T5899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.383588][ T5899] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1278.416434][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.449151][ T5899] usb 9-1: config 0 descriptor?? [ 1279.418272][ T5899] logitech 0003:046D:C50C.0001: unbalanced collection at end of report description [ 1279.454460][ T5899] logitech 0003:046D:C50C.0001: parse failed [ 1279.460604][ T5899] logitech 0003:046D:C50C.0001: probe with driver logitech failed with error -22 [ 1279.619747][T13912] usb 9-1: USB disconnect, device number 2 [ 1279.647969][ T5894] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1279.749812][T13898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.781462][T13898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.806608][T13898] bond0 (unregistering): Released all slaves [ 1279.813203][ T5829] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1279.832131][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 1279.847075][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.874351][ T5894] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1279.896902][ T5894] usb 7-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 1279.968823][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.013855][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1280.053158][ T5894] usb 7-1: config 0 descriptor?? [ 1280.084131][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.165390][ T5829] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1280.178401][T14934] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1802'. [ 1280.212492][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.258120][ T5829] usb 10-1: config 0 descriptor?? [ 1280.431049][T13898] tipc: Disabling bearer [ 1280.450544][T13898] tipc: Left network mode [ 1280.771654][ T5894] usb 7-1: USB disconnect, device number 2 [ 1280.795372][ T5829] zydacron 0003:13EC:0006.0003: item fetching failed at offset 5/7 [ 1280.841369][ T5829] zydacron 0003:13EC:0006.0003: parse failed [ 1280.861086][ T5829] zydacron 0003:13EC:0006.0003: probe with driver zydacron failed with error -22 [ 1281.006890][ T49] usb 10-1: USB disconnect, device number 3 [ 1281.192010][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 1282.173783][T14961] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1812'. [ 1282.878106][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1814'. [ 1283.493775][T13898] hsr_slave_0: left promiscuous mode [ 1283.515922][T13898] hsr_slave_1: left promiscuous mode [ 1283.537451][T13898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.563387][T13898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.593242][T13898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.600713][T13898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.617986][ T5829] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1283.657103][T14975] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1815'. [ 1283.785714][T13898] veth1_macvtap: left promiscuous mode [ 1283.792199][ T5829] usb 9-1: Using ep0 maxpacket: 8 [ 1283.834916][T13898] veth0_macvtap: left promiscuous mode [ 1283.851426][ T5829] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1283.892381][T13898] veth1_vlan: left promiscuous mode [ 1283.919268][T13898] veth0_vlan: left promiscuous mode [ 1283.926760][ T5829] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1283.977175][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.026067][ T5829] usb 9-1: config 0 descriptor?? [ 1284.036342][T14991] loop9: detected capacity change from 0 to 512 [ 1284.076896][T14991] EXT4-fs: Ignoring removed orlov option [ 1284.229360][T14991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.231997][T15002] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1822'. [ 1284.329918][T14991] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.397663][T14991] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.757036][ T5829] corsair 0003:1B1C:1B09.0004: unbalanced delimiter at end of report description [ 1284.804691][ T5829] corsair 0003:1B1C:1B09.0004: parse failed [ 1284.810744][ T5829] corsair 0003:1B1C:1B09.0004: probe with driver corsair failed with error -22 [ 1285.037797][T15008] loop9: detected capacity change from 0 to 2048 [ 1285.473909][ T5829] usb 9-1: USB disconnect, device number 3 [ 1286.062565][T15018] loop9: detected capacity change from 0 to 64 [ 1286.682652][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1287.366107][ T10] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1287.382600][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.396326][ T10] usb 10-1: config 0 descriptor?? [ 1287.839779][ T10] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x1 [ 1287.862092][ T10] creative-sb0540 0003:041E:3100.0005: item fetching failed at offset 2/5 [ 1287.876483][ T10] creative-sb0540 0003:041E:3100.0005: parse failed [ 1287.884147][ T10] creative-sb0540 0003:041E:3100.0005: probe with driver creative-sb0540 failed with error -22 [ 1287.948361][T13898] team0 (unregistering): Port device team_slave_1 removed [ 1288.079917][ T10] usb 10-1: USB disconnect, device number 4 [ 1288.098959][T13898] team0 (unregistering): Port device team_slave_0 removed [ 1288.852400][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1834'. [ 1288.871712][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 1288.969911][T14521] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1288.992079][ T49] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1289.103120][T14521] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1289.244090][T14521] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1289.257197][ T49] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1289.271932][ T49] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1289.313486][ T49] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.413921][ T49] usb 10-1: config 220 has no interface number 2 [ 1289.430619][ T49] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1289.481351][ T49] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1289.498813][T14521] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1289.541871][ T49] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1289.616816][ T49] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1289.670124][ T49] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1289.720755][ T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.747213][ T49] usb 10-1: Product: syz [ 1289.787320][ T49] usb 10-1: Manufacturer: syz [ 1289.807612][ T49] usb 10-1: SerialNumber: syz [ 1289.879711][T13898] IPVS: stop unused estimator thread 0... [ 1290.082966][T14521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.166320][ T5829] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1290.261200][T15053] Invalid ELF header magic: != ELF [ 1290.524816][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 1290.564207][T14521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.576579][ T5829] usb 9-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1290.660863][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.703059][T14521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1290.715520][ T5829] usb 9-1: config 0 descriptor?? [ 1290.724557][T14521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1290.826937][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.834145][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.884081][ T49] usb 10-1: selecting invalid altsetting 0 [ 1290.903849][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.910999][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.918713][ T49] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 1290.947584][ T49] usb 10-1: No valid video chain found. [ 1291.047946][T15038] loop7: detected capacity change from 0 to 32768 [ 1291.103387][T15038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1837 (15038) [ 1291.243792][ T49] usb 10-1: selecting invalid altsetting 0 [ 1291.249697][ T49] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1291.888483][ T49] usb 10-1: USB disconnect, device number 5 [ 1292.063056][ T5829] stadia 0003:18D1:9400.0006: hidraw0: USB HID v0.04 Device [HID 18d1:9400] on usb-dummy_hcd.8-1/input0 [ 1292.115385][T15038] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1292.125812][ T5829] stadia 0003:18D1:9400.0006: no inputs found [ 1292.181377][ T5829] stadia 0003:18D1:9400.0006: force feedback init failed [ 1292.190142][T15038] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 1292.284133][T15038] BTRFS info (device loop7): using free-space-tree [ 1292.344832][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1292.345401][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1292.359390][ T5829] usb 9-1: USB disconnect, device number 4 [ 1292.413294][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1292.413850][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1292.507309][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1292.538925][T15079] loop8: detected capacity change from 0 to 128 [ 1292.568224][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1292.568595][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1292.602623][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1292.623334][T15067] fido_id[15067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1292.690768][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1292.691170][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1292.728136][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1292.769993][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1292.863000][T14521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.863931][T15079] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1292.904149][T15038] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1292.909892][T15079] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.935286][T15038] BTRFS error (device loop7): open_ctree failed: -12 [ 1293.204815][T14521] veth0_vlan: entered promiscuous mode [ 1293.270503][T14521] veth1_vlan: entered promiscuous mode [ 1293.308619][T13481] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1295.192255][T14521] veth0_macvtap: entered promiscuous mode [ 1295.223704][T15121] loop6: detected capacity change from 0 to 256 [ 1295.258630][T15121] exfat: Deprecated parameter 'namecase' [ 1295.286797][T14521] veth1_macvtap: entered promiscuous mode [ 1295.307086][T15121] exfat: Deprecated parameter 'utf8' [ 1295.321682][T15124] loop7: detected capacity change from 0 to 128 [ 1295.387667][T14521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.417667][T15121] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1295.457151][T14521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.493638][T15127] loop8: detected capacity change from 0 to 8 [ 1295.551620][T15129] loop9: detected capacity change from 0 to 256 [ 1295.572770][T15127] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 1295.585366][T14521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.616476][T14521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.668676][T15129] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1295.711942][T14521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.745251][T14521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.086858][T15138] loop6: detected capacity change from 0 to 1024 [ 1296.188429][T15138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.218095][T13912] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1296.251383][T15138] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.260450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.329426][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.457970][T13912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1296.477183][T13912] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1296.520753][T13912] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1296.540394][T13912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.564723][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 1296.571438][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1296.609189][T13837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.632230][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 1296.853568][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 1297.214663][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.260583][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.318494][ T5834] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1297.335678][T13912] usb 9-1: config 0 descriptor?? [ 1297.393411][ T5834] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1297.413457][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.563881][T15162] loop9: detected capacity change from 0 to 164 [ 1297.590874][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1870'. [ 1297.667861][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.681917][T15162] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1297.687460][ T5834] usb 8-1: config 0 descriptor?? [ 1297.696039][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.405253][T15162] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1298.473927][T13912] konepure 0003:1E7D:2DB4.0007: unbalanced collection at end of report description [ 1298.507446][T13912] konepure 0003:1E7D:2DB4.0007: parse failed [ 1298.550787][T13912] konepure 0003:1E7D:2DB4.0007: probe with driver konepure failed with error -22 [ 1298.575416][ T5834] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 1298.636519][ T5834] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1298.642573][T13912] usb 9-1: USB disconnect, device number 5 [ 1298.669382][ T5834] microsoft 0003:045E:07DA.0008: no inputs found [ 1298.730287][ T5834] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 1298.830828][ T5834] usb 8-1: USB disconnect, device number 2 [ 1299.095578][T15174] fido_id[15174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1299.147499][T15180] loop6: detected capacity change from 0 to 1024 [ 1299.190829][T15180] EXT4-fs: Ignoring removed bh option [ 1299.232403][T15180] EXT4-fs: inline encryption not supported [ 1299.358098][T15180] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1299.460083][T15180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 1299.518634][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.657745][T15180] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.1877: lblock 2 mapped to illegal pblock 2 (length 1) [ 1299.800643][T15180] EXT4-fs (loop6): Remounting filesystem read-only [ 1299.837400][T15180] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1299.867909][T15180] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1300.682687][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1300.742435][T15180] EXT4-fs (loop6): 1 orphan inode deleted [ 1300.749729][T15180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1300.793479][T15214] netlink: 11 bytes leftover after parsing attributes in process `syz.7.1886'. [ 1300.916542][T13837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.923871][ T5834] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.953947][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1300.971544][ T5834] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1301.042386][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.079632][ T5834] usb 2-1: config 0 descriptor?? [ 1301.578315][ T5834] kye 0003:0458:5013.