last executing test programs: 3m11.64925429s ago: executing program 0 (id=384): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6be80f6f31442189a1cb09b1b7a08faa99bc78038b61d119cfc7bde7a2b80b2984"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x6065, 0x2, 0x1, 'queue1\x00', 0xff}) cachestat(r5, &(0x7f0000000040), &(0x7f000009de80), 0x0) 3m8.921307347s ago: executing program 0 (id=390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000140)={[{@nolazytime}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f0000000280), 0x1, 0x4d0, &(0x7f0000000300)="$eJzs3MtrXNUfAPDvnTz6Spv8+uuvP1tbjVax+Eia9GEXLlQUBBUEXdRlTNJaO22kidiWoFGkrgvuxaXg0pU7N6IuxD9AwaUUigahqSBE7iudJjPppHlMm3w+MJlz7j1zzzn3nnNz5p65N4ANqzf9k0R0RcQvEdGdR29N0Ju/zUxPDt+YnhxOYnb29T+SLN316cnhMmn5uW1F5GAlovJJEs8mC/Mdv3jpzFC1Onq+iPdPnH23f/zipadOnx06NXpq9Nzg8eNHDg88fWzw6C2fq7OpBbbUWZbW6/reD8b27XnpzSuvDp+48tYPX6Xb2r0/X19bj9u6saAUL9dL1pvutT9nM/PXPdp0ZveG7TXhpL2FBWFJ2iIiPVwdWf/vjra4efC648WPW1o4YFWl/5s2NV49NQusY0m0ugRAa5T/6NPvv+Ur/lmjwcdd4NpzEZ1FeGZ6cnhm7jpAe1SK5R2rmH9vRJyY+vvz9BVLvQ4BAHAHsrHNk/PGf5lK7M7e87mOHcUcSk9E/CcidkbEfyNiV0T8LyJL+/+IuC//8Gx3k/n3zosvHP9UrtYt8wpJx3/P1Iz9ZmrqX7z1tBWx7Vn9O5KTp6ujh4p9cjA6NqXxgUXy+PaFzobrasd/6SvNvxwLFgW42p5foJvbyMjQxNBK7YRrH0Xsba9X/2RuJiBtAXsiYu/SNr2jDJx+/Mt9jRLdvv6LWIF5ptkvIh7Lj/9UzKt/KWkwP5m28WODR/s3R3X0UH/ZKhb68efLrzXKf1n1XwHp8d96a/ufl6L7rySfr+2IanX0/PjS87j866cNv9Msof3PSdt/Z/JGNmf909v5sgtDExPnByI6k1eyeNFZNke6fPDmZy+Uk8NF+rT+Bw/U7/87i6Rp/e+PiLQR74/Y8UBEPFiU/aGIeDgiDixS/++ff+Sdesvfz7eRRBItPf4jdc9/c+2/J6mdr7+DQNuZ775pNG/f3PE/ElPZuTaXnf9uo9kCLnP3AQAAwD2hEhFdxS+2KxG9XVGp9PXlv+HfFVsr1bHxiSdOjr13biS/R6AnOirlla7umuuhA8lUscU8PlhcKy7XHy6uG3/WtiWL9w2PVUdaW3XY8Lbl/b/SN3cuyPt/6ve2VpcOWHWN59EWuTUAWBfm9/9Ki8oBrL1mfkfjuwCsT3X6f71naADrkOe1wMZVr/9/OC++YPxvhADrwsL+/1udR9YB65HxP2xc+j9sXPo/bEjLua//zgPlzQKLJi6LWDfN5qbv8F/jwM6IaEnu5eNhVjOvLZEGerIlUclWdcXdsueXGOhuJnFEfL3svNpWoMxpj1nb/VPzwCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB72L8BAAD//71i27I=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000180)=""/88, 0x58) 3m8.423220764s ago: executing program 0 (id=391): syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3m8.233516511s ago: executing program 0 (id=392): pipe(0x0) r0 = dup(0xffffffffffffffff) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='/dev/loop', 0x9) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"f18a8d7390719e9692acc704959b21cfd2b22e5bc48f9e90148ec4244a4bd870"}) ioperm(0x0, 0x1, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 3m3.180589728s ago: executing program 0 (id=402): syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3m2.549197084s ago: executing program 0 (id=403): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x5, 0x0, 0xf0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) 2m47.252824585s ago: executing program 32 (id=403): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x5, 0x0, 0xf0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) 8.380220144s ago: executing program 3 (id=864): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.511308543s ago: executing program 2 (id=865): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7.471898773s ago: executing program 5 (id=866): mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 7.459814147s ago: executing program 1 (id=867): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 7.409895644s ago: executing program 3 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.408863893s ago: executing program 4 (id=869): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2, 0x0, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.365504422s ago: executing program 2 (id=870): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.364767201s ago: executing program 3 (id=871): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x2000c000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 6.30530879s ago: executing program 1 (id=872): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) 6.165742309s ago: executing program 5 (id=873): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) wait4(r2, 0x0, 0x8, 0x0) syz_pidfd_open(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, 0x0) 6.041699017s ago: executing program 4 (id=874): socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) fanotify_init(0x0, 0x400) socket(0x23, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20) socket(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.924657538s ago: executing program 1 (id=875): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x7) listen(r0, 0x5) 5.869666272s ago: executing program 4 (id=876): syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x50) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.869272007s ago: executing program 2 (id=877): pipe(0x0) r0 = dup(0xffffffffffffffff) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) 5.868076248s ago: executing program 3 (id=878): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.985073033s ago: executing program 3 (id=879): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) 4.768675359s ago: executing program 5 (id=880): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f00000003c0)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) ioctl$FE_SET_FRONTEND(r7, 0x40246f4c, &(0x7f0000000080)={0x30a32bc, 0x1, @qpsk={0x6e, 0x10}}) 4.361710235s ago: executing program 2 (id=881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) 3.643170593s ago: executing program 1 (id=882): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105401, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) 3.619680605s ago: executing program 4 (id=883): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3.503130729s ago: executing program 5 (id=884): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2, 0x0, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.569243647s ago: executing program 3 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) syz_usb_connect(0x0, 0x32, 0x0, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 1.39904507s ago: executing program 4 (id=886): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.394486591s ago: executing program 2 (id=887): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r3) 336.132428ms ago: executing program 1 (id=888): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 260.299336ms ago: executing program 5 (id=889): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 150.246273ms ago: executing program 4 (id=890): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) wait4(r2, 0x0, 0x8, 0x0) syz_pidfd_open(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, 0x0) 83.041334ms ago: executing program 2 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfffffffffffffc20, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340), 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}], 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 9.757038ms ago: executing program 5 (id=892): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) ptrace(0x10, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='vimc.0', 0x6) 0s ago: executing program 1 (id=893): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r6, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r7, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 78.123343][ T5603] cgroup: Unknown subsys name 'net' [ 78.197994][ T5603] cgroup: Unknown subsys name 'cpuset' [ 78.206692][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.880996][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.328399][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.332297][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.337890][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.338435][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.339551][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.340267][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.358034][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.360021][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.368078][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.385769][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.395916][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.403898][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.418863][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.427270][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.428316][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.432140][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.436551][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.447437][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.454677][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.473544][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.517436][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.526156][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.534197][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.546423][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.555607][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.374466][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.382240][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.391128][ T5613] bridge_slave_0: entered allmulticast mode [ 84.399767][ T5613] bridge_slave_0: entered promiscuous mode [ 84.444511][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.446161][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.446639][ T5613] bridge_slave_1: entered allmulticast mode [ 84.451621][ T5613] bridge_slave_1: entered promiscuous mode [ 84.518822][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.519202][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.519568][ T5619] bridge_slave_0: entered allmulticast mode [ 84.529171][ T5619] bridge_slave_0: entered promiscuous mode [ 84.565110][ T5618] Bluetooth: hci1: command tx timeout [ 84.565115][ T5624] Bluetooth: hci0: command tx timeout [ 84.565318][ T5625] Bluetooth: hci2: command tx timeout [ 84.576622][ T5622] Bluetooth: hci3: command tx timeout [ 84.608101][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.612508][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.612906][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.613359][ T5619] bridge_slave_1: entered allmulticast mode [ 84.626258][ T5619] bridge_slave_1: entered promiscuous mode [ 84.644277][ T5622] Bluetooth: hci4: command tx timeout [ 84.669385][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.669514][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.669870][ T5616] bridge_slave_0: entered allmulticast mode [ 84.673164][ T5616] bridge_slave_0: entered promiscuous mode [ 84.704565][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.728281][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.728516][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.729809][ T5616] bridge_slave_1: entered allmulticast mode [ 84.735467][ T5616] bridge_slave_1: entered promiscuous mode [ 84.770007][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.779789][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.851564][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.872462][ T5613] team0: Port device team_slave_0 added [ 