last executing test programs: 2m27.049066282s ago: executing program 1 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 2m25.253286578s ago: executing program 1 (id=125): syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202f25d16876185782d8918b263b57fcb8a1c611b"], 0x0) statfs(0x0, 0x0) 2m22.025003708s ago: executing program 1 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000140)=0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c920"], 0x17) 2m20.18913603s ago: executing program 1 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000003b7030000100000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r3, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x3}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[], 0x0) 2m19.802045278s ago: executing program 1 (id=141): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r2, 0x29, 0x1e, &(0x7f0000fcb000), 0x4) listen(r1, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x40000) r7 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r7, 0x0, 0x0, 0x40010162, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) 2m18.262390905s ago: executing program 1 (id=145): open(0x0, 0x2a4c0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 2m2.956509047s ago: executing program 32 (id=145): open(0x0, 0x2a4c0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 39.240542309s ago: executing program 5 (id=407): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$nl80211(0x0, r0) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) 38.206875228s ago: executing program 5 (id=411): syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x100, 0x0, 0x4}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) 37.129769223s ago: executing program 5 (id=414): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x12, r0, 0x2, &(0x7f0000000140)={0x0}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0xf) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) close(0x3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRESDEC=r4, @ANYBLOB="442074f6b6e4369d2b81d87a", @ANYRESHEX=r4], 0xe8}}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) 35.65768698s ago: executing program 5 (id=417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000b40), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 35.287868355s ago: executing program 5 (id=419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(r1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x80) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000300)) 25.109099683s ago: executing program 5 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.361430441s ago: executing program 33 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.459174082s ago: executing program 2 (id=460): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) fcntl$addseals(r1, 0x409, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x14d801, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) connect$l2tp6(r7, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 11.760345322s ago: executing program 0 (id=468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) setgroups(0x0, 0x0) 11.690766472s ago: executing program 2 (id=469): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000780)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x1, 0x152f, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 10.867036339s ago: executing program 0 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000027c0)=ANY=[@ANYBLOB="38010000fe00002b094b5626245e5f82390ebe6263639c49f0a5c6a850a4"], 0x138) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x48, r7, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}]}, 0x48}, 0x1, 0xffffffff00000003}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.555553183s ago: executing program 2 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0xfffffffc}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x4, 0x4}, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x3, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x8000, 0xffff, 0x2, 0x9, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x9b55, 0x4, 0xd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x1, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0xbac, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x7, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0xfffc, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x3, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) read$FUSE(r5, 0x0, 0x0) write$char_usb(r6, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 9.506939317s ago: executing program 0 (id=474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x20, 0x1402, 0x2, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}}, 0x880) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5, 0xd, "d656c9a61490b7e8773ca55437"}, &(0x7f0000000180)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.653157623s ago: executing program 4 (id=476): pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) 7.535472113s ago: executing program 4 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x32}, 0x28) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}, {0x0}], 0x2}}], 0x1, 0x0) 6.357713692s ago: executing program 4 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000103000000000000000000020000002400028014000180080001"], 0x38}}, 0x0) 6.202146761s ago: executing program 4 (id=480): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000ec0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2, 0x0, 0x8}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0x10) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0xa2, 0x7, 0x32314d48, 0x8, 0xa592, 0x6, 0x9, 0x7, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0xa, 0x0]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@multicast1, @in6=@loopback, @in=@broadcast, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@empty, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.528110508s ago: executing program 3 (id=481): syz_mount_image$exfat(&(0x7f0000000880), &(0x7f00000000c0)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0xf9, 0x150b, &(0x7f0000004280)="$eJzs3Am4jlX3MPC19t43x8nwJJnvtdfNkwybJAklyZAkSUjmhCRJkiRxyJSEJGQ8ScYTkimddMzzkDnp5JUkSUhIsr/rNHz+vcPX+75//8/7fWf9ruu+7OW+177XPut6zj1c13m+6T6iZpNa1RoyM/w79O8D/PWfJABIAIDBAJALAAIAKJ+7fO6M/dk0Jv1bJxH/QxrNutIViCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITK1lAJXy5Z5N3n///849d9Jlut/poD/aIf0//83+l86WvqfuUn/Mzfpf+Ym/c/MgitdgLjC5POfuUn/hcjULvs75Q3nrvQ7bdn+hU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPi/4Jy/xADA7+MrXZcQQgghhBBCCCEuH//ula5ACCGEEEIIIYQQ//MQFGgwEEAWyAoJkA0S4SrIDjkgJ+SCGFwNueEayAPXQl7IB/mhABSEQlAYQiCwwBBBESgKcbgOisH1UBxKQEkoBQ5KQxm4AcrCjVDO9wGAm6EC3AIVodIv58xwO1SFO6Aa3AnVoQbUhFpwF9SGu6EO3AN14V6oB/dBfbgfGsAD0BAaQWN4EJrAQ9AUmkFzaAEtoRW0/pP85Fx/L/956AUvQG/oA0nQF/rBi9AfBsBAGASD4SUYAi/DUHgFhsFwGAGvwkh4DUbB6zAaxsBYeAPGwXiYABNhEkyGZHgTpsBbMBXefigHTIcZMBNmwWxIgXdgDsyFefAuzIf3YAEkZ1sEi2EJvA9L4QNIhQ9hGXwEabAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVt8DFshx2wE3bBbtgDe+ET2Aefwn74DNLx838x/+wf86EHAgIqVGjQYBbMggmYgImYiNkxO+bEnBjDGObG3JgH82BezIv5MT8mYUEsjIWRkJCRsQgWwTjGsRgWw+JYHEtiSXTosAyWwbJ4I5bDclgey2MFrIAVsRJWwlvxVqyCVbAqVsVqWA2rY3WsiTXxLrwL78Y6WAfrYl2sh/WwPtbHBtgAG2JDbIyNsQk2wabYFJtjc2yJLbE1tsY22AbbYltsj+2xA3bAjtgRO2En7IydsQt2wa7YFbthN+yO3bEHPofP4fP4PL6AL2AfrK