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1301.842161][ T5829] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1302.412939][ T5834] kye 0003:0458:5013.0009: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 1302.479290][ T5834] kye 0003:0458:5013.0009: tablet-enabling feature report not found [ 1302.539358][ T5834] kye 0003:0458:5013.0009: tablet enabling failed [ 1302.562087][ T5829] usb 10-1: Using ep0 maxpacket: 32 [ 1302.584393][ T5829] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1302.614420][ T5834] usb 2-1: USB disconnect, device number 2 [ 1302.620795][ T5829] usb 10-1: config 0 has no interface number 0 [ 1302.665814][ T5829] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1303.396938][ T5829] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1303.462566][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.470714][ T5829] usb 10-1: Product: syz [ 1303.484046][T15242] fido_id[15242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1303.498714][ T5829] usb 10-1: Manufacturer: syz [ 1303.503761][ T5829] usb 10-1: SerialNumber: syz [ 1303.560638][ T5829] usb 10-1: config 0 descriptor?? [ 1303.640748][ T5829] f81534 10-1:0.12: required endpoints missing [ 1304.100697][ T5829] usb 10-1: USB disconnect, device number 6 [ 1305.182593][T15270] 9pnet_fd: Insufficient options for proto=fd [ 1306.626645][T15284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1908'. [ 1306.637083][T15276] loop8: detected capacity change from 0 to 256 [ 1308.064421][T15309] Invalid ELF header magic: != ELF [ 1308.639229][ T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1308.647460][ T5899] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1309.022164][ T5899] usb 8-1: Using ep0 maxpacket: 16 [ 1309.029455][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.052053][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.067093][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.178766][ T5899] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1309.192981][ T49] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1309.493425][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.537499][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.703853][ T49] usb 2-1: config 0 descriptor?? [ 1309.710917][ T5899] usb 8-1: config 0 descriptor?? [ 1310.182074][ T5834] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1310.207828][ T49] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 1310.229569][ T5899] cypress 0003:04B4:0001.000B: item fetching failed at offset 2/69 [ 1310.283756][ T5899] cypress 0003:04B4:0001.000B: parse failed [ 1310.312305][ T49] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input11 [ 1310.324658][ T5899] cypress 0003:04B4:0001.000B: probe with driver cypress failed with error -22 [ 1310.374074][ T5834] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1310.409609][ T5834] usb 9-1: config 0 has no interface number 0 [ 1310.432534][ T914] usb 8-1: USB disconnect, device number 3 [ 1310.440309][ T5834] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.472466][T10975] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1310.504338][ T5834] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.524918][ T5834] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1310.553774][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.604720][ T5834] usb 9-1: config 0 descriptor?? [ 1310.671431][T10975] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.692691][ T49] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1310.712024][T10975] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.759196][ T49] usb 2-1: USB disconnect, device number 3 [ 1310.765279][T10975] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1310.813942][T10975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.875269][T10975] usb 10-1: config 0 descriptor?? [ 1310.998827][T15346] fido_id[15346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1311.028910][T15350] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1311.136058][ T5834] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.8-1/input1 [ 1311.198034][ T5834] hid_prodikeys: hid-prodikeys: failed to find output report [ 1311.198034][ T5834] [ 1311.313761][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1926'. [ 1311.329137][ T5834] usb 9-1: USB disconnect, device number 6 [ 1311.352109][T15357] sg_write: data in/out 33856/14 bytes for SCSI command 0x0-- guessing data in; [ 1311.352109][T15357] program syz.1.1927 not setting count and/or reply_len properly [ 1311.357915][T10975] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1311.468682][T10975] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1311.539218][T10975] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 1311.592532][T10975] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 1311.600015][T10975] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 1311.652703][T15356] fido_id[15356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1311.683579][T10975] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -71 [ 1311.742442][T10975] usb 10-1: USB disconnect, device number 7 [ 1314.115051][T15372] fido_id[15372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1314.223180][ T8422] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1314.245574][T15387] loop7: detected capacity change from 0 to 4096 [ 1314.362861][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1939'. [ 1314.366300][T15395] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1314.408701][ T30] audit: type=1800 audit(1748879368.154:323): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1936" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1314.422310][ T8422] usb 10-1: Using ep0 maxpacket: 16 [ 1314.444760][T15387] syz.7.1936: attempt to access beyond end of device [ 1314.444760][T15387] loop7: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 1314.497423][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1940'. [ 1314.512227][T15387] syz.7.1936: attempt to access beyond end of device [ 1314.512227][T15387] loop7: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 1314.520097][ T8422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.639275][ T8422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.692010][ T8422] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1314.701196][ T8422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.767087][ T8422] usb 10-1: config 0 descriptor?? [ 1314.772977][T15404] loop1: detected capacity change from 0 to 1024 [ 1314.923408][T15402] hfsplus: invalid extended attribute record [ 1315.185760][T13898] hfsplus: b-tree write err: -5, ino 4 [ 1315.222040][T13912] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1315.259759][ T8422] saitek 0003:06A3:0CCB.000E: hidraw0: USB HID v0.00 Device [HID 06a3:0ccb] on usb-dummy_hcd.9-1/input0 [ 1315.417095][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1315.459333][T13912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.517547][T13912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.559577][ T8422] usb 10-1: USB disconnect, device number 8 [ 1315.592082][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1315.612209][T13912] usb 9-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1315.652528][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1315.684369][T13912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.711959][ T10] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1315.750353][T13912] usb 9-1: config 0 descriptor?? [ 1315.760777][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.832025][ T10] usb 8-1: Product: syz [ 1315.858490][ T10] usb 8-1: Manufacturer: syz [ 1316.242004][ T10] usb 8-1: SerialNumber: syz [ 1316.259720][ T10] usb 8-1: config 0 descriptor?? [ 1316.305976][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1316.334830][T13912] hid-generic 0003:05AC:4262.000F: unbalanced delimiter at end of report description [ 1316.368172][ T10] usb 8-1: setting power ON [ 1316.392682][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1316.408304][T13912] hid-generic 0003:05AC:4262.000F: probe with driver hid-generic failed with error -22 [ 1316.467394][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1316.536661][T13912] usb 9-1: USB disconnect, device number 7 [ 1316.543374][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1316.565089][T15416] dvb-usb: bulk message failed: -22 (3/0) [ 1316.571382][T15416] cxusb: i2c rd: len=99 is too big! [ 1316.571382][T15416] [ 1316.631485][ T10] usb 8-1: media controller created [ 1316.752042][ T5894] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1316.777571][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.851644][T15447] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1953'. [ 1316.916162][ T10] usb 8-1: selecting invalid altsetting 6 [ 1316.931380][ T10] usb 8-1: digital interface selection failed (-22) [ 1316.949621][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1316.963292][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 1316.971101][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1316.997576][ T5894] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1317.022284][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1317.034260][ T10] usb 8-1: setting power OFF [ 1317.041188][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1317.048623][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1317.064753][ T5894] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1317.074241][ T10] (NULL device *): no alternate interface [ 1317.081868][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.107561][ T5894] usb 10-1: Product: syz [ 1317.120957][ T5894] usb 10-1: Manufacturer: syz [ 1317.127229][ T5894] usb 10-1: SerialNumber: syz [ 1317.158649][ T5894] usb 10-1: config 0 descriptor?? [ 1317.173059][T15442] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1317.188306][T15442] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1317.222705][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1317.255806][ T5894] usb 10-1: ucan: probing device on interface #0 [ 1317.312138][ T10] usb 8-1: USB disconnect, device number 4 [ 1317.496215][ T5894] usb 10-1: ucan: device protocol version 12263512 is not supported [ 1317.528881][ T5894] usb 10-1: ucan: probe failed; try to update the device firmware [ 1317.755372][ T914] usb 10-1: USB disconnect, device number 9 [ 1317.812107][T10975] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1317.874528][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1318.054478][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1318.086292][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1318.126527][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.167683][ T10] usb 8-1: config 0 descriptor?? [ 1318.192713][T10975] usb 9-1: Using ep0 maxpacket: 16 [ 1318.225492][T10975] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.256278][T15465] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1958'. [ 1318.273866][T10975] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1318.280520][T10975] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1318.356432][T10975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.439013][T10975] usb 9-1: config 0 descriptor?? [ 1318.576813][T15472] loop9: detected capacity change from 0 to 256 [ 1318.752274][ T10] hid-picolcd 0003:04D8:C002.0010: No report with id 0x11 found [ 1318.809785][ T30] audit: type=1326 audit(1748879372.554:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.6.1961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22bb8e969 code=0x0 [ 1318.859511][T15472] FAT-fs (loop9): Directory bread(block 64) failed [ 1318.878643][T15472] FAT-fs (loop9): Directory bread(block 65) failed [ 1318.895146][ T10] usb 8-1: USB disconnect, device number 5 [ 1318.913439][T15472] FAT-fs (loop9): Directory bread(block 66) failed [ 1318.920094][T15472] FAT-fs (loop9): Directory bread(block 67) failed [ 1318.959008][T15472] FAT-fs (loop9): Directory bread(block 68) failed [ 1318.973723][T15472] FAT-fs (loop9): Directory bread(block 69) failed [ 1318.986627][T10975] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 1319.011996][T15472] FAT-fs (loop9): Directory bread(block 70) failed [ 1319.018757][T15472] FAT-fs (loop9): Directory bread(block 71) failed [ 1319.043192][T15472] FAT-fs (loop9): Directory bread(block 72) failed [ 1319.064443][T15472] FAT-fs (loop9): Directory bread(block 73) failed [ 1319.147436][T10975] usb 9-1: USB disconnect, device number 8 [ 1319.291431][T15478] fido_id[15478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1320.442015][T13912] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1321.250917][T13912] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1321.286504][T13912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.383713][T13912] usb 8-1: config 0 descriptor?? [ 1321.595897][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1968'. [ 1321.654078][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1968'. [ 1321.713314][T15506] netlink: 'syz.6.1968': attribute type 14 has an invalid length. [ 1321.751940][T15506] netlink: 'syz.6.1968': attribute type 11 has an invalid length. [ 1322.033181][T13912] usb 8-1: Cannot set autoneg [ 1322.038679][T13912] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1322.119266][T13912] usb 8-1: USB disconnect, device number 6 [ 1322.248470][T15517] loop6: detected capacity change from 0 to 512 [ 1322.255948][T15517] EXT4-fs: Ignoring removed i_version option [ 1322.262084][T15517] EXT4-fs: Ignoring removed mblk_io_submit option [ 1322.273738][T15517] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1323.085886][T15517] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.1972: inode #13: comm syz.6.1972: iget: illegal inode # [ 1323.198744][T15525] vlan3: entered allmulticast mode [ 1323.217492][T15517] EXT4-fs (loop6): Remounting filesystem read-only [ 1323.251011][T15517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.967322][T15540] loop7: detected capacity change from 0 to 64 [ 1324.014438][T13837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.131948][T15542] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1975'. [ 1324.244113][T15546] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1979'. [ 1324.444518][T14528] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1325.002492][T15566] Invalid ELF header magic: != ELF [ 1325.667947][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1325.872107][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 1325.913456][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1325.975171][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1326.064144][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1326.120286][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.186245][ T5894] usb 2-1: config 0 descriptor?? [ 1327.037316][ T5894] kovaplus 0003:1E7D:2D50.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1327.393783][ T5894] kovaplus 0003:1E7D:2D50.0012: couldn't init struct kovaplus_device [ 1327.431316][ T5894] kovaplus 0003:1E7D:2D50.0012: couldn't install mouse [ 1327.472104][ T5894] kovaplus 0003:1E7D:2D50.0012: probe with driver kovaplus failed with error -71 [ 1327.574725][ T5894] usb 2-1: USB disconnect, device number 4 [ 1327.920620][T15602] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1993'. [ 1328.073796][T15604] netlink: 11 bytes leftover after parsing attributes in process `syz.9.1989'. [ 1328.083142][ T5834] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1328.258795][T15608] loop7: detected capacity change from 0 to 64 [ 1328.283533][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.342717][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.395390][ T5834] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1328.425878][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.472044][T14528] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1328.483202][T14528] Bluetooth: hci1: Injecting HCI hardware error event [ 1328.492372][T14528] Bluetooth: hci1: hardware error 0x00 [ 1328.514186][ T5834] usb 9-1: config 0 descriptor?? [ 1328.602865][T13585] hfs: node 4:3 still has 2 user(s)! [ 1328.629193][T15613] loop6: detected capacity change from 0 to 512 [ 1328.680148][T15613] EXT4-fs: Ignoring removed orlov option [ 1328.826254][T15613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.961675][T15613] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.016224][T15613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.210954][ T5834] isku 0003:1E7D:3264.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.8-1/input0 [ 1329.263657][ T5834] usb 9-1: USB disconnect, device number 9 [ 1330.246308][T15631] loop6: detected capacity change from 0 to 2048 [ 1331.061850][T14528] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1331.189487][T13912] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1331.248013][T15627] fido_id[15627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1331.350550][T13912] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1331.433537][T13912] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1331.471877][T13912] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1331.505836][T13912] usb 8-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1331.553362][T13912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.619862][T13912] usb 8-1: config 0 descriptor?? [ 1331.646207][T15633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1331.771864][ T5894] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1331.966461][ T5894] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1331.999645][ T5894] usb 9-1: config 0 has no interface number 0 [ 1332.025771][ T5894] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1332.049763][ T5894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.111053][ T5894] usb 9-1: config 0 descriptor?? [ 1332.159835][T13912] holtek_mouse 0003:04D9:A067.0014: unknown main item tag 0x3 [ 1332.170746][ T5894] usb 9-1: selecting invalid altsetting 1 [ 1332.191028][ T5894] dvb_ttusb_budget: ttusb_init_controller: error [ 1332.209263][ T5894] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1332.220507][T13912] holtek_mouse 0003:04D9:A067.0014: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.7-1/input0 [ 1332.251265][T15668] loop6: detected capacity change from 0 to 512 [ 1332.272986][T15668] EXT4-fs: Ignoring removed orlov option [ 1332.346651][T13912] usb 8-1: USB disconnect, device number 7 [ 1332.358552][T15668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.466776][T15668] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.529327][T15668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.645612][ T5894] DVB: Unable to find symbol cx22700_attach() [ 1332.680767][T15682] loop1: detected capacity change from 0 to 128 [ 1332.695127][T15671] fido_id[15671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1332.973620][T15682] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1334.037092][T15682] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.187758][T15690] Invalid ELF header magic: != ELF [ 1334.352702][T15691] loop6: detected capacity change from 0 to 2048 [ 1334.659678][ T5894] DVB: Unable to find symbol tda10046_attach() [ 1334.811859][ T5894] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1334.851375][ T5894] usb 9-1: USB disconnect, device number 10 [ 1334.885777][T14521] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1335.066580][T15704] loop7: detected capacity change from 0 to 256 [ 1335.301501][T15704] FAT-fs (loop7): Directory bread(block 64) failed [ 1335.355902][T15704] FAT-fs (loop7): Directory bread(block 65) failed [ 1335.383031][T15704] FAT-fs (loop7): Directory bread(block 66) failed [ 1335.596304][ T5894] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1335.960856][T15704] FAT-fs (loop7): Directory bread(block 67) failed [ 1335.989464][T15704] FAT-fs (loop7): Directory bread(block 68) failed [ 1336.020277][T15704] FAT-fs (loop7): Directory bread(block 69) failed [ 1336.068378][T15704] FAT-fs (loop7): Directory bread(block 70) failed [ 1336.173054][T15704] FAT-fs (loop7): Directory bread(block 71) failed [ 1336.179924][T15704] FAT-fs (loop7): Directory bread(block 72) failed [ 1336.191291][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 1336.197190][T15704] FAT-fs (loop7): Directory bread(block 73) failed [ 1336.214554][ T5894] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1336.239724][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.260176][ T5894] usb 7-1: Product: syz [ 1336.265051][ T5894] usb 7-1: Manufacturer: syz [ 1336.269738][ T5894] usb 7-1: SerialNumber: syz [ 1336.314391][ T5894] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1336.332685][ T5894] r8152-cfgselector 7-1: config 0 descriptor?? [ 1336.356397][T15704] overlay: Unknown parameter 'ime [ 1336.356397][T15704] string [ 1336.356397][T15704] statistic [ 1336.356397][T15704] state [ 1336.356397][T15704] realm [ 1336.356397][T15704] rateest [ 1336.356397][T15704] quota [ 1336.356397][T15704] pkttype [ 1336.356397][T15704] physdev [ 1336.356397][T15704] cgroup [ 1336.356397][T15704] cgroup [ 1336.356397][T15704] cgroup [ 1336.356397][T15704] owner [ 1336.356397][T15704] nfacct [ 1336.356397][T15704] nfacct [ 1336.356397][T15704] mac [ 1336.356397][T15704] limit [ 1336.356397][T15704] ipvs [ 1336.356397][T15704] helper [ 1336.356397][T15704] devgroup [ 1336.356397][T15704] cpu [ 1336.356397][T15704] conntrack [ 1336.356397][T15704] conntrack [ 1336.356397][T15704] conntrack [ 1336.356397][T15704] connlabel [ 1336.356397][T15704] connbytes [ 1336.356397][T15704] comment [ 1336.356397][T15704] bpf [ 1336.356397][T15704] bpf [ 1336.356397][T15704] connmark [ 1336.356397][T15704] mark [ 1336.356397][T15704] rpfilter [ 1336.356397][T15704] ah [ 1336.356397][T15704] tcpmss [ 1336.356397][T15704] socket [ 1336.356397][T15704] socket [ 1336.356397][T15704] socket [ 1336.356397][T15704] socket [ 1336.356397][T15704] sctp [ 1336.356397][T15704] recent [ 1336.356397][T15704] recent [ 1336.356397][T15704] policy [ 1336.356397][T15704] osf [ 1336.356397][T15704] multiport [ 1336.356397][T15704] length [ 1336.356397][T15704] l2tp [ 1336.356397][T15704] iprange [ 1336.356397][T15704] ipcomp [ 1336.356397][T15704] ttl [ 1336.356397][T15704] hashlimit [ 1336.356397][T15704] hashlimit [ 1336.356397][T15704] hashlimit [ 1336.356397][T15704] esp [ 1336.356397][T15704] ecn [ 1336.356397][T15704] tos [ 1336.356397][T15704] dscp [ 1336.356397][T15704] dccp [ 1336.356397][T15704] connlimit [ 1336.356397][T15704] cluster [ 1336.356397][T15704] addrtype [ 1336.356397][T15704] addrtype [ 1336.356397][T15704] set [ 1336.356397][T15704] set [ 1336.356397][T15704] set [ 1336.356397][T15704] set [ 1336.356397][T15704] set [ 1336.356397][T15704] icmp [ 1337.705219][ T914] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 1338.467786][T15748] loop6: detected capacity change from 0 to 512 [ 1338.581950][T15748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1338.596540][T15746] loop1: detected capacity change from 0 to 4096 [ 1338.632890][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2034'. [ 1338.733332][T15748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.844762][T15748] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.081335][T15767] netlink: 'syz.9.2037': attribute type 34 has an invalid length. [ 1339.089717][T15748] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1339.246182][T15741] loop7: detected capacity change from 0 to 32768 [ 1339.409470][T13837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.394957][T15792] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2033'. [ 1342.134423][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1342.335970][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1342.380693][ T10] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1342.431173][ T10] usb 9-1: config 0 has no interface number 0 [ 1342.478652][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1342.514605][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.562129][ T10] usb 9-1: Product: syz [ 1342.575685][ T10] usb 9-1: Manufacturer: syz [ 1342.600759][ T10] usb 9-1: SerialNumber: syz [ 1342.615355][T15819] loop6: detected capacity change from 0 to 1024 [ 1342.644363][ T10] usb 9-1: config 0 descriptor?? [ 1342.712908][ T10] smsc95xx v2.0.0 [ 1343.021932][ T914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1343.251880][ T914] usb 2-1: Using ep0 maxpacket: 8 [ 1343.282016][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1343.383101][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1343.420640][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1343.471142][ T914] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1343.491636][ T10] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1343.570986][ T10] usb 9-1: USB disconnect, device number 11 [ 1343.652798][ T914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.674257][ T914] usb 2-1: Product: syz [ 1343.678475][ T914] usb 2-1: Manufacturer: syz [ 1343.746713][ T914] usb 2-1: SerialNumber: syz [ 1343.806576][ T914] usb 2-1: config 0 descriptor?? [ 1343.860226][ T914] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1344.041923][ T5894] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1344.281896][T15849] Invalid ELF header magic: != ELF [ 1344.921984][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 1345.025487][ T5894] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1345.067206][ T5894] usb 7-1: config 0 has no interface number 0 [ 1345.113838][ T914] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1345.115692][ T5894] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1345.155719][ T914] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1345.181609][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.201868][ T5894] usb 7-1: Product: syz [ 1345.210386][ T5894] usb 7-1: Manufacturer: syz [ 1345.211004][T15820] loop7: detected capacity change from 0 to 32768 [ 1345.222400][ T914] usb 2-1: USB disconnect, device number 5 [ 1345.246240][ T5894] usb 7-1: SerialNumber: syz [ 1345.406454][T15854] loop8: detected capacity change from 0 to 4096 [ 1345.479190][ T5894] usb 7-1: config 0 descriptor?? [ 1346.118529][T15820] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1346.119995][T15820] (syz.7.2054,15820,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 1346.227813][ T5894] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1346.263977][T15820] (syz.7.2054,15820,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 1346.368936][T15868] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1346.444692][ T5894] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1346.562179][T15873] netlink: 'syz.1.2068': attribute type 10 has an invalid length. [ 1346.579027][ T5894] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1346.840454][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1346.858312][ T5894] usb 7-1: USB disconnect, device number 4 [ 1346.918595][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1347.255548][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1347.365981][T15889] Invalid ELF header magic: != ELF [ 1347.473061][ T5894] quatech2 7-1:0.51: device disconnected [ 1348.623778][T15905] loop6: detected capacity change from 0 to 16 [ 1348.690375][T15905] erofs (device loop6): algorithm 1 isn't enabled on this kernel [ 1348.752549][T15885] loop8: detected capacity change from 0 to 32768 [ 1348.830662][T15885] [ 1348.830662][T15885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1348.830662][T15885] [ 1349.080958][T15910] [ 1349.080958][T15910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.080958][T15910] [ 1349.148660][T15908] [ 1349.148660][T15908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.148660][T15908] [ 1349.227161][T15908] [ 1349.227161][T15908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.227161][T15908] [ 1349.323105][T15910] [ 1349.323105][T15910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.323105][T15910] [ 1349.386281][T15908] [ 1349.386281][T15908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.386281][T15908] [ 1349.403598][T15915] loop7: detected capacity change from 0 to 2048 [ 1349.440224][T15908] [ 1349.440224][T15908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.440224][T15908] [ 1349.477275][T15915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1349.592222][T15908] [ 1349.592222][T15908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.592222][T15908] [ 1349.707057][ T111] [ 1349.707057][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.707057][ T111] [ 1350.948219][T13481] [ 1350.948219][T13481] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.948219][T13481] [ 1352.732028][T13481] [ 1352.732028][T13481] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1352.732028][T13481] [ 1353.348980][T15953] netlink: 'syz.7.2094': attribute type 3 has an invalid length. [ 1353.501907][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1353.756845][ T10] usb 2-1: config 0 has no interfaces? [ 1353.819623][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1353.952437][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.048212][ T10] usb 2-1: config 0 descriptor?? [ 1354.390574][ T5894] usb 2-1: USB disconnect, device number 6 [ 1354.748828][T15969] tap0: tun_chr_ioctl cmd 1074025677 [ 1354.802100][T15969] tap0: linktype set to 823 [ 1354.863387][T15975] loop7: detected capacity change from 0 to 512 [ 1354.983057][ T5894] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1355.056961][T15975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1355.172005][T15975] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.298512][ T5894] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1355.373761][T15984] loop6: detected capacity change from 0 to 524287999 [ 1355.381073][ T5894] usb 9-1: not running at top speed; connect to a high speed hub [ 1355.466955][ T5894] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1355.580423][T15975] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.2102: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1355.585841][ T5894] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1355.605552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1356.012121][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.129578][ T5894] usb 9-1: Product: syz [ 1356.153354][ T5894] usb 9-1: Manufacturer: syz [ 1356.158037][ T5894] usb 9-1: SerialNumber: syz [ 1356.178799][T13585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.293503][ T5894] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1356.602166][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1356.610970][ T8422] usb 9-1: USB disconnect, device number 12 [ 1356.831868][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 1356.882064][ T5894] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1356.952252][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.971770][ C1] sched: DL replenish lagged too much [ 1357.069175][ T5894] usb 2-1: config 0 descriptor?? [ 1357.302701][ T5894] as10x_usb: device has been detected [ 1357.704606][ T5894] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1358.322391][T16016] Invalid ELF header magic: != ELF [ 1358.366184][ T5894] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1360.455689][ T5894] as10x_usb: error during firmware upload part1 [ 1360.562695][ T5894] Registered device nBox DVB-T Dongle [ 1360.595515][ T5894] usb 2-1: USB disconnect, device number 7 [ 1360.659805][T16024] loop7: detected capacity change from 0 to 512 [ 1360.741111][T16024] EXT4-fs: Ignoring removed orlov option [ 1360.958912][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.979318][ T5894] Unregistered device nBox DVB-T Dongle [ 1361.028126][ T5894] as10x_usb: device has been disconnected [ 1361.152108][T16024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1361.342130][T16024] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.525599][T16024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.054758][T16039] loop7: detected capacity change from 0 to 2048 [ 1362.910019][T16044] loop6: detected capacity change from 0 to 1024 [ 1363.293870][T16051] Invalid ELF header magic: != ELF [ 1363.734448][T16055] hfsplus: request for non-existent node -1 in B*Tree [ 1363.819628][T16055] hfsplus: request for non-existent node -1 in B*Tree [ 1364.180485][ T6040] hfsplus: b-tree write err: -5, ino 3 [ 1364.758549][T16068] loop6: detected capacity change from 0 to 2048 [ 1364.965176][T16067] loop7: detected capacity change from 0 to 4096 [ 1365.074171][T16068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1365.101930][T16067] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1365.257809][T16075] loop8: detected capacity change from 0 to 1024 [ 1365.568391][T16075] hfsplus: bad catalog folder thread [ 1366.550004][T16088] loop8: detected capacity change from 0 to 512 [ 1366.669962][T16088] EXT4-fs: Ignoring removed orlov option [ 1367.134309][T16088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.283381][T16088] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.405594][T16088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.907695][T16103] loop8: detected capacity change from 0 to 2048 [ 1369.049274][T16107] loop8: detected capacity change from 0 to 4096 [ 1370.269004][T16101] loop7: detected capacity change from 0 to 32768 [ 1370.683113][T16123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.691512][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.826230][T16149] loop8: detected capacity change from 0 to 2048 [ 1372.855256][T16152] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2155'. [ 1373.121160][T16149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1373.217319][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2156'. [ 1373.293593][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2156'. [ 1373.684260][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.277221][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1375.292361][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1375.300911][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1375.310665][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1375.322800][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1375.628710][T16185] tun0: tun_chr_ioctl cmd 1074812118 [ 1377.351905][ T5848] Bluetooth: hci5: command tx timeout [ 1378.872040][T16181] lo speed is unknown, defaulting to 1000 [ 1379.433073][ T5848] Bluetooth: hci5: command tx timeout [ 1379.680987][T16181] chnl_net:caif_netlink_parms(): no params data found [ 1380.125470][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.175192][T16181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.240819][T16181] bridge_slave_0: entered allmulticast mode [ 1380.281960][T16181] bridge_slave_0: entered promiscuous mode [ 1380.344708][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.370161][T16181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.401125][T16181] bridge_slave_1: entered allmulticast mode [ 1380.695135][T16181] bridge_slave_1: entered promiscuous mode [ 1381.677546][ T5848] Bluetooth: hci5: command tx timeout [ 1382.182267][T16241] Invalid ELF header magic: != ELF [ 1383.755554][ T5848] Bluetooth: hci5: command tx timeout [ 1384.116593][T14528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1384.131958][T14528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1384.141831][T14528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1384.154843][T14528] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1384.170903][T14528] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1384.988918][T16181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.071542][T16181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.903550][T16181] team0: Port device team_slave_0 added [ 1385.942813][T16250] lo speed is unknown, defaulting to 1000 [ 1386.242759][T14528] Bluetooth: hci7: command tx timeout [ 1386.532339][T16269] loop8: detected capacity change from 0 to 2048 [ 1386.609846][T16269] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.675165][T16269] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.790518][T16269] fs-verity: sha256 using implementation "sha256-x86_64" [ 1387.012072][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1387.022920][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1387.031389][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1387.047010][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1387.054810][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1388.017932][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.076273][T16181] team0: Port device team_slave_1 added [ 1388.312195][ T5848] Bluetooth: hci7: command tx timeout [ 1388.782040][T16181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.789131][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.958006][T16280] loop8: detected capacity change from 0 to 1024 [ 1388.975977][T16181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.011315][T16280] EXT4-fs: Ignoring removed nobh option [ 1389.097913][T16280] EXT4-fs: Ignoring removed bh option [ 1389.112077][ T5848] Bluetooth: hci8: command tx timeout [ 1389.126721][T16181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.194638][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.263298][T16280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.321901][T16181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.467008][T16273] lo speed is unknown, defaulting to 1000 [ 1389.557903][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.285215][T16181] hsr_slave_0: entered promiscuous mode [ 1390.357206][T16181] hsr_slave_1: entered promiscuous mode [ 1390.408809][ T5848] Bluetooth: hci7: command tx timeout [ 1390.433022][T16181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1390.440626][T16181] Cannot create hsr debugfs directory [ 1390.710373][T14528] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1390.721823][T14528] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1390.741861][T14528] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1390.753025][T14528] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1390.761006][T14528] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1391.192760][T14528] Bluetooth: hci8: command tx timeout [ 1391.684731][T16292] lo speed is unknown, defaulting to 1000 [ 1391.854155][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1391.877721][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1391.892668][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1391.903943][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1391.922576][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1392.481125][ T5848] Bluetooth: hci7: command tx timeout [ 1392.650548][T16250] chnl_net:caif_netlink_parms(): no params data found [ 1392.843284][T16299] lo speed is unknown, defaulting to 1000 [ 1392.872169][ T5848] Bluetooth: hci9: command tx timeout [ 1392.943944][T16295] loop8: detected capacity change from 0 to 32768 [ 1393.006721][T16295] XFS: attr2 mount option is deprecated. [ 1393.112337][T16295] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1393.204600][T16295] XFS (loop8): Ending clean mount [ 1393.225833][T16295] XFS (loop8): Quotacheck needed: Please wait. [ 1393.272273][ T5848] Bluetooth: hci8: command tx timeout [ 1393.339792][T16295] XFS (loop8): Quotacheck: Done. [ 1393.996206][ T5848] Bluetooth: hci10: command tx timeout [ 1394.908026][T13481] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1394.961861][ T5848] Bluetooth: hci9: command tx timeout [ 1395.352099][ T5848] Bluetooth: hci8: command tx timeout [ 1396.272368][ T5848] Bluetooth: hci10: command tx timeout [ 1397.238064][ T5848] Bluetooth: hci9: command tx timeout [ 