84.904398][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.923864][ T5613] team0: Port device team_slave_1 added [ 84.946831][ T5619] team0: Port device team_slave_0 added [ 84.972377][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.972888][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.975335][ T5617] bridge_slave_0: entered allmulticast mode [ 84.982593][ T5617] bridge_slave_0: entered promiscuous mode [ 84.997639][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.997930][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.013319][ T5617] bridge_slave_1: entered allmulticast mode [ 85.019356][ T5617] bridge_slave_1: entered promiscuous mode [ 85.037599][ T5619] team0: Port device team_slave_1 added [ 85.038127][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.038510][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.038867][ T5615] bridge_slave_0: entered allmulticast mode [ 85.046362][ T5615] bridge_slave_0: entered promiscuous mode [ 85.099079][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.099125][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.100421][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.110288][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.112380][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121165][ T5615] bridge_slave_1: entered allmulticast mode [ 85.138016][ T5615] bridge_slave_1: entered promiscuous mode [ 85.181366][ T5616] team0: Port device team_slave_0 added [ 85.209474][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.209523][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.209552][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.255510][ T5616] team0: Port device team_slave_1 added [ 85.273590][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.280034][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.280087][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.280160][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.328584][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.348708][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.351371][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.351412][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.351484][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.404308][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.406953][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.407003][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.407075][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.470919][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.471049][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.471141][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.559625][ T5617] team0: Port device team_slave_0 added [ 85.588484][ T5615] team0: Port device team_slave_0 added [ 85.596371][ T5617] team0: Port device team_slave_1 added [ 85.616892][ T5619] hsr_slave_0: entered promiscuous mode [ 85.620914][ T5619] hsr_slave_1: entered promiscuous mode [ 85.634748][ T5613] hsr_slave_0: entered promiscuous mode [ 85.637566][ T5613] hsr_slave_1: entered promiscuous mode [ 85.639550][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 85.639785][ T5613] Cannot create hsr debugfs directory [ 85.650092][ T5615] team0: Port device team_slave_1 added [ 85.704786][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.704830][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.705465][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.780795][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.780839][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.780886][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.825879][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.825926][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.825971][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.882601][ T5616] hsr_slave_0: entered promiscuous mode [ 85.887569][ T5616] hsr_slave_1: entered promiscuous mode [ 85.889510][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.889570][ T5616] Cannot create hsr debugfs directory [ 85.918271][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.918313][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.918341][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.112951][ T5617] hsr_slave_0: entered promiscuous mode [ 86.116108][ T5617] hsr_slave_1: entered promiscuous mode [ 86.118111][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.118163][ T5617] Cannot create hsr debugfs directory [ 86.175854][ T5615] hsr_slave_0: entered promiscuous mode [ 86.178639][ T5615] hsr_slave_1: entered promiscuous mode [ 86.180560][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 86.180613][ T5615] Cannot create hsr debugfs directory [ 86.559514][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.572840][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.580509][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.591375][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.614007][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.624094][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.643953][ T5625] Bluetooth: hci1: command tx timeout [ 86.644001][ T5625] Bluetooth: hci3: command tx timeout [ 86.644043][ T5625] Bluetooth: hci0: command tx timeout [ 86.649686][ T5622] Bluetooth: hci2: command tx timeout [ 86.672008][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.682629][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.724188][ T5622] Bluetooth: hci4: command tx timeout [ 86.762586][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.776244][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.786693][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.798011][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.819125][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.831507][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.841542][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.852212][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.978255][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.991762][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.000808][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.011170][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.019433][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.035363][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.053504][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.065739][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.209503][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.265113][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.279145][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.300469][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.310656][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.338893][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.352227][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.362361][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.398875][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.399495][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.416045][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.427054][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.454422][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.454663][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.546608][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.557750][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.573228][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.586308][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.600575][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.610549][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.620179][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.633095][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.643084][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.687846][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.736173][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.736300][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.770853][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.806542][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.806679][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.913998][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.959366][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.959599][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.018665][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.018900][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.093061][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.171649][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.225585][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.241344][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.241545][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.292356][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.292612][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.372632][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.451806][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.452032][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.497051][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.497344][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.721873][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.738199][ T5618] Bluetooth: hci0: command tx timeout [ 88.738354][ T5618] Bluetooth: hci3: command tx timeout [ 88.738384][ T5618] Bluetooth: hci1: command tx timeout [ 88.738916][ T5622] Bluetooth: hci2: command tx timeout [ 88.805206][ T5622] Bluetooth: hci4: command tx timeout [ 89.099050][ T5619] veth0_vlan: entered promiscuous mode [ 89.156062][ T5619] veth1_vlan: entered promiscuous mode [ 89.224622][ T5619] veth0_macvtap: entered promiscuous mode [ 89.257414][ T5619] veth1_macvtap: entered promiscuous mode [ 89.381372][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.390870][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.430766][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.495716][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.496459][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.685998][ T1491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.724751][ T385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.741939][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.796718][ T5616] veth0_vlan: entered promiscuous mode [ 89.866096][ T5616] veth1_vlan: entered promiscuous mode [ 89.928221][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.928264][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.042810][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.057442][ T385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.057481][ T385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.097203][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.132543][ T5613] veth0_vlan: entered promiscuous mode [ 90.159025][ T5616] veth0_macvtap: entered promiscuous mode [ 90.188936][ T5616] veth1_macvtap: entered promiscuous mode [ 90.199326][ T5613] veth1_vlan: entered promiscuous mode [ 