76Yj/sh/2xPw7EQTgIX8Ih+DK+jK/gMByOI/BVfBVfw1F4BkfjGByLY7GKGo8TcCKymozJmIxZYQpOxak4DafjdJyJs3A2pmAKzsG5OBffxfn4Hr6HC3EhLsYluASX4geYiqm4DM9iGi7HFbgSV+FqXIVrcR2uxQ24ETfgZtyMW3Erfowf4w7cgbtwF+7BPfgJfoKf4qc4DNMxHQ/gATyIB/EQHsLDeBiP4BE8ikfxGB7D43gcT+BJPIUn8TSexjN4Fs8BwHk8jxfwAl7EixkffpXBKKOyqCwqQSWoRJWosqvsKqfKqWIqpnKr3CqPyqPyqrwqv8qvCqqCqrAqrEiRYhWpIqqIiqu4KqaKqeKquCqpSiqnnCqjyqiyqqwqp8qp8upmVUHdoiqqSqqdu1Xdqqqo9q6qukNVU9VUdVVD1VS1VC1VW9VWdVQdVVfVVfVUPVVf3a8aqL44EBupjM40UcOxqRqBzVUL1VK1Uq/hw6qNGoVtVTvVXj2qxuBo7KjauE7qCdVZTcAu6ik1EZ9W3dRk7K6eVT3Uc6qnel71Um1db9VHTcvaV/VTM7G/GqAGqkFqDtZQGR2rqV5Rz2cdrkaoV9VifE2NUq+r0WqMGqveUOPUeDVBTVST1GSVrN5UU9Rbaqp6W01T09UMNVPNUrNVinpHzVFz1Tz1rpqv3lML1EK1SC1WS9T7aqn6QKWqD9Uy9ZFKU8vVCrVSrVKr1Rq1Vq1T69UGtVFtUpvVFrVVbVMfq+1qh9qpdqndao/aqz5R+9Snar/6TKWrz9UB9Rd1UH2hDqkv1WH1lTqivlZH1TfqmPpWHVffqRPqpDqlvlen1Q/qjDqrzqkf1Xn1k7qgflYXlVegUSuttdGBzqKz6gSdTSfqq3R2nUPn1Ll0TF+tc+trdB59rc6r8+n8poAuqAvpwjrUpK1mHekiuqiO6+t0MX29Lq5L6JK6lHa6tC6jb9Bl9Y26nL5Jl9c36wr6Fl1RV9KVPejbdBV9u66q79DV9J26uq6ha+pa+i5dW9+t6+h7dF19r66n79P19f26gX5AN9SNdGP9oG6iH9JNdTPdXLfQLXUr3Vo/rNvoR3Rb3U6314/qDvox3VE/rjvpJ3Rn/aTuop/SXfXTupt+RnfXz+oe+jndU/+sL2qve+s+Okn31f30i7q/HqAH6kF6sH5JD9Ev66H6FT1MD9cj9Kt6pH5Nj9Kv69F6jB6r39Dj9Hg9QU/Uk/Rknazf1FP0W3qqfltP09P1DD1Tz9Kz9cDfZpr3T+S/9Xfyh/5y9q16m/5Yb9c79E69S+/We/RevVfv0/v0fr1fp+t0fUAf0Af1QX1IH9KH9WF9RB/RR/VRfUwf08f1cX1Cn9Q/6u/1af2DPqPP6rP6R31en9cXfvsZgEGjjDbGBCaLyWoSTDaTaK4y2U0Ok9PkMjFztcltrjF5zLUmr8ln8psCpqApZAqb0JCxhk1kipiiJm6uM8XM9aa4KWFKmlLGmdKmjLnhv53/Z/W1Nq1NG9PGtDVtTXvT3nQwHUxH09F0Mp1MZ9PZdDFdTFfT1XQz3Ux30930MD1MT9PT9DK9TG/T2ySZJNPPvGj6mwFmoBlkBpuXzBAzxAw1Q80wM8yMMCPMSDPSjDKjzGgz2ow1Y804M85MMBPMJDPJJPtcZoqZYqaaqWaamWZmDM5lZplZJsWkmDlmjpln5pn5Zr5ZYBaYRWaRWWKWmKVmqUk1qWaZWWbSzHKz3Kw0K81qs9qsNWvNerPebDQbzWaz2aSZbWab2W62m51mp9ltdpu9Zq/ZZ/aZ/Wa/STfp5oA5YA6ag+aQOWQOm8PmiDlijpqj5pg5Zo6b4+aEOWFOmVPmtDltzpgz5pw5Z86b8+aCuWAumosZt32BClRgAhNkCbIECUFCkBgkBtmD7EHOIGcQC2JB7iB3kCe4Nsgb5AvyBwWCgkGhoHAQBhTYgIMoKBIUDeLBdUGx4PqgeFAiKBmUClxQOigT3BCUDW4MygU3BeWDm4MKwS1BxaBSUDm4NbgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw6BR0Dh4MGgSPBQ0DZoFzYMWQcugVdD6ss7v/Zl8j7jeYZ8wKewb9gtfDPuHA8KB4aBwcPhSOCR8ORwavhIOC4eHI8JXw5Hha+Go8PVwdDgmHBu+EY4Lx4cTwonhpHBymBy+GU4J3wqnhm+H08Lp4YxgZjgrnB2mhO+Ec8K54bzw3XB++F64IFwYLgoXh/jrLTGkhh+Gy8KPwrRwebgiXBmuCleHa8K14bpwfbgh3BhuCjeXH/LroeH2cEe4M9wV7g73hHvDT8J94afh/vCzMD38PDwQ/iU8GH4RHgq/DA+HX4VHwq/Do+E34bHw2/B4+F14IjwZngq/D0+HP4RnwrPhufDH8Hz4U3gh/Dm8GPqMm/uMyzsZMpSFslACJVAiJVJ2yk45KSfFKEa5KTfloTyUl/JSfspPBakgFabClIGJqQgVoTjFqRgVo+JUnEpSSXLkqAyVobJUlspROSpP5akCVaCKVJEqU2W6jW6j2+l2uoPuoDvpTqpBNagW1aLaVJvqUB2qS3WpHtWj+lSfGlADakgNqTE1pibUhJpSU2pOzakltaTW1JraUBtqS22pPbWnDtSBOlJH6kSdqDN1pi7UhbpSV+pG3ag7dace1IN6Uk/qRb2oN/WmJEqiftSP+lN/GkgDaTANpiE0hIbSUBpGw2gEjaCRNJJG0SgaTWNoLL1B42g8TaCJNIkmUzIl0xSaQlNpKk2jaTSDZtAsmkUplEJzaA7No3k0n+bTAlpAi2gRLaEltJSWUiql0jJaRmmURitoBa2iVbSG1tA6WkcbaANtok20hbbQNtpG22k77aSdtJt2017aS/toH+2n/ZRO6XSADiDSQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtEpOk2n6QydoXN0js7TT3SBfqaL5CnBZrOJ9iqb3eawOW0u+9dxflvAFrSFbGEb2rw23x9istYWtyVsSVvKOlvalrE3/E1c0Vayle2t9jZbxd5uq9qKNhv817i2vdvWsffYuvZeW8ve9Ye4nr3P1rcP2Qa2mW1oW9jGtpVtYh+yTW0z29y2sC1tK9vBPmY72sdtJ/uE7Wyf/Jt4qf3ArrPr7Qa70e6zn9pz9kd71H5jz9ufbG/bxw62L9kh9mU71L5ih9nhf4wB7Fj7hh1nx9sJdqKdZCf/TTzDzrSz7GybYt+xc+zcv4mX2PftfJtqF9iFdpFd/EucUVOq/dAusx/ZNLvcrrAr7Sq72q6xa/93rSvtZrvFbrV77Sd2u91hd9pddrfd80ucsY799jObbj+3R+zX9qD9wh6yx+xh+9Uvccb6jtlv7XH7nT1hT9pT9nt72v5gz9izv6w/Y+3f25/tRestMLJizYYDzsJZOYGzcSJfxdk5B+fkXBzjqzk3X8N5+FrOy/k4PxfgglyIC3PIxJaZIy7CRTnO13Exvp6LcwkuyaXYcWkuwzdwWb6Ry/FNXJ5v5gp8C1fkSlyZb+XbuArfzlX5Dq7Gd3J1rsE1uRbfxbX5bq7D93Bdvpfr8X1cn+/nBvwAN+RG3Jgf5Cb8EDflZtycW3BLbsWt+WFuw49wW27H7flR7sCPcUd+nDvxE9yZn+Qu/BR35ae5Gz/D3flZ7sHPcU9+nnvxC9yb+3AS9+V+/CL35wE8kAfxYH6Jh/DLPJRf4WE8nEfwqzySX+NR/DqP5jE8lt/gcTyeJ/BEnsSTOZnfbDeF3+Kp/DZP4+k8g2fyLJ7NKfwOz+G5PI/f5fn8Hi/ghbyIF/MSfp+XXvScyh/yMv6I03g5r+CVvIpX8xpey+t4PW/gjbyJN/MW3srb+GPezjt4J+/i3byH9/InvI8/5f38Gafz53yA/8IH+Qs+xF/yYf6Kj/DXfJS/4WP8LR/n7/gEn+RT/D2f5h/4DJ/lc/wjn+ef+AL/zBfZM0QYqUhHJgqiLFHWKCHKFiVGV0XZoxxRzihXFIuujnJH10R5omujvFG+KH9UICoYFYoKR2FEkY04iqIiUdEoHl0XFYuuj4pHJaKSUanIRaWjMtENUdnoxqhcdFNUPro5qhDdElWMKkWVo1uj26Iq0e1R1eiOqFp0Z1Q9qhHVjGpFd0W1o7ujOtE9Ud3o3qhcdF9UP7o/ahA9EDWMGkWNowejJtFDUdOoWdQ8ahG1jFpFraOHozbRI1HbqF3UPno06hA9FnWMHo86RU9EnaMnL+0vEfx6Nf2r/UlR30j/9obsHr0ovji+JP5+fGn8g3hq/MP4svhH8bT48viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viW+Na497WygsOMB2EwLnBZXFaX4LK5RHeVy+5yuJwul4u5q11ud43L4651eV0+l98VcAVdIVfYhY6cdewiV8QVdXF3nSvmrnfFXQlX0pVyzpV2ZVwr19q1dm3cI66ta+fau0fdo+4x95h7POG3wl0X95Tr6p523dwz7hn3rOvhnnM93fOul3vB9XZ9XJJLcv1cP9ff9XcD3UA32A12Q9wQN9QNdcPcMDfCjXAj3Ug3yo1yo91oN9aNdePcODfBTXCT3CSX7JLdFDfFTXVT3TQ3zc1wM9wsN8uluBQ3x81x89w8N9/NdwvcArfILXJL3BK31C11qS7VLXPLXJpLcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XfpLt0dcAfcQXfQHXJfusPuK3fEfe2Oum/cMfetO+6+cyfcSXfKeX3a/eDOuLPunPvRnXc/uQvuZ3fReZccezM2JfZWbGrs7di02PTYjNjM2KzY7FhK7J3YnNjc2LzYu7H5uSC2ILYwtiiA2JLY+7GlsQ9iqbEPY8tiH8XSYstjK2IrY6tiq2PeF9oe+SK+qI/763wxf70v7kv4kr6Ud760L+Nv8GX9jb6cv8mX9zf7Cv4WX9FX8pV9M9/ct/AtfSvf2j/s2/hHfFvfzrf3j/oO/jHf0T/uO/knfGf/pO/in/Jd/dO+m3/Gd/fPvvdbl30v/4Lv7fv4JN/X9/Mv+v5+gB/oB/nB/iU/xL/sh/pX/DA/3I/wr/qR/jU/yr/uR/sxfqx/w4/z4/0EP9FP8pN9sn/TT/Fv+an+bT/NT/cz/Ew/y8/2Kf4dP8fP9fP8u36+f88v8Av9Ir/YL/Hv+6X+A5/qP/TL/Ec+zS/3K/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81/7Lf7HX6n3+V3+z1+r//E7/Of+v3+M5/uP/cH/F/8Qf+FP+S/9If9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lflL9ZE0IIIYT4p+g/2d/37/yf+m3L0A8AcuwocPiv59yU99fxALWvcwwAnujTvdHvW6NGSUlJvx2b1gaCogsBIHYp/5fvH/gtXg7t4THoBO2g7N+tb4Cq/Mt93z+cX0MQvxkgESDb7zkZj0eJ8Nfz3/gP5m/2Pv/Z/AsBihe9lJNxot/jS/OX+wfz7+nwJ/Nn+yIZoO1/yckOl+JL85eBR+BJ6PSHI4UQQgghhBBCiF8NUOd7/NnzbcbzeUFzKScrXIr/7Pn8T1S9HGsQQgghhBBCCCHE/9nTz/V8/OFOndp1vSyDtgBwWSe8PIOs/xll/AcMEAD+A8qQwX/+4Er/ZhJCCCGEEEJcbpdu+q90JUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghROb1739DmPqnD77SaxRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGutP8VAAD//6cPVPA=") syz_open_dev$char_usb(0xc, 0xb4, 0x7) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r1, r1, 0x0, 0x80000000) 5.253955572s ago: executing program 4 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000080)={[{@gqnoenforce}, {@uquota}, {@sysvgroups}, {@inode64}, {@gqnoenforce}]}, 0x1, 0xb919, &(0x7f0000001440)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed3) setxattr$system_posix_acl(&(0x7f0000002240)='./file1\x00', &(0x7f00000022c0)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000500000000000400060000000000100002000000000020"], 0x24, 0x3) 4.997076056s ago: executing program 3 (id=483): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x100, 0x0, 0x4}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) 4.433103833s ago: executing program 4 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.344709606s ago: executing program 2 (id=485): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.22175326s ago: executing program 3 (id=486): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) accept4(r4, 0x0, 0x0, 0x80800) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0xa0044d07, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000)=""/255, 0xff, 0x40000003, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYRES8=r4, @ANYRES16=r7, @ANYBLOB="01000000000000000000210000000e0001006e657464654a730a00000000000000006e65746478767369764b0000000000006c325f64726f7073000000000500830000000000"], 