1397.286370][T16273] chnl_net:caif_netlink_parms(): no params data found [ 1397.692211][T16323] Invalid ELF header magic: != ELF [ 1398.378319][ T5848] Bluetooth: hci10: command tx timeout [ 1399.286017][T14528] Bluetooth: hci9: command tx timeout [ 1399.402907][T16250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.465853][T16250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.512604][T16250] bridge_slave_0: entered allmulticast mode [ 1399.545905][T16250] bridge_slave_0: entered promiscuous mode [ 1399.633543][T16250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.646799][T16250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.660144][T16250] bridge_slave_1: entered allmulticast mode [ 1399.678331][T16250] bridge_slave_1: entered promiscuous mode [ 1400.478023][T14528] Bluetooth: hci10: command tx timeout [ 1401.038501][T16342] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2177'. [ 1403.552936][T16351] Invalid ELF header magic: != ELF [ 1405.301404][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.409134][T16273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.425779][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.444657][T16273] bridge_slave_0: entered allmulticast mode [ 1405.461567][T16273] bridge_slave_0: entered promiscuous mode [ 1405.490694][T16273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.528264][T16273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.542544][T16273] bridge_slave_1: entered allmulticast mode [ 1405.569629][T16273] bridge_slave_1: entered promiscuous mode [ 1405.577752][ T10] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1405.599495][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.763730][ T10] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1405.799995][ T10] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1405.823724][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1405.848832][ T10] usb 9-1: config 1 has no interface number 0 [ 1405.870193][ T10] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1405.897022][ T10] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1405.961877][ T10] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1405.992953][T16273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.019711][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.036617][T16273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.097587][ T10] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1406.156071][T16250] team0: Port device team_slave_0 added [ 1406.245332][T16250] team0: Port device team_slave_1 added [ 1406.708422][ T10] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1406.904620][T16273] team0: Port device team_slave_0 added [ 1406.964663][T16292] chnl_net:caif_netlink_parms(): no params data found [ 1406.988604][ T10] usb 9-1: USB disconnect, device number 13 [ 1407.014661][ T10] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1407.079717][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.127532][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.225613][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.268332][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.302632][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.392262][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.716719][T16273] team0: Port device team_slave_1 added [ 1409.021902][T13912] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1409.187653][T13912] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1409.213355][T13912] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1409.235072][T13912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1409.249763][T13912] usb 9-1: SerialNumber: syz [ 1409.722113][T13912] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1409.794798][T13912] usb 9-1: USB disconnect, device number 14 [ 1411.357616][T16273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.371801][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.411412][T16273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.504750][T16250] hsr_slave_0: entered promiscuous mode [ 1411.533189][T16250] hsr_slave_1: entered promiscuous mode [ 1411.539595][T16250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.615875][T16250] Cannot create hsr debugfs directory [ 1411.771597][T16299] chnl_net:caif_netlink_parms(): no params data found [ 1411.863580][T16273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.900658][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.991262][T16273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.553571][T16292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.560769][T16292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.632351][T16292] bridge_slave_0: entered allmulticast mode [ 1412.722710][T16292] bridge_slave_0: entered promiscuous mode [ 1412.892210][T16292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.919865][T16292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.981594][T16292] bridge_slave_1: entered allmulticast mode [ 1413.059439][T16292] bridge_slave_1: entered promiscuous mode [ 1414.716413][T16292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.998973][T16292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.085651][T16412] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2187'. [ 1415.336245][T16273] hsr_slave_0: entered promiscuous mode [ 1415.406699][T16273] hsr_slave_1: entered promiscuous mode [ 1415.440574][T16273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1415.470508][T16273] Cannot create hsr debugfs directory [ 1422.410276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.390199][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1431.412225][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1431.422635][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1431.431096][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1431.439128][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1433.282193][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1433.291582][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1433.299732][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1433.309105][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1433.320098][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1443.856838][T15114] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1443.869078][T15114] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1443.877242][T15114] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1443.886695][T15114] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1443.894782][T15114] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1446.285551][T16443] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1446.296676][T16443] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1446.306090][T16443] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1446.316285][T16443] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1446.327601][T16443] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1449.339225][T16451] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1449.348881][T16451] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1449.357687][T16451] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1449.366203][T16451] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1449.374486][T16451] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1450.905635][T16455] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1450.916623][T16455] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1450.925361][T16455] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1450.936273][T16455] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1450.956664][T16455] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1463.939685][T14528] Bluetooth: hci12: command tx timeout [ 1463.947229][T14528] Bluetooth: hci13: command tx timeout [ 1463.953083][T16443] Bluetooth: hci14: command tx timeout [ 1464.065572][ T5845] Bluetooth: hci11: command tx timeout [ 1464.502661][T16299] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1465.992310][ T5845] Bluetooth: hci13: command tx timeout [ 1466.007316][T16455] Bluetooth: hci14: command tx timeout [ 1466.013315][T16451] Bluetooth: hci12: command tx timeout [ 1466.095560][ T5845] Bluetooth: hci4: command tx timeout [ 1466.161975][ T5845] Bluetooth: hci15: command tx timeout [ 1466.169772][ T5845] Bluetooth: hci11: command tx timeout [ 1468.072393][ T5845] Bluetooth: hci13: command tx timeout [ 1468.077959][ T5845] Bluetooth: hci14: command tx timeout [ 1468.083680][T16455] Bluetooth: hci12: command tx timeout [ 1468.152006][ T5845] Bluetooth: hci4: command tx timeout [ 1468.232545][T16455] Bluetooth: hci15: command tx timeout [ 1468.249919][ T5845] Bluetooth: hci11: command tx timeout [ 1470.152179][T16451] Bluetooth: hci12: command tx timeout [ 1470.157772][T16455] Bluetooth: hci13: command tx timeout [ 1470.164358][ T5845] Bluetooth: hci14: command tx timeout [ 1470.241938][ T5845] Bluetooth: hci4: command tx timeout [ 1470.312122][T16455] Bluetooth: hci15: command tx timeout [ 1470.320592][ T5845] Bluetooth: hci11: command tx timeout [ 1472.312461][ T5845] Bluetooth: hci4: command tx timeout [ 1472.392069][ T5845] Bluetooth: hci15: command tx timeout [ 1483.849970][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.915478][T16455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1491.927008][T16455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1491.935785][T16455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1491.967927][T16455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1491.977341][T16455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1493.909055][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1493.921344][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1493.932748][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1493.945376][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1493.953727][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1494.074094][ T5845] Bluetooth: hci0: command tx timeout [ 1495.992031][ T5845] Bluetooth: hci1: command tx timeout [ 1496.151902][ T5845] Bluetooth: hci0: command tx timeout [ 1498.071987][ T5845] Bluetooth: hci1: command tx timeout [ 1498.232812][ T5845] Bluetooth: hci0: command tx timeout [ 1500.152141][ T5845] Bluetooth: hci1: command tx timeout [ 1500.312227][ T5845] Bluetooth: hci0: command tx timeout [ 1501.280448][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 1502.232281][T16455] Bluetooth: hci1: command tx timeout [ 1503.999424][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1504.011579][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1504.022609][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1504.034118][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1504.042245][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1506.076394][ T5845] Bluetooth: hci2: command tx timeout [ 1506.472442][T16455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1506.483410][T16455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1506.492578][T16455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1506.500744][T16455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1506.509418][T16455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1508.152319][T16455] Bluetooth: hci2: command tx timeout [ 1508.552130][ T5845] Bluetooth: hci3: command tx timeout [ 1509.379401][T16455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1509.391949][T16455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1509.400114][T16455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1509.421619][T16455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1509.437546][T16455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1510.232291][T16455] Bluetooth: hci2: command tx timeout [ 1510.632910][T16455] Bluetooth: hci3: command tx timeout [ 1511.380422][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1511.389986][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1511.398956][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1511.412729][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1511.420424][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1511.512159][ T5845] Bluetooth: hci6: command tx timeout [ 1512.312142][ T5845] Bluetooth: hci2: command tx timeout [ 1512.712032][ T5845] Bluetooth: hci3: command tx timeout [ 1513.512140][ T5845] Bluetooth: hci7: command tx timeout [ 1513.597238][ T5845] Bluetooth: hci6: command tx timeout [ 1514.793573][ T5845] Bluetooth: hci3: command tx timeout [ 1515.592111][ T5845] Bluetooth: hci7: command tx timeout [ 1515.672051][ T5845] Bluetooth: hci6: command tx timeout [ 1517.671981][ T5845] Bluetooth: hci7: command tx timeout [ 1517.751989][ T5845] Bluetooth: hci6: command tx timeout [ 1519.751969][ T5845] Bluetooth: hci7: command tx timeout [ 1545.287874][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.495708][T16455] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1552.527521][T16455] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1552.546235][T16455] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1552.566704][T16455] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1552.575722][T16455] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1553.993263][ T5845] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1554.004919][ T5845] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1554.014733][ T5845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1554.023325][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1554.031125][ T5845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1554.637043][T16455] Bluetooth: hci8: command tx timeout [ 1556.072004][T16455] Bluetooth: hci9: command tx timeout [ 1556.711925][T16455] Bluetooth: hci8: command tx timeout [ 1558.152155][T16455] Bluetooth: hci9: command