90.228977][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.293254][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.379562][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.417345][ T5617] veth0_vlan: entered promiscuous mode [ 90.490227][ T5613] veth0_macvtap: entered promiscuous mode [ 90.521419][ T5617] veth1_vlan: entered promiscuous mode [ 90.532062][ T5808] Bluetooth: MGMT ver 1.23 [ 90.568823][ T5613] veth1_macvtap: entered promiscuous mode [ 90.697344][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.744457][ T2248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.744846][ T2248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.744940][ T2248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.745050][ T2248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.805406][ T5622] Bluetooth: hci2: command tx timeout [ 90.805478][ T5622] Bluetooth: hci1: command tx timeout [ 90.805509][ T5622] Bluetooth: hci3: command tx timeout [ 90.805575][ T5622] Bluetooth: hci0: command tx timeout [ 90.872889][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.884530][ T5625] Bluetooth: hci4: command tx timeout [ 90.893282][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.893332][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.910682][ T5617] veth0_macvtap: entered promiscuous mode [ 90.976967][ T5617] veth1_macvtap: entered promiscuous mode [ 91.056260][ T1491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.067559][ T1491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.092014][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.092068][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.157293][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.230594][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.264205][ T2248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.264277][ T2248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.287790][ T5615] veth0_vlan: entered promiscuous mode [ 91.320688][ T5615] veth1_vlan: entered promiscuous mode [ 91.510791][ T5818] batadv_slave_0: entered promiscuous mode [ 91.538775][ T2248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.538823][ T2248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.554569][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.554641][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.554682][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.554719][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.646962][ T5817] batadv_slave_0: left promiscuous mode [ 91.803486][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.803527][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.827525][ T5615] veth0_macvtap: entered promiscuous mode [ 91.867630][ T5615] veth1_macvtap: entered promiscuous mode [ 91.898201][ T385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.898245][ T385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.931105][ T1626] cfg80211: failed to load regulatory.db [ 91.950829][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 92.051019][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.051074][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.089228][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.139561][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.246139][ T5829] loop1: detected capacity change from 0 to 128 [ 92.255242][ T5829] ======================================================= [ 92.255242][ T5829] WARNING: The mand mount option has been deprecated and [ 92.255242][ T5829] and is ignored by this kernel. Remove the mand [ 92.255242][ T5829] option from the mount to silence this warning. [ 92.255242][ T5829] ======================================================= [ 92.303503][ T1346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303737][ T1346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.332568][ T5829] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.384320][ T1491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.442307][ T5833] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 92.481390][ T1014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.641421][ T5829] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.703490][ T5829] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.986733][ T5829] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 93.399457][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.399500][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.490631][ T5844] fuse: Unknown parameter 'group_id00000000000000000000' [ 93.530974][ T5613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.636411][ T30] audit: type=1804 audit(1786453608.655:2): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.20" name="/newroot/3/file0/file1" dev="tmpfs" ino=2 res=1 errno=0 [ 93.704820][ T2224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.704875][ T2224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.924781][ T5850] syzkaller0: entered promiscuous mode [ 93.930541][ T5850] syzkaller0: entered allmulticast mode [ 94.192474][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 95.092738][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 95.170499][ T5869] loop3: detected capacity change from 0 to 1024 [ 95.215582][ T5869] EXT4-fs: Mount option(s) incompatible with ext3 [ 95.335354][ T5625] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 95.335433][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 95.335461][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.335519][ T5625] Workqueue: hci4 hci_rx_work [ 95.335666][ T5625] Call Trace: [ 95.335694][ T5625] [ 95.335728][ T5625] dump_stack_lvl+0xe8/0x150 [ 95.335834][ T5625] sysfs_create_dir_ns+0x271/0x2a0 [ 95.335919][ T5625] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 95.336005][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 95.336095][ T5625] kobject_add_internal+0x622/0xcd0 [ 95.336183][ T5625] kobject_add+0x163/0x240 [ 95.336266][ T5625] ? __pfx_kobject_add+0x10/0x10 [ 95.336335][ T5625] ? get_device_parent+0x366/0x3a0 [ 95.336417][ T5625] device_add+0x3fa/0xb80 [ 95.336482][ T5625] hci_conn_add_sysfs+0xd5/0x210 [ 95.336576][ T5625] le_conn_complete_evt+0xfb7/0x1690 [ 95.336664][ T5625] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 95.336736][ T5625] ? __mutex_unlock_slowpath+0x731/0x900 [ 95.336845][ T5625] ? skb_pull_data+0xf0/0x200 [ 95.336929][ T5625] hci_le_enh_conn_complete_evt+0x189/0x490 [ 95.337011][ T5625] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 95.337101][ T5625] hci_event_packet+0x67a/0xf10 [ 95.337227][ T5625] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 95.337316][ T5625] ? __pfx_hci_event_packet+0x10/0x10 [ 95.337414][ T5625] ? audit_update_watch+0x2a0/0xee0 [ 95.337500][ T5625] ? hci_send_to_monitor+0xe2/0x590 [ 95.337584][ T5625] hci_rx_work+0x3ee/0x1020 [ 95.337689][ T5625] ? process_scheduled_works+0x97e/0x1630 [ 95.337764][ T5625] process_scheduled_works+0xc4e/0x1630 [ 95.337934][ T5625] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.338028][ T5625] ? assign_work+0x3cf/0x5d0 [ 95.338115][ T5625] worker_thread+0xa47/0xfb0 [ 95.338274][ T5625] kthread+0x388/0x470 [ 95.338323][ T5625] ? __pfx_worker_thread+0x10/0x10 [ 95.338410][ T5625] ? __pfx_kthread+0x10/0x10 [ 95.338481][ T5625] ret_from_fork+0x514/0xb70 [ 95.338581][ T5625] ? __pfx_ret_from_fork+0x10/0x10 [ 95.338676][ T5625] ? __switch_to+0xc89/0x1420 [ 95.338763][ T5625] ? __pfx_kthread+0x10/0x10 [ 95.338826][ T5625] ret_from_fork_asm+0x1a/0x30 [ 95.338959][ T5625] [ 95.342179][ T5625] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.342301][ T5625] Bluetooth: hci4: failed to register connection device [ 95.610833][ T5875] loop4: detected capacity change from 0 to 512 [ 95.630631][ T5875] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.630680][ T5875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.705573][ T5875] EXT4-fs (loop4): 1 truncate cleaned up [ 95.729336][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.757657][ T5879] loop2: detected capacity change from 0 to 1024 [ 95.765824][ T5875] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #2: comm syz.4.5: invalid size [ 95.778135][ T5879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.793557][ T5875] EXT4-fs (loop4): Remounting filesystem read-only [ 95.877695][ T5879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.972110][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.073595][ T5879] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 96.736752][ T5892] fuse: Bad value for 'user_id' [ 96.737401][ T5892] fuse: Bad value for 'user_id' [ 97.064996][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.314427][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 97.600215][ T5908] loop0: detected capacity change from 0 to 1024 [ 97.614904][ T5908] EXT4-fs: Mount option(s) incompatible with ext3 [ 97.644487][ T5911] loop1: detected capacity change from 0 to 1024 [ 97.668864][ T5908] loop0: detected capacity change from 0 to 128 [ 97.718532][ T5911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.756451][ T5912] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 97.765235][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.766640][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.834204][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.834418][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.835202][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.835335][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.911241][ T5912] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.025256][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.113018][ T5922] fuse: Bad value for 'user_id' [ 98.119005][ T5922] fuse: Bad value for 'user_id' [ 99.063304][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 99.250833][ T5938] loop4: detected capacity change from 0 to 512 [ 99.274898][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.323123][ T5625] Bluetooth: hci3: ISO packet too small [ 99.357991][ T5938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.358152][ T5938] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.441115][ T5944] loop0: detected capacity change from 0 to 1024 [ 99.605524][ T5944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.622659][ T5944] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.671105][ T5951] loop2: detected capacity change from 0 to 1024 [ 99.679279][ T5951] EXT4-fs: Mount option(s) incompatible with ext3 [ 99.849805][ T5951] loop2: detected capacity change from 0 to 128 [ 99.902454][ T5944] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.57: lblock 3 mapped to illegal pblock 3 (length 3) [ 99.936099][ T5944] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 99.949791][ T5944] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.949791][ T5944] [ 100.220383][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.235107][ T12] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 100.277132][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 100.277187][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.277187][ T12] [ 100.329333][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.759926][ T5981] loop2: detected capacity change