0x4c}}, 0x10040) dup(r0) lsetxattr$security_capability(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', &(0x7f0000000180), &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x4}, {0x4, 0x1bf}]}, 0x14, 0x1) 4.121090733s ago: executing program 0 (id=487): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x12, r0, 0x2, &(0x7f0000000140)={0x0}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)="206477bfe8c4ff82004ccc8a278d0719648f734f45e7f663fc51ffd5720344ce349d56f2be60ccc6eb88c1bcf11e51b0bcfcb094f08d320e7369a056641158e9ea75075c41768b9a965ba4f1e1b7e28b81c136ed4a872b8c5353a989f1", 0x5d, 0x8000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"a2e3ad9bed0d52f91b30330887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3365959bfc9a240d2567f3988f7ef31952013fffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e0900000000000000a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c147ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5b0a4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c900c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d7a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e55d0e6e00", 0x1000}}, 0x1006) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r7, 0x13a}, {r7, 0x26}], 0x2, 0x0, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRESDEC=r4, @ANYBLOB="442074f6b6e4369d2b81d87a", @ANYRESHEX=r4], 0xe8}}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) 3.164562912s ago: executing program 3 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x32}, 0x28) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}, {0x0}], 0x2}}], 0x2, 0x0) 2.160727932s ago: executing program 0 (id=489): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) 2.135149764s ago: executing program 3 (id=490): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x10001, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6], 0x8080000, 0xe340}) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000300)=@attr_pmu_init) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.07611531s ago: executing program 2 (id=491): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0xbc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20048800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000180)={'c', ' *:* ', 'rw\x00'}, 0x9) 1.07527221s ago: executing program 0 (id=492): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c02124085010203010902040c0202c17f0c"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 876.918632ms ago: executing program 3 (id=493): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x707b, 0x40, 0x204, 0x386}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x6}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) shutdown(0xffffffffffffffff, 0x1) mkdir(0x0, 0x0) 0s ago: executing program 2 (id=494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0xfffffffc}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x4, 0x4}, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x3, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x8000, 0xffff, 0x2, 0x9, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x9b55, 0x4, 0xd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x1, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0xbac, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x7, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0xfffc, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x3, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) read$FUSE(r5, 0x0, 0x0) write$char_usb(r6, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 87.231851][ T5850] cgroup: Unknown subsys name 'net' [ 87.341814][ T5850] cgroup: Unknown subsys name 'cpuset' [ 87.351495][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.012427][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.990138][ T981] cfg80211: failed to load regulatory.db [ 93.021249][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.057910][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.068104][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.079723][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.107849][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.125880][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.138641][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.146401][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.154938][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.168403][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.260314][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.275868][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.283865][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.294405][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.304527][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.352951][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.361829][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.370932][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.380927][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.388731][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.396774][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.428945][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.436760][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.444557][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.452538][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.859271][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 93.992112][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 94.197112][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.204494][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.212581][ T5875] bridge_slave_0: entered allmulticast mode [ 94.221346][ T5875] bridge_slave_0: entered promiscuous mode [ 94.235453][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.242661][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.249971][ T5875] bridge_slave_1: entered allmulticast mode [ 94.257484][ T5875] bridge_slave_1: entered promiscuous mode [ 94.272004][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 94.318200][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 94.365319][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.372653][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.380510][ T5867] bridge_slave_0: entered allmulticast mode [ 94.389047][ T5867] bridge_slave_0: entered promiscuous mode [ 94.419258][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.440564][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.466308][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.473711][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.481825][ T5867] bridge_slave_1: entered allmulticast mode [ 94.489458][ T5867] bridge_slave_1: entered promiscuous mode [ 94.622178][ T5875] team0: Port device team_slave_0 added [ 94.630563][ T5875] team0: Port device team_slave_1 added [ 94.639665][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.692764][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.714560][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 94.792199][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.800004][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.807192][ T5870] bridge_slave_0: entered allmulticast mode [ 94.814771][ T5870] bridge_slave_0: entered promiscuous mode [ 94.824163][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.831475][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.858095][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.871860][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.878964][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.905199][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.954079][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.961400][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.969356][ T5870] bridge_slave_1: entered allmulticast mode [ 94.976625][ T5870] bridge_slave_1: entered promiscuous mode [ 94.993668][ T5867] team0: Port device team_slave_0 added [ 95.001000][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.008251][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.015430][ T5878] bridge_slave_0: entered allmulticast mode [ 95.023026][ T5878] bridge_slave_0: entered promiscuous mode [ 95.064649][ T5867] team0: Port device team_slave_1 added [ 95.085824][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.093294][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.101219][ T5878] bridge_slave_1: entered allmulticast mode [ 95.110247][ T5878] bridge_slave_1: entered promiscuous mode [ 95.198202][ T5868] Bluetooth: hci0: command tx timeout [ 95.202431][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.220906][ T5875] hsr_slave_0: entered promiscuous mode [ 95.227492][ T5875] hsr_slave_1: entered promiscuous mode [ 95.235003][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.242468][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.269057][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.269060][ T5868] Bluetooth: hci1: command tx timeout [ 95.282529][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.292946][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.319487][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.353981][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.363833][ T5868] Bluetooth: hci2: command tx timeout [ 95.393806][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.406891][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.508159][ T5868] Bluetooth: hci3: command tx timeout [ 95.513920][ T5870] team0: Port device team_slave_0 added [ 95.513928][ T5868] Bluetooth: hci4: command tx timeout [ 95.560555][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.568840][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.576077][ T5876] bridge_slave_0: entered allmulticast mode [ 95.583879][ T5876] bridge_slave_0: entered promiscuous mode [ 95.594997][ T5870] team0: Port device team_slave_1 added [ 95.628335][ T5867] hsr_slave_0: entered promiscuous mode [ 95.634836][ T5867] hsr_slave_1: entered promiscuous mode [ 95.641438][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 95.647256][ T5867] Cannot create hsr debugfs directory [ 95.656836][ T5878] team0: Port device team_slave_0 added [ 95.663254][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.671334][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.678785][ T5876] bridge_slave_1: entered allmulticast mode [ 95.686051][ T5876] bridge_slave_1: entered promiscuous mode [ 95.721882][ T5878] team0: Port device team_slave_1 added [ 95.781485][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.788860][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.815885][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.886298][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.893621][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.920592][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.940731][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.948636][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.975308][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.991384][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.045135][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.052389][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.079207][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.102910][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.215321][ T5876] team0: Port device team_slave_0 added [ 96.249662][ T5870] hsr_slave_0: entered promiscuous mode [ 96.256430][ T5870] hsr_slave_1: entered promiscuous mode [ 96.263259][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 96.269452][ T5870] Cannot create hsr debugfs directory [ 96.298895][ T5876] team0: Port device team_slave_1 added [ 96.334049][ T5878] hsr_slave_0: entered promiscuous mode [ 96.340849][ T5878] hsr_slave_1: entered promiscuous mode [ 96.346925][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 96.353291][ T5878] Cannot create hsr debugfs directory [ 96.423527][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.430836][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.457808][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.505120][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.512159][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.538427][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.713373][ T5876] hsr_slave_0: entered promiscuous mode [ 96.721856][ T5876] hsr_slave_1: entered promiscuous mode [ 96.728658][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 96.734442][ T5876] Cannot create hsr debugfs directory [ 96.753485][ T5875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.766555][ T5875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.780389][ T5875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.822462][ T5875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.039216][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.070408][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.137196][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.150122][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.225431][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.235916][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.250705][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.264873][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.268541][ T5183] Bluetooth: hci0: command tx timeout [ 97.348716][ T5183] Bluetooth: hci1: command tx timeout [ 97.406681][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.423101][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.430009][ T5183] Bluetooth: hci2: command tx timeout [ 97.441731][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.455086][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.587792][ T5183] Bluetooth: hci4: command tx timeout [ 97.588368][ T5868] Bluetooth: hci3: command tx timeout [ 