tx timeout [ 1558.792027][T16455] Bluetooth: hci8: command tx timeout [ 1560.232146][T16455] Bluetooth: hci9: command tx timeout [ 1560.871902][T16455] Bluetooth: hci8: command tx timeout [ 1562.312049][T16455] Bluetooth: hci9: command tx timeout [ 1564.478526][T16451] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1564.489823][T16451] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1564.500758][T16451] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1564.509701][T16451] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1564.518953][T16451] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1566.551771][T16455] Bluetooth: hci10: command tx timeout [ 1567.005935][T16451] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1567.017462][T16451] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1567.029935][T16451] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1567.040945][T16451] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1567.057381][T16451] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1568.641058][T16451] Bluetooth: hci10: command tx timeout [ 1569.111929][T16451] Bluetooth: hci16: command tx timeout [ 1569.966107][T16455] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1569.979546][T16455] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1569.992539][T16455] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1570.002402][T16455] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1570.010239][T16455] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1570.712031][T16455] Bluetooth: hci10: command tx timeout [ 1571.201020][T16455] Bluetooth: hci16: command tx timeout [ 1571.542862][T16451] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1571.555084][T16451] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1571.569038][T16451] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1571.577852][T16451] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1571.586227][T16451] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1572.158719][T16451] Bluetooth: hci17: command tx timeout [ 1572.792253][T16451] Bluetooth: hci10: command tx timeout [ 1573.272203][T16451] Bluetooth: hci16: command tx timeout [ 1573.672001][T16451] Bluetooth: hci18: command tx timeout [ 1574.232540][T16451] Bluetooth: hci17: command tx timeout [ 1575.351943][T16451] Bluetooth: hci16: command tx timeout [ 1575.751971][T16451] Bluetooth: hci18: command tx timeout [ 1576.312148][T16451] Bluetooth: hci17: command tx timeout [ 1577.831932][T16451] Bluetooth: hci18: command tx timeout [ 1578.392332][T16451] Bluetooth: hci17: command tx timeout [ 1579.912023][T16451] Bluetooth: hci18: command tx timeout [ 1588.328190][T16447] Bluetooth: hci15: command 0x0406 tx timeout [ 1588.334594][T16525] Bluetooth: hci11: command 0x0406 tx timeout [ 1588.340730][T16525] Bluetooth: hci14: command 0x0406 tx timeout [ 1588.347102][T16447] Bluetooth: hci13: command 0x0406 tx timeout [ 1588.354249][T16447] Bluetooth: hci12: command 0x0406 tx timeout [ 1588.360430][T16447] Bluetooth: hci4: command 0x0406 tx timeout [ 1606.725801][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.767526][ T5845] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1613.779640][ T5845] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1613.790103][ T5845] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1613.800297][ T5845] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1613.814116][ T5845] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1615.005157][T16455] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1615.018059][T16455] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1615.026921][T16455] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1615.035889][T16455] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1615.046164][T16455] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1615.911869][T16455] Bluetooth: hci19: command tx timeout [ 1617.111919][T16455] Bluetooth: hci20: command tx timeout [ 1617.991950][T16455] Bluetooth: hci19: command tx timeout [ 1619.045107][T16451] Bluetooth: hci0: command 0x0406 tx timeout [ 1619.051314][T16455] Bluetooth: hci1: command 0x0406 tx timeout [ 1619.192203][ T5845] Bluetooth: hci20: command tx timeout [ 1620.075954][ T5845] Bluetooth: hci19: command tx timeout [ 1622.175293][ T31] INFO: task kworker/u8:7:1155 blocked for more than 144 seconds. [ 1622.184287][ T5845] Bluetooth: hci20: command tx timeout [ 1622.189821][ T5845] Bluetooth: hci19: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1622.261746][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1622.269103][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.308263][ T31] task:kworker/u8:7 state:D stack:21144 pid:1155 tgid:1155 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1622.419592][ T31] Workqueue: events_unbound linkwatch_event [ 1622.492661][ T31] Call Trace: [ 1622.496030][ T31] [ 1622.499015][ T31] __schedule+0x16f5/0x4d00 [ 1622.559164][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1622.581731][ T31] ? schedule+0x165/0x360 [ 1622.586221][ T31] ? __pfx___schedule+0x10/0x10 [ 1622.591128][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.614333][ T31] ? schedule+0x91/0x360 [ 1622.618653][ T31] schedule+0x165/0x360 [ 1622.632205][ T31] schedule_preempt_disabled+0x13/0x30 [ 1622.637726][ T31] __mutex_lock+0x724/0xe80 [ 1622.651383][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.675361][ T31] ? __mutex_lock+0x51b/0xe80 [ 1622.680133][ T31] ? linkwatch_event+0xe/0x60 [ 1622.697658][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1622.706112][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.717541][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.726299][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1622.737807][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1622.747461][ T31] linkwatch_event+0xe/0x60 [ 1622.761523][ T31] process_scheduled_works+0xae1/0x17b0 [ 1622.767470][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1622.791180][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.810347][ T31] worker_thread+0x8a0/0xda0 [ 1622.815473][ T31] kthread+0x711/0x8a0 [ 1622.819587][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1622.833960][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.838615][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.851103][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.859183][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.877206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1622.888176][ T31] ? __pfx_kthread+0x10/0x10 [ 1623.181650][ T31] ret_from_fork+0x3fc/0x770 [ 1623.186345][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1623.191514][ T31] ? __switch_to_asm+0x39/0x70 [ 1623.221129][ T31] ? __switch_to_asm+0x33/0x70 [ 1623.226346][ T31] ? __pfx_kthread+0x10/0x10 [ 1623.230983][ T31] ret_from_fork_asm+0x1a/0x30 [ 1623.244960][ T31] [ 1623.248177][ T31] INFO: task dhcpcd:5490 blocked for more than 145 seconds. [ 1623.261771][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1623.269084][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1623.297648][ T31] task:dhcpcd state:D stack:21264 pid:5490 tgid:5490 ppid:5489 task_flags:0x400140 flags:0x00004002 [ 1623.324133][ T31] Call Trace: [ 1623.327484][ T31] [ 1623.330445][ T31] __schedule+0x16f5/0x4d00 [ 1623.344702][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1623.349625][ T31] ? schedule+0x165/0x360 [ 1623.361793][ T31] ? __pfx___schedule+0x10/0x10 [ 1623.366725][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.410470][ T31] ? schedule+0x91/0x360 [ 1623.419652][ T31] schedule+0x165/0x360 [ 1623.431346][ T31] schedule_preempt_disabled+0x13/0x30 [ 1623.451750][ T31] __mutex_lock+0x724/0xe80 [ 1623.456348][ T31] ? __mutex_lock+0x51b/0xe80 [ 1623.461070][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1623.478732][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1623.487461][ T31] ? __nla_parse+0x40/0x60 [ 1623.496681][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 1623.506505][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.521876][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1623.527436][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1623.547809][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1623.557285][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1623.568344][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1623.578807][ T31] netlink_rcv_skb+0x208/0x470 [ 1623.590542][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1623.598125][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1623.613680][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1623.618985][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1623.641071][ T31] netlink_unicast+0x75b/0x8d0 [ 1623.652791][ T31] netlink_sendmsg+0x805/0xb30 [ 1623.657638][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.672541][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.678242][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.691655][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 1623.696681][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.710951][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.717940][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.735584][ T31] __sock_sendmsg+0x21c/0x270 [ 1623.740336][ T31] ____sys_sendmsg+0x505/0x830 [ 1623.759130][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1623.771349][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.790042][ T31] ? import_iovec+0x74/0xa0 [ 1623.797309][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1623.811559][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1623.820342][ T31] ? __pfx_vfs_read+0x10/0x10 [ 1623.834469][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1623.839464][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1623.853666][ T31] ? __pfx_ksys_read+0x10/0x10 [ 1623.858484][ T31] ? rcu_is_watching+0x15/0xb0 [ 1623.876758][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1623.881502][ T31] do_syscall_64+0xfa/0x3b0 [ 1623.891737][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1623.896984][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.912322][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1623.918025][ T31] ? exc_page_fault+0x9f/0xf0 [ 1623.929515][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.940048][ T31] RIP: 0033:0x7fa69c4a3407 [ 1623.948921][ T31] RSP: 002b:00007fffeb974ad0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1623.974671][ T31] RAX: ffffffffffffffda RBX: 00007fa69c419740 RCX: 00007fa69c4a3407 [ 1623.992769][ T31] RDX: 0000000000000000 RSI: 00007fffeb988cb0 RDI: 0000000000000004 [ 1624.011976][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1624.020039][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffeb998ee0 [ 1624.038157][ T31] R13: 00007fa69c4196c8 R14: 0000000000000044 R15: 00007fffeb988cb0 [ 1624.048258][ T31] [ 1624.051386][ T31] INFO: task kworker/u8:14:6427 blocked for more than 145 seconds. [ 1624.066996][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1624.080443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1624.112743][ T31] task:kworker/u8:14 state:D stack:19656 pid:6427 tgid:6427 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1624.138132][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 1624.151118][ T31] Call Trace: [ 1624.157274][ T31] [ 1624.160240][ T31] __schedule+0x16f5/0x4d00 [ 1624.171516][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1624.179210][ T31] ? schedule+0x165/0x360 [ 1624.193471][ T31] ? __pfx___schedule+0x10/0x10 [ 1624.198506][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.218535][ T31] ? schedule+0x91/0x360 [ 1624.227896][ T31] schedule+0x165/0x360 [ 1624.233300][ T5845] Bluetooth: hci20: command tx timeout [ 1624.248840][ T31] schedule_preempt_disabled+0x13/0x30 [ 1624.254774][ T31] __mutex_lock+0x724/0xe80 [ 1624.259317][ T31] ? look_up_lock_class+0x74/0x170 [ 1624.273787][ T31] ? __mutex_lock+0x51b/0xe80 [ 1624.278555][ T31] ? addrconf_verify_work+0x19/0x30 [ 1624.290879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1624.310667][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.319438][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.341151][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.347618][ T31] addrconf_verify_work+0x19/0x30 [ 1624.360759][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1624.367623][ T31] process_scheduled_works+0xae1/0x17b0 [ 1624.381896][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1624.387928][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.410591][ T31] worker_thread+0x8a0/0xda0 [ 1624.415733][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1624.430882][ T31] ? __kthread_parkme+0x7b/0x200 [ 1624.451204][ T31] kthread+0x711/0x8a0 [ 1624.455618][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1624.460931][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.473865][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.479535][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.500521][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.510532][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1624.527672][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.532453][ T31] ret_from_fork+0x3fc/0x770 [ 1624.537074][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.561791][ T31] ? __switch_to_asm+0x39/0x70 [ 1624.566715][ T31] ? __switch_to_asm+0x33/0x70 [ 1624.571511][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.585608][ T31] ret_from_fork_asm+0x1a/0x30 [ 1624.590430][ T31] [ 1624.598527][ T31] INFO: task kworker/u8:15:7461 blocked for more than 146 seconds. [ 1624.618009][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1624.630552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1624.656017][ T31] task:kworker/u8:15 state:D stack:18112 pid:7461 tgid:7461 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1624.677698][ T31] Workqueue: netns cleanup_net [ 1624.699579][ T31] Call Trace: [ 1624.704813][ T31] [ 1624.707782][ T31] __schedule+0x16f5/0x4d00 [ 1624.722159][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1624.727104][ T31] ? schedule+0x165/0x360 [ 1624.731471][ T31] ? __pfx___schedule+0x10/0x10 [ 1624.749527][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1624.757494][ T31] ? schedule+0x91/0x360 [ 1625.206261][ T31] schedule+0x165/0x360 [ 1625.210519][ T31] schedule_preempt_disabled+0x13/0x30 [ 1625.232371][ T31] __mutex_lock+0x724/0xe80 [ 1625.236989][ T31] ? __mutex_lock+0x51b/0xe80 [ 1625.251653][ T31] ? wg_netns_pre_exit+0x1c/0x1d0 [ 1625.256763][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1625.270357][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1625.277616][ T31] ? net_generic+0x1e/0x240 [ 1625.293482][ T31] ? net_generic+0x1e/0x240 [ 1625.298074][ T31] wg_netns_pre_exit+0x1c/0x1d0 [ 1625.311635][ T31] ops_undo_list+0x187/0x990 [ 1625.316319][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1625.336569][ T31] cleanup_net+0x4c5/0x800 [ 1625.341075][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1625.356189][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1625.366169][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1625.371415][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1625.385789][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1625.396609][ T31] process_scheduled_works+0xae1/0x17b0 [ 1625.408723][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1625.430548][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1625.436458][ T31] worker_thread+0x8a0/0xda0 [ 1625.441092][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1625.461812][ T31] ? __kthread_parkme+0x7b/0x200 [ 1625.466860][ T31] kthread+0x711/0x8a0 [ 1625.470962][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1625.485915][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.490565][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1625.501501][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1625.511068][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1625.524494][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1625.529755][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.552782][ T31] ret_from_fork+0x3fc/0x770 [ 1625.557463][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1625.572106][ T31] ? __switch_to_asm+0x39/0x70 [ 1625.576919][ T31] ? __switch_to_asm+0x33/0x70 [ 1625.590470][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.598847][ T31] ret_from_fork_asm+0x1a/0x30 [ 1625.611755][ T31] [ 1625.614898][ T31] INFO: task kworker/1:4:14008 blocked for more than 147 seconds. [ 1625.636051][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1625.651806][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1625.660582][ T31] task:kworker/1:4 state:D stack:24776 pid:14008 tgid:14008 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1625.688957][ T31] Workqueue: events switchdev_deferred_process_work [ 1625.704943][ T31] Call Trace: [ 1625.708282][ T31] [ 1625.711233][ T31] __schedule+0x16f5/0x4d00 [ 1626.201914][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.207653][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1626.221686][ T31] ? schedule+0x165/0x360 [ 1626.226097][ T31] ? __pfx___schedule+0x10/0x10 [ 1626.230990][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.256575][ T31] ? schedule+0x91/0x360 [ 1626.260882][ T31] schedule+0x165/0x360 [ 1626.269452][ T31] schedule_preempt_disabled+0x13/0x30 [ 1626.281165][ T31] __mutex_lock+0x724/0xe80 [ 1626.290576][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.313881][ T31] ? __mutex_lock+0x51b/0xe80 [ 1626.318639][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1626.334598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1626.350774][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.358572][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1626.371276][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1626.380363][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1626.391864][ T31] switchdev_deferred_process_work+0xe/0x20 [ 1626.397846][ T31] process_scheduled_works+0xae1/0x17b0 [ 1626.418989][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1626.437649][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.449220][ T31] worker_thread+0x8a0/0xda0 [ 1626.460625][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1626.469808][ T31] ? __kthread_parkme+0x7b/0x200 [ 1626.482913][ T31] kthread+0x711/0x8a0 [ 1626.487049][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1626.503859][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.508508][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.522066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1626.527327][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.548974][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1626.561990][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.571761][ T31] ret_from_fork+0x3fc/0x770 [ 1626.576411][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1626.591661][ T31] ? __switch_to_asm+0x39/0x70 [ 1626.596476][ T31] ? __switch_to_asm+0x33/0x70 [ 1626.601264][ T31] ? __pfx_kthread+0x10/0x10 [ 1626.614473][ T31] ret_from_fork_asm+0x1a/0x30 [ 1626.619448][ T31] [ 1626.632688][ T31] INFO: task syz.1.2144:16124 blocked for more than 148 seconds. [ 1626.640452][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1626.667167][ T31] Blocked by coredump. [ 1626.675276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1626.690277][ T31] task:syz.1.2144 state:D stack:26504 pid:16124 tgid:16122 ppid:14521 task_flags:0x40054c flags:0x00004002 [ 1626.718233][ T31] Call Trace: [ 1626.722574][ T31] [ 1626.725537][ T31] __schedule+0x16f5/0x4d00 [ 1626.730068][ T31] ? stack_trace_save+0x9c/0xe0 [ 1626.754987][ T31] ? __lock_acquire+0x9d0/0xd20 [ 1626.759937][ T31] ? schedule+0x165/0x360 [ 1626.775397][ T31] ? __pfx___schedule+0x10/0x10 [ 1626.780365][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.791763][ T31] ? schedule+0x91/0x360 [ 1626.796159][ T31] schedule+0x165/0x360 [ 1626.800346][ T31] schedule_preempt_disabled+0x13/0x30 [ 1626.814842][ T31] __mutex_lock+0x724/0xe80 [ 1626.819408][ T31] ? __mutex_lock+0x51b/0xe80 [ 1626.830134][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1626.838561][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1626.855965][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1626.861179][ T31] tun_chr_close+0x3e/0x1c0 [ 1626.879453][ T31] __fput+0x44c/0xa70 [ 1626.888803][ T31] task_work_run+0x1d4/0x260 [ 1626.898370][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1626.907818][ T31] ? kmem_cache_free+0x18f/0x400 [ 1626.917861][ T31] do_exit+0x6ad/0x22e0 [ 1626.926354][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.936962][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1626.946367][ T31] ? __pfx_do_exit+0x10/0x10 [ 1626.951005][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1626.973876][ T31] do_group_exit+0x21c/0x2d0 [ 1626.978551][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.995420][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1627.000702][ T31] get_signal+0x1286/0x1340 [ 1627.010714][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1627.020610][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1627.031758][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1627.037273][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1627.051309][ T31] do_syscall_64+0x2bd/0x3b0 [ 1627.056246][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1627.074503][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.080619][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1627.102043][ T31] ? exc_page_fault+0x9f/0xf0 [ 1627.109271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.099021][ T31] RIP: 0033:0x7f062818e969 [ 1628.115442][ T31] RSP: 002b:00007f062905c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 1628.132053][ T31] RAX: 0000000000000000 RBX: 00007f06283b5fa0 RCX: 00007f062818e969 [ 1628.140092][ T31] RDX: 00002000000002c0 RSI: 0000000000000008 RDI: 0000000000000000 [ 1628.171798][ T31] RBP: 00007f0628210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1628.179865][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.203086][ T31] R13: 0000000000000000 R14: 00007f06283b5fa0 R15: 00007ffd069ae318 [ 1628.211156][ T31] [ 1628.228526][ T31] INFO: task syz-executor:16181 blocked for more than 150 seconds. [ 1628.251914][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1628.259261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1628.276485][ T31] task:syz-executor state:D stack:22760 pid:16181 tgid:16181 ppid:1 task_flags:0x400140 flags:0x00004006 [ 1628.300595][ T31] Call Trace: [ 1628.310899][ T31] [ 1628.322567][ T31] __schedule+0x16f5/0x4d00 [ 1628.327151][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1628.341462][ T31] ? schedule+0x165/0x360 [ 1628.346228][ T31] ? __pfx___schedule+0x10/0x10 [ 1628.351182][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.361748][ T31] ? schedule+0x91/0x360 [ 1628.366042][ T31] schedule+0x165/0x360 [ 1628.370231][ T31] schedule_preempt_disabled+0x13/0x30 [ 1628.384397][ T31] __mutex_lock+0x724/0xe80 [ 1628.388970][ T31] ? __mutex_lock+0x51b/0xe80 [ 1628.408770][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1628.431748][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1628.436898][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.451692][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 1628.457754][ T31] nsim_dev_hwstats_init+0xc6/0x3e0 [ 1628.472225][ T31] ? nsim_dev_psample_init+0x493/0x570 [ 1628.477751][ T31] nsim_drv_probe+0x83b/0xb70 [ 1628.490808][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.500277][ T31] ? up_write+0x1c4/0x420 [ 1628.511746][ T31] ? __pfx_nsim_drv_probe+0x10/0x10 [ 1628.516998][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.539739][ T31] ? kernfs_create_link+0x187/0x200 [ 1628.547807][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.561790][ T31] ? driver_sysfs_add+0x1fe/0x210 [ 1628.566892][ T31] ? __pfx_nsim_bus_probe+0x10/0x10 [ 1628.581174][ T31] really_probe+0x26d/0x9a0 [ 1628.586190][ T31] __driver_probe_device+0x18c/0x2f0 [ 1628.591531][ T31] driver_probe_device+0x4f/0x430 [ 1628.608432][ T31] __device_attach_driver+0x2ce/0x530 [ 1628.615884][ T31] bus_for_each_drv+0x251/0x2e0 [ 1628.620832][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1628.630605][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1628.652879][ T31] __device_attach+0x2b8/0x400 [ 1628.657733][ T31] ? __pfx___device_attach+0x10/0x10 [ 1628.672100][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.677919][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1628.691852][ T31] bus_probe_device+0x185/0x260 [ 1628.699318][ T31] device_add+0x7b6/0xb50 [ 1628.713824][ T31] new_device_store+0x36c/0x6f0 [ 1628.718783][ T31] ? __pfx_new_device_store+0x10/0x10 [ 1628.731762][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 1628.736725][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 1628.759985][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.772472][ T31] ? sysfs_kf_write+0x166/0x260 [ 1628.777395][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.793992][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1628.811021][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 1628.816730][ T31] vfs_write+0x54b/0xa90 [ 1628.821018][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1628.836184][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1628.846876][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.864497][ T31] ? kmem_cache_free+0x18f/0x400 [ 1628.869564][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.884686][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.890392][ T31] ksys_write+0x145/0x250 [ 1628.903942][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1628.908862][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.923405][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1628.928152][ T31] do_syscall_64+0xfa/0x3b0 [ 1628.940220][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1628.948377][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.966210][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.981705][ T31] ? exc_page_fault+0x9f/0xf0 [ 1628.986542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.002055][ T31] RIP: 0033:0x7f895538d41f [ 1629.009316][ T31] RSP: 002b:00007fff1b3bf1d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1629.026290][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f895538d41f [ 1629.038902][ T31] RDX: 0000000000000003 RSI: 00007fff1b3bf220 RDI: 0000000000000005 [ 1629.051896][ T31] RBP: 00007f8955411d29 R08: 0000000000000000 R09: 00007fff1b3bf027 [ 1629.070325][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1629.091816][ T31] R13: 00007fff1b3bf220 R14: 00007f89560e4620 R15: 0000000000000003 [ 1629.099940][ T31] [ 1629.121976][ T31] INFO: task syz-executor:16250 blocked for more than 151 seconds. [ 1629.129946][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1629.149851][ T31] Blocked by coredump. [ 1629.158170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1629.176044][ T31] task:syz-executor state:D stack:22440 pid:16250 tgid:16250 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1629.202581][ T31] Call Trace: [ 1629.205942][ T31] [ 1629.222030][ T31] __schedule+0x16f5/0x4d00 [ 1629.226646][ T31] ? stack_trace_save+0x9c/0xe0 [ 1629.231547][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1629.248364][ T31] ? schedule+0x165/0x360 [ 1629.261690][ T31] ? __pfx___schedule+0x10/0x10 [ 1629.266725][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.281704][ T31] ? schedule+0x91/0x360 [ 1629.286051][ T31] schedule+0x165/0x360 [ 1629.290244][ T31] schedule_preempt_disabled+0x13/0x30 [ 1629.321004][ T31] __mutex_lock+0x724/0xe80 [ 1629.328342][ T31] ? __mutex_lock+0x51b/0xe80 [ 1629.340479][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1629.347172][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1629.360892][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1629.368057][ T31] tun_chr_close+0x3e/0x1c0 [ 1629.380137][ T31] __fput+0x44c/0xa70 [ 1629.386236][ T31] task_work_run+0x1d4/0x260 [ 1629.390970][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1629.407548][ T31] ? kmem_cache_free+0x18f/0x400 [ 1629.424936][ T31] do_exit+0x6ad/0x22e0 [ 1629.429235][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.441723][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1629.446866][ T31] ? __pfx_do_exit+0x10/0x10 [ 1629.451479][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.468437][ T31] do_group_exit+0x21c/0x2d0 [ 1629.476901][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.488447][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1629.497302][ T31] get_signal+0x1286/0x1340 [ 1629.507669][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1629.521442][ T31] ? fput_close_sync+0x119/0x200 [ 1629.543432][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1629.549790][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1629.565053][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1629.570422][ T31] do_syscall_64+0x2bd/0x3b0 [ 1629.580384][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.591517][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1629.598728][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.611732][ T31] RIP: 0033:0x7faa84b907fc [ 1629.616207][ T31] RSP: 002b:00007ffde5e44b40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1629.646061][ T31] RAX: 0000000000000058 RBX: 00007faa858e4620 RCX: 00007faa84b907fc [ 1629.661222][ T31] RDX: 0000000000000058 RSI: 00007faa858e4670 RDI: 0000000000000003 [ 1629.681427][ T31] RBP: 0000000000000000 R08: 00007ffde5e44b94 R09: 000000000000000c [ 1629.691034][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1629.707230][ T31] R13: 0000000000000000 R14: 00007faa858e4670 R15: 0000000000000000 [ 1629.718116][ T31] [ 1629.730312][ T31] INFO: task syz-executor:16273 blocked for more than 151 seconds. [ 1629.752265][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1629.759603][ T31] Blocked by coredump. [ 1629.777218][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1629.798116][ T31] task:syz-executor state:D stack:22760 pid:16273 tgid:16273 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1629.815151][ T31] Call Trace: [ 1629.818457][ T31] [ 1629.821404][ T31] __schedule+0x16f5/0x4d00 [ 1629.843863][ T31] ? stack_trace_save+0x9c/0xe0 [ 1629.848804][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1629.865520][ T31] ? schedule+0x165/0x360 [ 1629.869936][ T31] ? __pfx___schedule+0x10/0x10 [ 1629.887791][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.898433][ T31] ? schedule+0x91/0x360 [ 1629.908582][ T31] schedule+0x165/0x360 [ 1629.916342][ T31] schedule_preempt_disabled+0x13/0x30 [ 1629.927610][ T31] __mutex_lock+0x724/0xe80 [ 1629.938342][ T31] ? __mutex_lock+0x51b/0xe80 [ 1629.945666][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1629.950387][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1629.969959][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1629.977983][ T31] tun_chr_close+0x3e/0x1c0 [ 1629.992629][ T31] __fput+0x44c/0xa70 [ 1629.996666][ T31] task_work_run+0x1d4/0x260 [ 1630.001290][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1630.015069][ T31] ? kmem_cache_free+0x18f/0x400 [ 1630.020095][ T31] do_exit+0x6ad/0x22e0 [ 1630.030658][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.041740][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1630.046842][ T31] ? __pfx_do_exit+0x10/0x10 [ 1630.051481][ T31] do_group_exit+0x21c/0x2d0 [ 1630.067619][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.094077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1630.099371][ T31] get_signal+0x1286/0x1340 [ 1630.116549][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1630.125842][ T31] ? fput_close_sync+0x119/0x200 [ 1630.139075][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1630.148950][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1630.160138][T16451] Bluetooth: hci2: command 0x0406 tx timeout [ 1630.166449][T16455] Bluetooth: hci3: command 0x0406 tx timeout [ 1630.185370][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1630.191159][ T31] do_syscall_64+0x2bd/0x3b0 [ 1630.201710][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.207875][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1630.225956][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.241824][ T31] RIP: 0033:0x7f88b4d907fc [ 1630.246328][ T31] RSP: 002b:00007fffd8fe5170 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1630.267058][ T31] RAX: 0000000000000020 RBX: 00007f88b5ae4620 RCX: 00007f88b4d907fc [ 1630.279871][ T31] RDX: 0000000000000020 RSI: 00007f88b5ae4670 RDI: 0000000000000003 [ 1630.301427][ T31] RBP: 0000000000000000 R08: 00007fffd8fe51c4 R09: 000000000000000c [ 1630.324596][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1630.337490][ T31] R13: 0000000000000000 R14: 00007f88b5ae4670 R15: 0000000000000000 [ 1630.354281][ T31] [ 1630.369304][ T31] INFO: task syz-executor:16292 blocked for more than 152 seconds. [ 1630.379810][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1630.411755][ T31] Blocked by coredump. [ 1630.416412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1630.451204][ T31] task:syz-executor state:D stack:22760 pid:16292 tgid:16292 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1630.472049][ T31] Call Trace: [ 1630.475380][ T31] [ 1630.478331][ T31] __schedule+0x16f5/0x4d00 [ 1630.492056][ T31] ? stack_trace_save+0x9c/0xe0 [ 1630.496972][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1630.514762][ T31] ? schedule+0x165/0x360 [ 1630.519163][ T31] ? __pfx___schedule+0x10/0x10 [ 1630.531651][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.537333][ T31] ? schedule+0x91/0x360 [ 1630.557066][ T31] schedule+0x165/0x360 [ 1630.561302][ T31] schedule_preempt_disabled+0x13/0x30 [ 1630.577043][ T31] __mutex_lock+0x724/0xe80 [ 1630.582115][ T31] ? __mutex_lock+0x51b/0xe80 [ 1630.586848][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1630.600750][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1630.609633][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1630.627576][ T31] tun_chr_close+0x3e/0x1c0 [ 1630.639515][ T31] __fput+0x44c/0xa70 [ 1630.649587][ T31] task_work_run+0x1d4/0x260 [ 1630.661812][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1630.667033][ T31] ? kmem_cache_free+0x18f/0x400 [ 1630.680249][ T31] do_exit+0x6ad/0x22e0 [ 1630.684819][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.691504][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1630.697421][ T31] ? __pfx_do_exit+0x10/0x10 [ 1630.711762][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.717484][ T31] do_group_exit+0x21c/0x2d0 [ 1630.734934][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.740700][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1630.761531][ T31] get_signal+0x1286/0x1340 [ 1630.778646][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1630.785803][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.791485][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 1630.807953][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1630.816957][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1630.829201][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1630.838338][ T31] do_syscall_64+0x2bd/0x3b0 [ 1630.852708][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1630.858077][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.876756][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.888068][ T31] ? exc_page_fault+0x9f/0xf0 [ 1630.897635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.907901][ T31] RIP: 0033:0x7f02ec7907fc [ 1630.917490][ T31] RSP: 002b:00007ffc4b3b1540 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1630.930245][ T31] RAX: 0000000000000068 RBX: 00007f02ed4e4620 RCX: 00007f02ec7907fc [ 1630.942699][ T31] RDX: 0000000000000068 RSI: 00007f02ed4e4670 RDI: 0000000000000003 [ 1630.970041][ T31] RBP: 0000000000000000 R08: 00007ffc4b3b1594 R09: 000000000000000c [ 1630.984964][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1631.001144][ T31] R13: 0000000000000000 R14: 00007f02ed4e4670 R15: 0000000000000000 [ 1631.011849][ T31] [ 1631.014890][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1631.061972][ T31] INFO: task syz-executor:16299 blocked for more than 152 seconds. [ 1631.069893][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1631.129690][ T31] Blocked by coredump. [ 1631.135085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1631.151653][ T31] task:syz-executor state:D stack:22760 pid:16299 tgid:16299 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1631.174657][ T31] Call Trace: [ 1631.177957][ T31] [ 1631.180906][ T31] __schedule+0x16f5/0x4d00 [ 1631.193773][ T31] ? stack_trace_save+0x9c/0xe0 [ 1631.203340][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1631.208242][ T31] ? schedule+0x165/0x360 [ 1631.225987][ T31] ? __pfx___schedule+0x10/0x10 [ 1631.230894][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1631.246665][ T31] ? schedule+0x91/0x360 [ 1631.250996][ T31] schedule+0x165/0x360 [ 1631.261791][ T31] schedule_preempt_disabled+0x13/0x30 [ 1631.267291][ T31] __mutex_lock+0x724/0xe80 [ 1631.293775][ T31] ? __mutex_lock+0x51b/0xe80 [ 1631.299379][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1631.306970][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1631.324607][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1631.329768][ T31] tun_chr_close+0x3e/0x1c0 [ 1631.345924][ T31] __fput+0x44c/0xa70 [ 1631.349956][ T31] task_work_run+0x1d4/0x260 [ 1631.361241][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1631.371632][ T31] ? kmem_cache_free+0x18f/0x400 [ 1631.376622][ T31] do_exit+0x6ad/0x22e0 [ 1631.380801][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1631.395615][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1631.400686][ T31] ? __pfx_do_exit+0x10/0x10 [ 1631.418285][ T31] do_group_exit+0x21c/0x2d0 [ 1631.427309][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1631.441309][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1631.456542][ T31] get_signal+0x1286/0x1340 [ 1631.461121][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1631.478395][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1631.486072][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 1631.499482][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1631.507645][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1631.526799][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1631.540137][ T31] do_syscall_64+0x2bd/0x3b0 [ 1631.551279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1631.561766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.578607][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1631.586254][ T31] ? exc_page_fault+0x9f/0xf0 [ 1631.590975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.602088][ T31] RIP: 0033:0x7fd86f7907fc [ 1631.606528][ T31] RSP: 002b:00007ffe08cce200 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1631.626829][ T31] RAX: 000000000000003c RBX: 00007fd8704e4620 RCX: 00007fd86f7907fc [ 1631.645280][ T31] RDX: 000000000000003c RSI: 00007fd8704e4670 RDI: 0000000000000003 [ 1631.668411][ T31] RBP: 0000000000000000 R08: 00007ffe08cce254 R09: 000000000000000c [ 1631.685479][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1631.698611][ T31] R13: 0000000000000000 R14: 00007fd8704e4670 R15: 0000000000000000 [ 1631.711140][ T31] [ 1631.720272][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1631.741397][ T31] INFO: task syz.8.2188:16420 blocked for more than 153 seconds. [ 1631.765796][ T31] Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 [ 1631.781731][ T31] Blocked by coredump. [ 1631.786376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1631.803862][ T31] task:syz.8.2188 state:D stack:22360 pid:16420 tgid:16419 ppid:13481 task_flags:0x40054c flags:0x00004002 [ 1631.830563][ T31] Call Trace: [ 1631.838192][ T31] [ 1631.841174][ T31] __schedule+0x16f5/0x4d00 [ 1631.852789][ T31] ? stack_trace_save+0x9c/0xe0 [ 1631.863345][ T31] ? __lock_acquire+0x9d1/0xd20 [ 1631.868259][ T31] ? schedule+0x165/0x360 [ 1631.889296][ T31] ? __pfx___schedule+0x10/0x10 [ 1631.897793][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1631.910194][ T31] ? schedule+0x91/0x360 [ 1631.918041][ T31] schedule+0x165/0x360 [ 1631.928010][ T31] schedule_preempt_disabled+0x13/0x30 [ 1631.937012][ T31] __mutex_lock+0x724/0xe80 [ 1631.947349][ T31] ? __mutex_lock+0x51b/0xe80 [ 1631.957378][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1631.968880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1632.080233][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1632.094507][ T31] tun_chr_close+0x3e/0x1c0 [ 1632.099090][ T31] __fput+0x44c/0xa70 [ 1632.112925][ T31] task_work_run+0x1d4/0x260 [ 1632.117575][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1632.132722][ T31] ? kmem_cache_free+0x18f/0x400 [ 1632.137726][ T31] do_exit+0x6ad/0x22e0 [ 1632.149238][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1632.159521][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1632.171969][ T31] ? __pfx_do_exit+0x10/0x10 [ 1632.176636][ T31] do_group_exit+0x21c/0x2d0