from 0 to 128 [ 102.885538][ T5992] loop1: detected capacity change from 0 to 512 [ 103.000474][ T5992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.022679][ T5992] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.050219][ T5997] netlink: 104 bytes leftover after parsing attributes in process `syz.2.71'. [ 103.782554][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.827448][ T5625] Bluetooth: hci2: Malformed Event: 0x02 [ 105.590960][ T6024] loop1: detected capacity change from 0 to 128 [ 107.540241][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 108.227598][ T6061] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 108.332566][ T6069] loop1: detected capacity change from 0 to 1024 [ 108.364788][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.738119][ T6078] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.738484][ T6078] overlayfs: failed to set xattr on upper [ 108.738553][ T6078] overlayfs: ...falling back to redirect_dir=nofollow. [ 108.738610][ T6078] overlayfs: ...falling back to index=off. [ 108.738660][ T6078] overlayfs: ...falling back to uuid=null. [ 110.828078][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.886969][ T6095] loop3: detected capacity change from 0 to 512 [ 110.892656][ T6095] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.952704][ T6098] loop4: detected capacity change from 0 to 512 [ 110.989634][ T6098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.022006][ T6098] EXT4-fs (loop4): 1 truncate cleaned up [ 111.031999][ T6098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.464834][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.162321][ T6126] loop3: detected capacity change from 0 to 1024 [ 113.831743][ T6126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.182358][ T6141] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.182509][ T6141] overlayfs: failed to set xattr on upper [ 114.182573][ T6141] overlayfs: ...falling back to redirect_dir=nofollow. [ 114.182631][ T6141] overlayfs: ...falling back to index=off. [ 114.182687][ T6141] overlayfs: ...falling back to uuid=null. [ 116.120932][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.820805][ T6169] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.016403][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 122.824880][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 123.313381][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 123.620835][ T6253] loop2: detected capacity change from 0 to 1024 [ 124.276222][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.276386][ T6253] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.454865][ T6272] Zero length message leads to an empty skb [ 124.590846][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.341581][ T6323] syzkaller0: entered promiscuous mode [ 127.347330][ T6323] syzkaller0: entered allmulticast mode [ 127.479353][ T6329] bond0: entered promiscuous mode [ 127.495673][ T6329] bond_slave_0: entered promiscuous mode [ 127.502136][ T6329] bond_slave_1: entered promiscuous mode [ 127.513447][ T6329] batadv0: entered promiscuous mode [ 127.525252][ T6329] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 128.543089][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 128.727487][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 130.942789][ T6361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.197'. [ 131.165604][ T6365] syzkaller0: entered promiscuous mode [ 131.171269][ T6365] syzkaller0: entered allmulticast mode [ 131.334442][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.418572][ T6376] syzkaller0: entered promiscuous mode [ 131.418622][ T6376] syzkaller0: entered allmulticast mode [ 132.135724][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 132.163233][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.163307][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.163367][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.237097][ T25] usb 2-1: config 0 descriptor?? [ 132.886990][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.893572][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130474][ T6390] loop3: detected capacity change from 0 to 512 [ 133.171329][ T6390] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.258871][ T6390] EXT4-fs (loop3): 1 truncate cleaned up [ 133.297727][ T6390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.527110][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.593266][ T25] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 5/7 [ 133.647841][ T25] pyra 0003:1E7D:2CF6.0001: parse failed [ 133.648007][ T25] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -22 [ 134.656895][ T6417] syzkaller0: entered promiscuous mode [ 134.662687][ T6417] syzkaller0: entered allmulticast mode [ 135.585342][ T25] usb 2-1: USB disconnect, device number 2 [ 135.647103][ T6429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.647147][ T6429] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 135.698420][ T6429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.698462][ T6429] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 135.730210][ T6429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.730252][ T6429] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 135.759701][ T6429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.759741][ T6429] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 135.799939][ T6429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.799977][ T6429] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 136.850193][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.4.224'. [ 139.912696][ T6473] syzkaller0: entered promiscuous mode [ 139.924631][ T6473] syzkaller0: entered allmulticast mode [ 140.361235][ T6491] Illegal XDP return value 4294967282 on prog (id 13) dev syz_tun, expect packet loss! [ 140.783939][ T5731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.915152][ T5731] usb 2-1: device descriptor read/64, error -71 [ 141.135135][ T6510] netlink: 'syz.4.238': attribute type 11 has an invalid length. [ 141.135179][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.238'. [ 141.166201][ T5731] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.223964][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.305748][ T5731] usb 2-1: device descriptor read/64, error -71 [ 141.374980][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 141.375742][ T9] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 141.388048][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 141.388293][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.388373][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 141.388486][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.427628][ T5731] usb usb2-port1: attempt power cycle [ 141.476372][ T9] usb 4-1: config 0 descriptor?? [ 141.954132][ T5731] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.017862][ T5731] usb 2-1: device descriptor read/8, error -71 [ 142.267555][ T5731] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.319899][ T5731] usb 2-1: device descriptor read/8, error -71 [ 142.393423][ T9] saitek 0003:06A3:0CFA.0002: unknown main item tag 0x1 [ 142.438700][ T5731] usb usb2-port1: unable to enumerate USB device [ 142.501420][ T9] saitek 0003:06A3:0CFA.0002: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.3-1/input0 [ 142.618585][ T9] usb 4-1: USB disconnect, device number 2 [ 142.684583][ T6530] fuse: Bad value for 'fd' [ 142.934912][ T6528] fido_id[6528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 143.008619][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 143.900997][ T6564] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 143.941084][ T6564] bond1 (unregistering): Released all slaves [ 144.043725][ T6585] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 144.978977][ T146] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.266675][ T6622] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 145.597476][ T6631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.275'. [ 145.885107][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 145.915431][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 145.945000][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 146.011927][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 146.702760][ T6652] veth0: entered promiscuous mode [ 146.709525][ T6649] syzkaller0: entered promiscuous mode [ 146.716395][ T6649] syzkaller0: entered allmulticast mode [ 146.797791][ T6656] veth0: left promiscuous mode [ 147.378749][ T6671] loop4: detected capacity change from 0 to 1024 [ 147.408884][ T6671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.547562][ T6680] loop3: detected capacity change from 0 to 128 [ 147.894879][ T6685] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.918272][ T6685] overlayfs: failed to set xattr on upper [ 147.925948][ T6685] overlayfs: ...falling back to redirect_dir=nofollow. [ 147.941931][ T6685] overlayfs: ...falling back to index=off. [ 147.954402][ T6685] overlayfs: ...falling back to uuid=null. [ 148.162733][ T6691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.290'. [ 150.769130][ T6730] loop1: detected capacity change from 0 to 128 [ 151.111223][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.302'. [ 154.115921][ T6754] syzkaller0: entered promiscuous mode [ 154.115975][ T6754] syzkaller0: entered allmulticast mode [ 154.942811][ T6774] netlink: 44 bytes leftover after parsing attributes in process `syz.0.316'. [ 154.997400][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.323969][ T6786] tmpfs: Unknown parameter 'nr_block00000000000000000000' [ 156.350702][ T6626] syz.0.273 (6626) used greatest stack depth: 19216 bytes left [ 156.387477][ T30] audit: type=1804 audit(1786453671.415:3): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.321" name="/newroot/61/file0/file1" dev="tmpfs" ino=333 res=1 errno=0 [ 156.458593][ T1346] IPVS: starting estimator thread 0... [ 156.594077][ T6791] IPVS: using max 24 ests per chain, 57600 per kthread [ 157.349926][ T6799] loop2: detected capacity change from 0 to 1024 [ 157.363462][ T6801] loop1: detected capacity change from 0 to 128 [ 157.410915][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.513427][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.594469][ T189] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 157.753605][ T189] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 157.774777][ T189] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 157.784703][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 157.796556][ T189] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.808692][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 157.820286][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 157.835583][ T189] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 157.835651][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 157.835685][ T189] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.835716][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 157.835747][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 157.869780][ T189] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 