97.610596][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.641200][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.662596][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.674102][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.702569][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.725968][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.749678][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.784384][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.791703][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.804088][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.833133][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.840336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.851165][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.858355][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.882585][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.889800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.907367][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.989860][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.028972][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.036129][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.051527][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.058750][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.096219][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.168363][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.202765][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.210000][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.261330][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.268625][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.337416][ T5878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.385022][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.511584][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.543039][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.600772][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.607993][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.654144][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.661371][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.767521][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.811237][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.071340][ T5867] veth0_vlan: entered promiscuous mode [ 99.107072][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.145050][ T5867] veth1_vlan: entered promiscuous mode [ 99.262424][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.349632][ T5868] Bluetooth: hci0: command tx timeout [ 99.351434][ T5867] veth0_macvtap: entered promiscuous mode [ 99.420700][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.436084][ T5868] Bluetooth: hci1: command tx timeout [ 99.456647][ T5867] veth1_macvtap: entered promiscuous mode [ 99.472138][ T5870] veth0_vlan: entered promiscuous mode [ 99.506211][ T5870] veth1_vlan: entered promiscuous mode [ 99.512534][ T5868] Bluetooth: hci2: command tx timeout [ 99.534207][ T5878] veth0_vlan: entered promiscuous mode [ 99.556274][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.592889][ T5875] veth0_vlan: entered promiscuous mode [ 99.604358][ T5878] veth1_vlan: entered promiscuous mode [ 99.619673][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.653768][ T5875] veth1_vlan: entered promiscuous mode [ 99.662341][ T3511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.673278][ T5868] Bluetooth: hci3: command tx timeout [ 99.679205][ T5183] Bluetooth: hci4: command tx timeout [ 99.704505][ T3511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715353][ T3511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.745343][ T5870] veth0_macvtap: entered promiscuous mode [ 99.756005][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.782330][ T5876] veth0_vlan: entered promiscuous mode [ 99.792033][ T5870] veth1_macvtap: entered promiscuous mode [ 99.873938][ T5876] veth1_vlan: entered promiscuous mode [ 99.891069][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.912576][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.921424][ T4582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.930329][ T5878] veth0_macvtap: entered promiscuous mode [ 99.944440][ T5875] veth0_macvtap: entered promiscuous mode [ 99.947041][ T4582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.980949][ T5875] veth1_macvtap: entered promiscuous mode [ 100.006032][ T5878] veth1_macvtap: entered promiscuous mode [ 100.018880][ T3511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.027950][ T3511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.037139][ T3511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.071488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.080891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.096903][ T4582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.129425][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.170195][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.186048][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.201970][ T5876] veth0_macvtap: entered promiscuous mode [ 100.215981][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.249435][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.265622][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.276610][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.302534][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.311861][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325104][ T5876] veth1_macvtap: entered promiscuous mode [ 100.394693][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.425287][ T4582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.435289][ T4582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.517224][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.525934][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.540560][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.581187][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.620780][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.688545][ T5957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.698971][ T5957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.834019][ T5977] Zero length message leads to an empty skb [ 100.901654][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.939490][ T5957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.986842][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.009440][ T5957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.442832][ T5868] Bluetooth: hci0: command tx timeout [ 101.471884][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.480839][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.508077][ T5868] Bluetooth: hci1: command tx timeout [ 101.615693][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.625140][ T5868] Bluetooth: hci2: command tx timeout [ 101.644776][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.747878][ T5868] Bluetooth: hci3: command tx timeout [ 101.748628][ T5183] Bluetooth: hci4: command tx timeout [ 102.537931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.546878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.556415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.565152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.622150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.761172][ T4582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.778349][ T4582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.815394][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.829856][ T5990] bpq0: entered allmulticast mode [ 102.839418][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.543626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.698254][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.708303][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.917763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.081960][ T6002] loop1: detected capacity change from 0 to 2048 [ 104.102564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.140003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.174500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.275218][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.382812][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.494641][ T6003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.374567][ T6019] pim6reg: entered allmulticast mode [ 107.221450][ T6025] pim6reg: left allmulticast mode [ 108.953995][ T6034] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.114312][ T6046] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.847478][ T6052] loop3: detected capacity change from 0 to 2048 [ 111.090401][ T6060] loop2: detected capacity change from 0 to 164 [ 111.215263][ T6062] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.195710][ T6122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 117.202427][ T6122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.211191][ T6122] vhci_hcd vhci_hcd.0: Device attached [ 117.738278][ T5851] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 121.440245][ T6123] vhci_hcd: connection reset by peer [ 121.849152][ T49] vhci_hcd: stop threads [ 121.923268][ T49] vhci_hcd: release socket [ 122.058457][ T49] vhci_hcd: disconnect device [ 122.947823][ T5851] vhci_hcd: vhci_device speed not set [ 126.077787][ T5984] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.268021][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 127.328938][ T5984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.387749][ T5984] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 127.644556][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.545927][ T5984] usb 4-1: config 0 descriptor?? [ 128.571106][ T5984] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 128.662924][ T6211] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 128.760450][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.62'. [ 128.863111][ T6205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.418544][ T5984] gspca_vc032x: reg_r err -32 [ 129.423400][ T5984] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 129.530070][ T6211] team0: Port device geneve0 added [ 129.847215][ T6205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.425367][ T6205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.632973][ T10] usb 4-1: USB disconnect, device number 2 [ 130.938131][ T6205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.376982][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.383692][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.740344][ T4524] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.889287][ T4524] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.897573][ T4524] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.978688][ T4582] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.990112][ T6264] loop4: detected capacity change from 0 to 512 [ 136.028768][ T6264] EXT4-fs: Ignoring removed orlov option [ 136.067014][ T6264] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 136.120188][ T6264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 136.373924][ T6264] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.77: corrupted in-inode xattr: e_value size too large [ 136.393951][ T6264] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.77: couldn't read orphan inode 15 (err -117) [ 137.127704][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.205847][ T6264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.317783][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 137.338993][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.382852][ T6277] loop2: detected capacity change from 0 to 2048 [ 137.389984][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 137.436141][ T6277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.456324][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.932234][ T10] usb 4-1: config 0 descriptor?? [ 138.338724][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 138.874260][ T10] gspca_vc032x: reg_r err -32 [ 138.880372][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 140.970728][ T981] usb 4-1: USB disconnect, device number 3 [ 143.527860][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'. [ 143.633230][ T5875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.988424][ T6334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.042980][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 145.068456][ T6335] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.078060][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.453625][ T6334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.461682][ T6346] loop0: detected capacity change from 0 to 128 [ 145.523341][ T6346] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.551699][ T6346] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.243422][ T5867] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.367892][ T6365] ptrace attach of "./syz-executor exec"[5876] was attempted by "./syz-executor exec"[6365] [ 148.122363][ T6359] comedi comedi2: reset error (fatal) [ 151.509078][ T5868] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 151.518574][ T5868] Bluetooth: hci3: Injecting HCI hardware error event [ 151.527004][ T5868] Bluetooth: hci3: hardware error 0x00 [ 154.012151][ T5868] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 154.020281][ T981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 154.020318][ T5183] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 154.207708][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 154.439013][ T981] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.449876][ T981] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.461212][ T981] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.472094][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.482092][ T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.492038][ T981] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.187841][ T981] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.196946][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.208320][ T981] usb 5-1: config 0 descriptor?? [ 155.235676][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.444442][ T981] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.453230][ T6432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.463785][ T981] usb 5-1: USB disconnect, device number 2 [ 155.474495][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 155.507465][ T10] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 155.522330][ T981] usblp0: removed [ 155.536167][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 155.562057][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.582470][ T10] usb 2-1: config 0 has no interface number 0 [ 155.597470][ T6434] loop3: detected capacity change from 0 to 2048 [ 155.621444][ T10] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 155.649539][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.694217][ T10] usb 2-1: Product: syz [ 155.728659][ T10] usb 2-1: Manufacturer: syz [ 155.733324][ T10] usb 2-1: SerialNumber: syz [ 155.916171][ T10] usb 2-1: config 0 descriptor?? [ 156.546566][ T6443] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.593818][ T6440] loop2: detected capacity change from 0 to 4096 [ 156.602731][ T10] usb 2-1: Found UVC 0.00 device syz (046c:14e0) [ 156.620902][ T10] usb 2-1: No valid video chain found. [ 156.727716][ T981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.733906][ T10] usb 2-1: USB disconnect, device number 2 [ 156.765349][ T6445] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 156.868162][ T6445] Remounting filesystem read-only [ 156.899108][ T6440] ntfs3(loop2): ino=1a, mi_enum_attr [ 156.904802][ T6440] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 157.033294][ T5876] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 157.367706][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.562712][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.706580][ T5868] Bluetooth: Frame is too long (len 18, expected len 4) [ 158.758726][ T5930] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.812473][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.865434][ T5930] usb 1-1: config 0 descriptor?? [ 159.879909][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 159.886006][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.898974][ T5930] usb 1-1: USB disconnect, device number 2 [ 160.811023][ T5930] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 160.824168][ T6474] 9pnet_fd: Insufficient options for proto=fd [ 161.360511][ T5930] usb 1-1: device not accepting address 3, error -71 [ 164.236019][ T6484] loop0: detected capacity change from 0 to 4096 [ 164.598795][ T5868] Bluetooth: Frame is too long (len 18, expected len 4) [ 164.909433][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 168.667680][ T981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.744366][ T6535] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.030384][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.041640][ T981] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.038458][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.050503][ T981] usb 5-1: config 0 descriptor?? [ 171.086946][ T981] usb 5-1: can't set config #0, error -71 [ 171.104600][ T981] usb 5-1: USB disconnect, device number 4 [ 176.337775][ T981] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 176.671586][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 178.708359][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.862158][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.877850][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.885941][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.896009][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.921718][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.930933][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.702922][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.717415][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.748606][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.804698][ T9] usb 5-1: config 0 descriptor?? [ 179.937689][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 179.986516][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 179.986552][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.991010][ T10] usb 1-1: config 0 descriptor?? [ 180.005795][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 180.079480][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 180.079631][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.092128][ T9] usb 5-1: USB disconnect, device number 5 [ 180.598537][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 180.989120][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.030947][ T5183] Bluetooth: hci5: command tx timeout [ 181.062825][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.093392][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.128963][ T9] usb 5-1: config 0 descriptor?? [ 181.137004][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 181.155395][ T9] hub 5-1:0.0: USB hub found [ 182.318124][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 182.392381][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 182.413762][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.484405][ T9] usb 5-1: USB disconnect, device number 6 [ 183.198633][ T5183] Bluetooth: hci5: command tx timeout [ 183.913624][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 184.057153][ T10] gspca_vc032x: reg_r err -71 [ 184.072255][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.083092][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.097925][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 184.116664][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.154799][ T5945] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.175374][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.205835][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.238079][ T5945] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.265514][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.278676][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.310203][ T5945] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 184.332402][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.363501][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.389889][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.403418][ T5945] usb 3-1: Product: syz [ 184.921237][ T6605] bridge_slave_0: entered allmulticast mode [ 184.929405][ T6605] bridge_slave_0: entered promiscuous mode [ 184.939104][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.946262][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.959194][ T6605] bridge_slave_1: entered allmulticast mode [ 184.966867][ T6605] bridge_slave_1: entered promiscuous mode [ 184.974035][ T5945] usb 3-1: Manufacturer: syz [ 184.979920][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.008035][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.285066][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.286501][ T5183] Bluetooth: hci5: command tx timeout [ 185.343524][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.351488][ T5945] hub 3-1:4.0: bad descriptor, ignoring hub [ 185.357457][ T5945] hub 3-1:4.0: probe with driver hub failed with error -5 [ 185.410861][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.613763][ T5945] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 186.567656][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.573927][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.579831][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.585319][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.592420][ T10] gspca_vc032x: Unknown sensor... [ 186.598070][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 186.819928][ T10] usb 1-1: USB disconnect, device number 5 [ 186.828842][ T5945] usb 3-1: USB disconnect, device number 3 [ 186.909384][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 187.377816][ T5183] Bluetooth: hci5: command tx timeout [ 188.547111][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.551935][ T5851] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 188.575725][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.591929][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.607054][ T6675] netlink: 116 bytes leftover after parsing attributes in process `syz.4.195'. [ 