157.869835][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 157.869863][ T189] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.869890][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 157.869917][ T189] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 157.937977][ T189] usb 1-1: string descriptor 0 read error: -22 [ 157.938153][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.231722][ T189] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 158.639186][ T6830] tmpfs: Unknown parameter 'nr_block00000000000000000000' [ 158.689619][ T30] audit: type=1804 audit(1786453673.715:4): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.333" name="/newroot/66/file0/file1" dev="tmpfs" ino=366 res=1 errno=0 [ 158.758166][ T39] IPVS: starting estimator thread 0... [ 158.773575][ T6832] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 158.843894][ T6833] IPVS: using max 24 ests per chain, 57600 per kthread [ 159.906643][ T6843] loop3: detected capacity change from 0 to 1024 [ 159.963195][ T6843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.190088][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.336270][ T6850] syzkaller0: entered promiscuous mode [ 160.345072][ T6850] syzkaller0: entered allmulticast mode [ 161.215528][ T6883] ima: Unable to open file: /e (-2) [ 161.991354][ T6876] ima: policy update failed [ 162.022459][ T30] audit: type=1802 audit(1786453677.025:5): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.347" res=0 errno=0 [ 162.901878][ T4945] usb 1-1: USB disconnect, device number 2 [ 163.297107][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 163.307351][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 163.699296][ T6878] syzkaller0: entered promiscuous mode [ 163.699342][ T6878] syzkaller0: entered allmulticast mode [ 163.786784][ T6891] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 163.802755][ T6891] bond1 (unregistering): Released all slaves [ 163.851578][ T6898] loop1: detected capacity change from 0 to 1024 [ 163.917543][ T6898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.342604][ T6910] loop0: detected capacity change from 0 to 1024 [ 164.413530][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.636488][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 164.769330][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.848870][ T6948] syzkaller0: entered promiscuous mode [ 167.856119][ T6948] syzkaller0: entered allmulticast mode [ 169.959854][ T6971] loop3: detected capacity change from 0 to 1024 [ 170.012812][ T6971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.019861][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.161831][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.503090][ T6981] kvm: emulating exchange as write [ 171.758134][ T6959] syzkaller0: entered promiscuous mode [ 171.764139][ T6959] syzkaller0: entered allmulticast mode [ 172.136855][ T7007] loop2: detected capacity change from 0 to 1024 [ 172.169220][ T7005] loop4: detected capacity change from 0 to 1024 [ 172.202191][ T7005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.235552][ T7007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.350439][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.573851][ T5731] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 173.582155][ T5716] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.745014][ T5716] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.755165][ T5731] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.766317][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.779205][ T5731] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 173.787075][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.798199][ T5731] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.810229][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.821698][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.844813][ T5731] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 173.844885][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.844937][ T5731] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.844969][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.845001][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.900053][ T5716] usb 1-1: config 0 descriptor?? [ 173.906379][ T5731] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 173.906435][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.906465][ T5731] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.906493][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.906520][ T5731] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.965233][ T5731] usb 4-1: string descriptor 0 read error: -22 [ 173.965391][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.022156][ T5731] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 174.379353][ T5716] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 174.704141][ T7030] syzkaller0: entered promiscuous mode [ 174.704199][ T7030] syzkaller0: entered allmulticast mode [ 174.725688][ T5716] [drm:udl_init] *ERROR* Selecting channel failed [ 174.935287][ T5716] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 174.942223][ T5716] [drm] Initialized udl on minor 1 [ 174.962637][ T5716] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.988212][ T5716] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 175.014131][ T5716] usb 1-1: USB disconnect, device number 3 [ 175.604568][ T7046] loop0: detected capacity change from 0 to 512 [ 175.628914][ T7046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.751576][ T7046] EXT4-fs (loop0): 1 truncate cleaned up [ 175.785028][ T7046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.928887][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.336351][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.908224][ T4945] usb 4-1: USB disconnect, device number 3 [ 181.695828][ T7085] loop3: detected capacity change from 0 to 512 [ 181.731835][ T7085] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.401: inode has both inline data and extents flags [ 181.732072][ T7085] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.733909][ C1] EXT4-fs (loop3): initial error at time 1786453696: ext4_orphan_get:1403: inode 15 [ 181.733979][ C1] EXT4-fs (loop3): last error at time 1786453696: ext4_orphan_get:1403: inode 15 [ 181.797584][ T7087] random: crng reseeded on system resumption [ 181.806135][ T7085] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.401: couldn't read orphan inode 15 (err -117) [ 181.806347][ T7085] loop3: lost filesystem error report for type 5 error -117 [ 181.825043][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.361444][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.432029][ T7097] loop0: detected capacity change from 0 to 1024 [ 182.470533][ T7097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.940813][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 183.326703][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 183.326770][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 183.366307][ T7113] binder: 7109:7113 ioctl c0306201 200000000180 returned -14 [ 183.380037][ T7108] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 183.414687][ T7108] bond1 (unregistering): Released all slaves [ 186.256161][ T7155] loop2: detected capacity change from 0 to 512 [ 186.280684][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 186.949585][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.949749][ T7155] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.763085][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.031350][ T7171] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 188.044636][ T7171] bond1 (unregistering): Released all slaves [ 188.186425][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 188.186467][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 192.896858][ T7202] loop4: detected capacity change from 0 to 512 [ 193.023596][ T7202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.038129][ T7202] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.348559][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348646][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.830223][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.151719][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.169170][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.179628][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.191527][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.202102][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.299485][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.311934][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.321970][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.336689][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.344877][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.998607][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.367114][ T5625] Bluetooth: hci5: command tx timeout [ 201.593489][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.942708][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.128530][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.317737][ T7287] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 202.317781][ T7287] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 202.373355][ T7292] syzkaller0: entered promiscuous mode [ 202.379262][ T7292] syzkaller0: entered allmulticast mode [ 202.478616][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.478745][ T7320] syzkaller0: entered promiscuous mode [ 208.478816][ T7320] syzkaller0: entered allmulticast mode [ 210.158630][ T7367] netlink: 'syz.2.480': attribute type 29 has an invalid length. [ 211.779065][ T7378] syzkaller0: entered promiscuous mode [ 211.779150][ T7378] syzkaller0: entered allmulticast mode [ 212.598324][ T50] bridge_slave_1: left allmulticast mode [ 212.598400][ T50] bridge_slave_1: left promiscuous mode [ 212.683102][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.866766][ T7393] loop1: detected capacity change from 0 to 128 [ 212.917509][ T50] bridge_slave_0: left allmulticast mode [ 212.917570][ T50] bridge_slave_0: left promiscuous mode [ 212.920217][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.241175][ T7396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 213.251711][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 213.292842][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'. [ 213.292892][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 213.929434][ T50] bond0 (unregistering): left promiscuous mode [ 213.929478][ T50] bond_slave_0: left promiscuous mode [ 213.929749][ T50] bond_slave_1: left promiscuous mode [ 213.955816][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.985841][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.023039][ T50] bond0 (unregistering): Released all slaves [ 215.291464][ T7420] netlink: 'syz.1.491': attribute type 29 has an invalid length. [ 215.458032][ T7421] netlink: 'syz.1.491': attribute type 29 has an invalid length. [ 215.601657][ T7422] netlink: 'syz.1.491': attribute type 29 has an invalid length. [ 216.218674][ T7435] syzkaller0: entered promiscuous mode [ 216.226503][ T7435] syzkaller0: entered allmulticast mode [ 216.365641][ T7453] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 216.402619][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 216.557464][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 216.557579][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 216.614632][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 216.624604][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 216.994072][ T7462] binder: 7460:7462 ioctl c0306201 0 returned -14 [ 220.057689][ T50] batadv0: left promiscuous mode [ 220.145242][ T50] hsr_slave_0: left promiscuous mode [ 220.150891][ T50] hsr_slave_1: left promiscuous mode [ 220.161283][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.162675][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.180692][ T7475] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 220.184309][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.184372][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.222201][ T50] veth1_macvtap: left promiscuous mode [ 220.222320][ T50] veth0_macvtap: left promiscuous mode [ 220.222766][ T50] veth1_vlan: left promiscuous mode [ 220.228029][ T50] veth0_vlan: left promiscuous mode [ 220.660081][ T50] team0 (unregistering): Port device team_slave_1 removed [ 220.748548][ T50] team0 (unregistering): Port device team_slave_0 removed [ 220.771320][ T7480] loop4: detected capacity change from 0 to 128 [ 221.199207][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.199355][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.199558][ T7260] bridge_slave_0: entered allmulticast mode [ 221.230665][ T7260] bridge_slave_0: entered promiscuous mode [ 221.253632][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.254689][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.269516][ T7260] bridge_slave_1: entered allmulticast mode [ 221.284647][ T7260] bridge_slave_1: entered promiscuous mode [ 222.909263][ T7495] syzkaller0: entered promiscuous mode [ 222.918504][ T7495] syzkaller0: entered allmulticast mode [ 223.060282][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.259705][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.315730][ T7545] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 227.354487][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 227.450317][ T50] IPVS: stop unused estimator thread 0... [ 227.500133][ T7260] team0: Port device team_slave_0 added [ 227.523434][ T7260] team0: Port device team_slave_1 added [ 227.802773][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.802814][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.802843][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.825276][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.825331][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.825406][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.826350][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 227.826403][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 227.885407][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 227.885470][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 227.936462][ T7556] loop4: detected capacity change from 0 to 128 [ 227.982220][ T7547] zram0: detected capacity change from 0 to 8 [ 228.039350][ T7260] hsr_slave_0: entered promiscuous mode [ 228.047400][ T7260] hsr_slave_1: entered promiscuous mode [ 228.054357][ T7260] debugfs: 'hsr0' already exists in 'hsr' [ 228.060322][ T7260] Cannot create hsr debugfs directory [ 228.431414][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 228.431462][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 228.480857][ T7566] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 228.496546][ T7566] bond1 (unregistering): Released all slaves [ 229.058667][ T7580] usb usb1: usbfs: process 7580 (syz.2.526) did not claim interface 0 before use [ 230.559334][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 231.343691][ T7260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.515618][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.538365][ T7593] syzkaller0: entered promiscuous mode [ 231.538420][ T7593] syzkaller0: entered allmulticast mode [ 231.559882][ T7260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.580280][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.628255][ T7260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.642611][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.652399][ T7260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.669074][ T7260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.946939][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 231.946973][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 231.979522][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 231.988884][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 232.192133][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.286538][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.315996][ T7619] zram: Cannot change disksize for initialized device [ 232.337788][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.337920][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.417171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.417307][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.664027][ T7627] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 232.687027][ T7627] bond1 (unregistering): Released all slaves [ 233.107461][ T7648] syzkaller0: entered promiscuous mode [ 233.116422][ T7648] syzkaller0: entered allmulticast mode [ 233.663188][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 233.855509][ T7664] __nla_validate_parse: 2 callbacks suppressed [ 233.855559][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 233.855580][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 233.890124][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 233.890174][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 234.056083][ T7669] loop4: detected capacity change from 0 to 1024 [ 234.087478][ T7669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.546654][ T7682] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 234.546795][ T7682] overlayfs: failed to set xattr on upper [ 234.546862][ T7682] overlayfs: ...falling back to redirect_dir=nofollow. [ 234.546915][ T7682] overlayfs: ...falling back to index=off. [ 234.546971][ T7682] overlayfs: ...falling back to uuid=null. [ 237.512957][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.551448][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.646078][ T7698] syzkaller0: entered promiscuous mode [ 238.646131][ T7698] syzkaller0: entered allmulticast mode [ 238.768408][ T7701] zram: Cannot change disksize for initialized device [ 239.007377][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 239.029090][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 239.240088][ T7718] mmap: syz.4.556 (7718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.100615][ T7260] veth0_vlan: entered promiscuous mode [ 240.142287][ T7260] veth1_vlan: entered promiscuous mode [ 240.194660][ T7725] binder_alloc: 7724: binder_alloc_buf, no vma [ 240.326229][ T7260] veth0_macvtap: entered promiscuous mode [ 240.366272][ T7260] veth1_macvtap: entered promiscuous mode [ 240.415666][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.439770][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.478323][ T7728] veth0: entered promiscuous mode [ 240.538931][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.551477][ T7726] veth0: left promiscuous mode [ 240.607517][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.694345][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.719570][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.828933][ T7732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.486279][ T2224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.497303][ T2224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.662538][ T7736] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 241.686341][ T50] IPVS: starting estimator thread 0... [ 241.699390][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.699429][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.773920][ T7737] IPVS: using max 24 ests per chain, 57600 per kthread [ 241.850229][ T7744] zram: Cannot change disksize for initialized device [ 241.914195][ T7739] syzkaller0: entered promiscuous mode [ 241.920073][ T7739] syzkaller0: entered allmulticast mode [ 242.315743][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.566'. [ 242.331217][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.566'. [ 242.953415][ T7764] binder_alloc: 7763: binder_alloc_buf, no vma [ 244.968869][ T7781] syzkaller0: entered promiscuous mode [ 244.968928][ T7781] syzkaller0: entered allmulticast mode [ 245.014197][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.578'. [ 245.042004][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.578'. [ 245.503838][ T7792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.968343][ T7791] netlink: 36 bytes leftover after parsing attributes in process `syz.5.580'. [ 247.782972][ T7810] fuse: Bad value for 'fd' [ 248.304522][ T7816] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 249.464011][ T5716] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 250.191319][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 250.216672][ T5716] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 250.336218][ T5716] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 250.336283][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.336329][ T5716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 250.336378][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.416809][ T5716] usb 5-1: config 0 descriptor?? [ 250.756158][ T7842] syzkaller0: entered promiscuous mode [ 250.765882][ T7842] syzkaller0: entered allmulticast mode [ 251.085892][ T5716] saitek 0003:06A3:0CFA.0003: item fetching failed at offset 3/6 [ 251.086820][ T5716] saitek 0003:06A3:0CFA.0003: parse failed [ 251.087155][ T5716] saitek 0003:06A3:0CFA.0003: probe with driver saitek failed with error -22 [ 251.098723][ T5716] usb 5-1: USB disconnect, device number 2 [ 252.420854][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 252.446553][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 252.450694][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 252.461800][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 254.576303][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.945373][ T5819] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 254.950327][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.950401][ T5819] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 254.950507][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.449177][ T7903] fuse: Unknown parameter 'use00000000000000000000' [ 255.555560][ T4945] usb 5-1: USB disconnect, device number 3 [ 255.769964][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.770054][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.184019][ T2224] IPVS: starting estimator thread 0... [ 256.273921][ T7945] IPVS: using max 28 ests per chain, 67200 per kthread [ 256.728448][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 256.894285][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 256.979997][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 256.990908][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 257.595610][ T7962] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 258.845717][ T5716] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 258.984208][ T7993] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 258.994064][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 258.997243][ T5716] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 259.002574][ T5716] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 259.002689][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.002771][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 259.002885][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.072190][ T5716] usb 4-1: config 0 descriptor?? [ 259.536674][ T5716] saitek 0003:06A3:0CFA.0004: item fetching failed at offset 3/6 [ 259.544143][ T5716] saitek 0003:06A3:0CFA.0004: parse failed [ 259.544441][ T5716] saitek 0003:06A3:0CFA.0004: probe with driver saitek failed with error -22 [ 259.679299][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 259.690165][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 259.692749][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 259.696201][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 259.781042][ T5716] usb 4-1: USB disconnect, device number 4 [ 260.733955][ T5716] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 260.888136][ T5716] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 260.890588][ T5716] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 260.890683][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.890840][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.281658][ T5716] usb 3-1: config 0 descriptor?? [ 264.048137][ T5716] usb 3-1: can't set config #0, error -71 [ 264.057279][ T5716] usb 3-1: USB disconnect, device number 2 [ 264.488673][ T8023] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 264.972461][ T8033] syzkaller0: entered promiscuous mode [ 264.985147][ T8033] syzkaller0: entered allmulticast mode [ 265.049576][ T8033] tipc: Started in network mode [ 265.055023][ T8033] tipc: Node identity fa6f88e0109c, cluster identity 4711 [ 265.062942][ T8033] tipc: Enabled bearer , priority 0 [ 265.098021][ T8032] tipc: Resetting bearer [ 265.145149][ T8032] tipc: Disabling bearer [ 266.312871][ T5716] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 266.614883][ T5716] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 266.625806][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.082180][ T5716] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 269.252729][ T8071] loop5: detected capacity change from 0 to 128 [ 270.131750][ T8092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.943760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.123750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.173761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.193762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.203744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.233748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 271.243749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.443746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.523755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 271.543754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.656424][ T189] usb 3-1: USB disconnect, device number 3 [ 275.375159][ T8111] device-mapper: table: 248:0: too large device [ 275.375737][ T8111] device-mapper: ioctl: error adding target to table [ 275.714567][ T1626] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 275.898290][ T1626] usb 6-1: not running at top speed; connect to a high speed hub [ 275.909446][ T1626] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 276.002022][ T8110] loop2: detected capacity change from 0 to 128 [ 276.016165][ T1626] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.027648][ T1626] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.052831][ T1626] usb 6-1: language id specifier not provided by device, defaulting to English [ 276.104183][ T1626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.104287][ T1626] usb 6-1: Product: syz [ 276.112642][ T1626] usb 6-1: Manufacturer: syz [ 276.112742][ T1626] usb 6-1: SerialNumber: syz [ 278.524866][ T1626] usb 6-1: 0:1 : does not exist [ 278.972749][ T8133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.410807][ T1626] usb 6-1: USB disconnect, device number 2 [ 284.366875][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 285.056589][ T8186] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 285.648191][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 285.785507][ T8193] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 285.826361][ T8193] bond1 (unregistering): Released all slaves [ 287.179109][ T8206] loop5: detected capacity change from 0 to 1024 [ 287.599874][ T8206] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 287.601307][ T8206] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.658866][ T8206] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 287.660860][ T8206] EXT4-fs (loop5): orphan cleanup on readonly fs [ 287.694999][ T8206] EXT4-fs error (device loop5): ext4_read_inode_bitmap:169: comm syz.5.689: Inode bitmap for bg 0 marked uninitialized [ 287.695095][ T8206] loop5: lost filesystem error report for type 5 error -117 [ 287.708195][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 287.708222][ C0] EXT4-fs (loop5): initial error at time 1786453802: ext4_read_inode_bitmap:169 [ 287.708275][ C0] EXT4-fs (loop5): last error at time 1786453802: ext4_read_inode_bitmap:169 [ 287.832117][ T8206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.959181][ T8208] EXT4-fs error (device loop5): ext4_search_dir:1476: inode #2: block 16: comm syz.5.689: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 288.005970][ T8206] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 288.613073][ T7260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.063959][ T5717] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 289.235068][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 289.237464][ T5717] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 289.245438][ T5717] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 289.245565][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.245631][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 289.245928][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.300655][ T5717] usb 2-1: config 0 descriptor?? [ 289.790826][ T5717] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x1 [ 289.827520][ T5717] saitek 0003:06A3:0CFA.0005: item fetching failed at offset 3/6 [ 289.835042][ T5717] saitek 0003:06A3:0CFA.0005: parse failed [ 289.835376][ T5717] saitek 0003:06A3:0CFA.0005: probe with driver saitek failed with error -22 [ 290.076724][ T5717] usb 2-1: USB disconnect, device number 7 [ 291.353521][ T8235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.133281][ T8256] loop4: detected capacity change from 0 to 1024 [ 294.197836][ T8256] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 294.198269][ T8256] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.240512][ T8256] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 294.242730][ T8256] EXT4-fs (loop4): orphan cleanup on readonly fs [ 294.270725][ T8256] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.704: Inode bitmap for bg 0 marked uninitialized [ 294.270830][ T8256] loop4: lost filesystem error report for type 5 error -117 [ 294.286097][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 294.286131][ C0] EXT4-fs (loop4): initial error at time 1786453809: ext4_read_inode_bitmap:169 [ 294.286160][ C0] EXT4-fs (loop4): last error at time 1786453809: ext4_read_inode_bitmap:169 [ 294.352343][ T8256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.375360][ T8255] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 294.388306][ T8255] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #2: block 16: comm syz.4.704: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 295.106123][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.738440][ T8285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.978062][ T8339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.169783][ T8343] loop3: detected capacity change from 0 to 1024 [ 304.294525][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.236826][ T8350] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 305.236882][ T8350] overlayfs: failed to set xattr on upper [ 305.236893][ T8350] overlayfs: ...falling back to redirect_dir=nofollow. [ 305.236902][ T8350] overlayfs: ...falling back to index=off. [ 305.236938][ T8350] overlayfs: ...falling back to uuid=null. [ 310.683316][ T8419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.392021][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.340177][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340269][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.485291][ T8464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.020055][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 320.795274][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 320.806150][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 320.817701][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.824711][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.851490][ T10] usb 4-1: config 0 descriptor?? [ 320.864351][ T8470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.307074][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.314622][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.324485][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337103][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337161][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337196][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337229][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337260][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337302][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.337334][ T10] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 321.631820][ T8499] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 321.654856][ T8490] ima: Unable to open file: /e (-2) [ 321.657121][ T8489] ima: policy update failed [ 321.657387][ T30] audit: type=1802 audit(1786453836.685:6): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.773" res=0 errno=0 [ 321.694748][ T10] razer 0003:1532:010D.0006: failed to enable macro keys: -71 [ 321.707344][ T10] razer 0003:1532:010D.0006: hidraw0: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 321.727496][ T10] usb 4-1: USB disconnect, device number 5 [ 321.911831][ T8500] fido_id[8500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 323.591109][ T8523] netlink: 84 bytes leftover after parsing attributes in process `syz.2.780'. [ 325.825429][ T8533] loop3: detected capacity change from 0 to 512 [ 325.934103][ T8533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.947474][ T8533] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.831341][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.630489][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'. [ 328.462970][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 328.592514][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 328.592917][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 328.593414][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 328.859354][ T8562] bridge0: port 3(syz_tun) entered blocking state [ 328.868273][ T8562] bridge0: port 3(syz_tun) entered disabled state [ 328.881608][ T8562] syz_tun: entered allmulticast mode [ 328.942553][ T8562] syz_tun: entered promiscuous mode [ 328.950973][ T8562] bridge0: port 3(syz_tun) entered blocking state [ 328.951163][ T8562] bridge0: port 3(syz_tun) entered forwarding state [ 331.413356][ T8572] loop4: detected capacity change from 0 to 512 [ 331.522695][ T8570] syzkaller0: entered promiscuous mode [ 331.522789][ T8570] syzkaller0: entered allmulticast mode [ 332.055224][ T8572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.055479][ T8572] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.976621][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.695229][ T8595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.360258][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 335.606642][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 335.620389][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 335.620753][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 335.621014][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 336.155481][ T8618] loop2: detected capacity change from 0 to 512 [ 336.181179][ T8619] syzkaller0: entered promiscuous mode [ 336.187547][ T8619] syzkaller0: entered allmulticast mode [ 336.287362][ T8618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.287504][ T8618] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.269655][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.701629][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'. [ 338.275663][ T8637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.657408][ T8643] binder: 8639:8643 ioctl c0306201 0 returned -14 [ 339.808649][ T8644] binder: 8639:8644 ioctl c0306201 200000000040 returned -22 [ 339.867911][ T8643] gadgetfs: bound to dummy_udc driver [ 341.124005][ T25] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 341.131737][ C1] gadgetfs: connected [ 341.132416][ T25] gadgetfs: disconnected [ 341.254275][ T8646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.314094][ C1] gadgetfs: connected [ 341.319536][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 341.329248][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 341.329294][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.351659][ C1] gadgetfs: configuration #1 [ 341.372972][ T8643] gadgetfs: suspended from state 3 [ 341.389885][ T8643] gadgetfs: disconnected [ 341.394720][ T10] usb 1-1: USB disconnect, device number 4 [ 341.504233][ T8651] 9p: Unknown access argument 18446744073709551615: -34 [ 342.118493][ T8659] syzkaller0: entered promiscuous mode [ 342.118542][ T8659] syzkaller0: entered allmulticast mode [ 342.132768][ T8661] loop5: detected capacity change from 0 to 512 [ 342.269897][ T8661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.270143][ T8661] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.312874][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.824'. [ 343.356506][ T7260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.262862][ T8689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.558618][ T8702] syzkaller0: entered promiscuous mode [ 346.558690][ T8702] syzkaller0: entered allmulticast mode [ 346.600335][ T8706] loop2: detected capacity change from 0 to 512 [ 346.682927][ T8704] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 346.685774][ T8706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.686139][ T8706] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.741098][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.836'. [ 347.713266][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.870242][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'. [ 352.503457][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'. [ 353.324407][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 353.641780][ T25] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.688120][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.688260][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.751597][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.751636][ T25] usb 6-1: SerialNumber: syz [ 354.201070][ T8772] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 354.216811][ T8772] bridge0: port 3(syz_tun) entered disabled state [ 354.228217][ T8772] syz_tun: left allmulticast mode [ 354.228776][ T8772] bridge0: port 3(syz_tun) entered disabled state [ 354.852612][ T8772] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 354.857869][ T146] bond0: (slave bond_slave_0): interface is now down [ 354.857957][ T146] bond0: (slave bond_slave_1): interface is now down [ 354.857995][ T146] bond0: (slave syz_tun): interface is now down [ 354.885911][ T12] bond0: (slave bond_slave_0): interface is now down [ 354.885945][ T12] bond0: (slave bond_slave_1): interface is now down [ 354.885978][ T12] bond0: (slave syz_tun): interface is now down [ 354.908149][ T12] bond0: now running without any active interface! [ 355.321696][ T25] usb 6-1: 0:2 : does not exist [ 356.982092][ T25] usb 6-1: USB disconnect, device number 3 [ 357.800486][ T6286] udevd[6286]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.999067][ T30] audit: type=1800 audit(1786453873.025:7): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.866" name="file0" dev="overlay" ino=326 res=0 errno=0 [ 358.099348][ T8812] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 358.118065][ T8812] syz_tun: entered promiscuous mode [ 358.206711][ T8817] netlink: 108 bytes leftover after parsing attributes in process `syz.1.872'. [ 358.246188][ T8812] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 360.754545][ T8842] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 363.305242][ T8869] ALSA: mixer_oss: invalid OSS volume 'sit0' [ 364.419397][ ** replaying previous printk message ** [ 364.419397][ T8881] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 364.571203][ T8886] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 364.572199][ T8887] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 364.687693][ T8887] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 364.696279][ T8887] CPU: 1 UID: 0 PID: 8887 Comm: syz.4.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.707095][ T8887] Tainted: [L]=SOFTLOCKUP [ 364.711487][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.721676][ T8887] RIP: 0010:subdev_open+0x1bc/0x430 [ 364.727162][ T8887] Code: 83 7d 00 00 0f 84 aa 00 00 00 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 0f 01 2a fa 49 8b 1c 24 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 f6 00 2a fa 4c 8b 2b 4d 85 ed 74 7b [ 364.746838][ T8887] RSP: 0018:ffffc900076378b0 EFLAGS: 00010246 [ 364.752993][ T8887] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 364.761008][ T8887] RDX: 0000000000000000 RSI: ffffffff8e25543f RDI: 00000000ffffffff [ 364.769245][ T8887] RBP: dffffc0000000000 R08: ffffffff9058fd7f R09: 1ffffffff20b1faf [ 364.777260][ T8887] R10: dffffc0000000000 R11: fffffbfff20b1fb0 R12: ffff88802cb0c020 [ 364.785285][ T8887] R13: ffff88802caf23d0 R14: ffff888059fc8c00 R15: ffff88807fedb340 [ 364.793343][ T8887] FS: 00007f2dbc1236c0(0000) GS:ffff88812500d000(0000) knlGS:0000000000000000 [ 364.802315][ T8887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.808945][ T8887] CR2: 0000200000000080 CR3: 0000000059f34000 CR4: 00000000003526f0 [ 364.816974][ T8887] Call Trace: [ 364.820387][ T8887] [ 364.823461][ T8887] v4l2_open+0x1bc/0x3a0 [ 364.827843][ T8887] chrdev_open+0x4d9/0x600 [ 364.832372][ T8887] ? __pfx_chrdev_open+0x10/0x10 [ 364.837378][ T8887] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 364.844495][ T8887] ? __pfx_chrdev_open+0x10/0x10 [ 364.849485][ T8887] do_dentry_open+0x816/0x1380 [ 364.854344][ T8887] vfs_open+0x3b/0x340 [ 364.858463][ T8887] ? path_openat+0x1428/0x1d60 [ 364.863274][ T8887] path_openat+0x1443/0x1d60 [ 364.867927][ T8887] do_file_open+0x23e/0x4a0 [ 364.872481][ T8887] ? __pfx_do_file_open+0x10/0x10 [ 364.877557][ T8887] ? _raw_spin_unlock+0x28/0x50 [ 364.882600][ T8887] ? alloc_fd+0x651/0x6c0 [ 364.887005][ T8887] do_sys_openat2+0x115/0x200 [ 364.891734][ T8887] ? __se_sys_futex+0x3a8/0x450 [ 364.896734][ T8887] ? __pfx_do_sys_openat2+0x10/0x10 [ 364.901988][ T8887] ? rcu_is_watching+0x15/0xb0 [ 364.906846][ T8887] __x64_sys_openat+0x138/0x170 [ 364.911777][ T8887] do_syscall_64+0x166/0x510 [ 364.916496][ T8887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.922633][ T8887] ? clear_bhb_loop+0x70/0xc0 [ 364.927367][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.933339][ T8887] RIP: 0033:0x7f2dbb15e90e [ 364.937815][ T8887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.957472][ T8887] RSP: 002b:00007f2dbc122b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.966021][ T8887] RAX: ffffffffffffffda RBX: 00007f2dbc1236c0 RCX: 00007f2dbb15e90e [ 364.974045][ T8887] RDX: 0000000000000000 RSI: 00007f2dbc122c00 RDI: ffffffffffffff9c [ 364.982071][ T8887] RBP: 00007f2dbc122c00 R08: 0000000000000000 R09: 0000000000000000 [ 364.990085][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 364.998100][ T8887] R13: 00007f2dbb426128 R14: 00007f2dbb426090 R15: 00007fff8af654d8 [ 365.006387][ T8887] [ 365.009550][ T8887] Modules linked in: [ 365.014158][ T8887] ---[ end trace 0000000000000000 ]--- [ 365.023066][ T8886] binder: 8882:8886 ioctl c0306201 0 returned -14 [ 365.086789][ T8889] binder: 8882:8889 ioctl c0306201 200000000040 returned -22 [ 365.537588][ ** replaying previous printk message ** [ 365.537588][ T8887] RIP: 0010:subdev_open+0x1bc/0x430 [ 365.537651][ T8887] Code: 83 7d 00 00 0f 84 aa 00 00 00 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 0f 01 2a fa 49 8b 1c 24 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 f6 00 2a fa 4c 8b 2b 4d 85 ed 74 7b [ 365.538412][ T8887] RSP: 0018:ffffc900076378b0 EFLAGS: 00010246 [ 365.538486][ T8887] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 365.538520][ T8887] RDX: 0000000000000000 RSI: ffffffff8e25543f RDI: 00000000ffffffff [ 365.538563][ T8887] RBP: dffffc0000000000 R08: ffffffff9058fd7f R09: 1ffffffff20b1faf [ 365.538614][ T8887] R10: dffffc0000000000 R11: fffffbfff20b1fb0 R12: ffff88802cb0c020 [ 365.538658][ T8887] R13: ffff88802caf23d0 R14: ffff888059fc8c00 R15: ffff88807fedb340 [ 365.538707][ T8887] FS: 00007f2dbc1236c0(0000) GS:ffff88812500d000(0000) knlGS:0000000000000000 [ 365.538759][ T8887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.538800][ T8887] CR2: 00007f6b02fef2f8 CR3: 0000000059f34000 CR4: 00000000003526f0 [ 365.538946][ T8887] Kernel panic - not syncing: Fatal exception [ 365.646177][ T8887] Kernel Offset: disabled [ 365.650551][ T8887] Rebooting in 86400 seconds..