188.646613][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.665654][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.674063][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.729724][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.747333][ T5851] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.758201][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.776663][ T6605] team0: Port device team_slave_0 added [ 188.791669][ T5851] usb 1-1: config 0 descriptor?? [ 188.845932][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.888031][ T6605] team0: Port device team_slave_1 added [ 189.032185][ T5851] usbhid 1-1:0.0: can't add hid device: -71 [ 189.044931][ T5851] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.075557][ T5851] usb 1-1: USB disconnect, device number 6 [ 189.379550][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.403602][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.429288][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.738227][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.909971][ T5851] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 189.968604][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.994407][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.618777][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.770102][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.781275][ T5851] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.797782][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.812697][ T5851] usb 1-1: config 0 descriptor?? [ 190.825693][ T5851] hub 1-1:0.0: USB hub found [ 191.030844][ T5851] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.136127][ T6605] hsr_slave_0: entered promiscuous mode [ 191.152633][ T6605] hsr_slave_1: entered promiscuous mode [ 191.157868][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.177823][ T6605] debugfs: 'hsr0' already exists in 'hsr' [ 191.183876][ T6605] Cannot create hsr debugfs directory [ 191.221136][ T59] bridge_slave_1: left allmulticast mode [ 191.237679][ T59] bridge_slave_1: left promiscuous mode [ 191.257423][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.269454][ T5851] usbhid 1-1:0.0: can't add hid device: -71 [ 191.275552][ T5851] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 191.322074][ T59] bridge_slave_0: left allmulticast mode [ 191.328139][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 191.339769][ T59] bridge_slave_0: left promiscuous mode [ 191.346643][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.362137][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.381940][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.383109][ T5851] usb 1-1: USB disconnect, device number 7 [ 191.394297][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 191.423045][ T9] usb 5-1: Product: syz [ 191.429432][ T9] usb 5-1: Manufacturer: syz [ 191.534408][ T9] hub 5-1:4.0: bad descriptor, ignoring hub [ 191.547750][ T9] hub 5-1:4.0: probe with driver hub failed with error -5 [ 191.574775][ T9] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 193.509633][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.592599][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.659964][ T59] bond0 (unregistering): Released all slaves [ 194.029719][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 194.282137][ T6734] loop3: detected capacity change from 0 to 1024 [ 194.290754][ T5851] usb 5-1: USB disconnect, device number 7 [ 194.318290][ T6734] hfsplus: Unknown parameter 'J:*s%^̡ZZհ [ 194.318290][ T6734] hc ܤ42^RIxԙk|4w1M2O& ' [ 194.391721][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398358][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.426276][ T6732] 9pnet: Could not find request transport: fd0x0000000000000003 [ 196.939436][ T59] hsr_slave_0: left promiscuous mode [ 197.090880][ T59] hsr_slave_1: left promiscuous mode [ 197.128676][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.168477][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.199360][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.215454][ T6767] loop2: detected capacity change from 0 to 128 [ 197.428133][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.536244][ T6767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.678239][ T6767] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.704520][ T59] veth1_macvtap: left promiscuous mode [ 197.721233][ T59] veth0_macvtap: left promiscuous mode [ 197.750154][ T59] veth1_vlan: left promiscuous mode [ 197.773705][ T59] veth0_vlan: left promiscuous mode [ 197.814027][ T5878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.286498][ T6780] mmap: syz.2.221 (6780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.115070][ T6800] loop0: detected capacity change from 0 to 16 [ 200.290406][ T6800] erofs (device loop0): mounted with root inode @ nid 36. [ 200.696034][ T6800] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.736536][ T6800] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851] [ 200.753729][ T6800] erofs (device loop0): read error -117 @ 43 of nid 36 [ 200.933715][ T6807] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.942597][ T6807] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.951162][ T6807] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 200.958939][ T6807] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 200.967400][ T6807] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 200.974953][ T6807] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 200.983433][ T6807] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 200.991009][ T6807] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 200.998619][ T6807] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 201.007663][ T6807] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 201.017194][ T6807] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 201.025761][ T6807] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 201.037165][ T6807] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 201.044937][ T6807] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 201.053249][ T6807] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 201.063456][ T6807] syz.0.227: attempt to access beyond end of device [ 201.063456][ T6807] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 201.163519][ T6807] syz.0.227: attempt to access beyond end of device [ 201.163519][ T6807] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 201.178749][ T6807] syz.0.227: attempt to access beyond end of device [ 201.178749][ T6807] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 201.200855][ T6807] erofs (device loop0): failed to decompress -29 in[58, 4038] out[2639] [ 201.210422][ T6807] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 201.218910][ T6807] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 201.226386][ T6807] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 201.235897][ T6807] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 201.244756][ T6807] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 201.253112][ T6807] syz.0.227: attempt to access beyond end of device [ 201.253112][ T6807] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 201.280687][ T6807] erofs (device loop0): failed to decompress -29 in[58, 4038] out[3537] [ 202.001518][ T6811] loop0: detected capacity change from 0 to 512 [ 202.019422][ T6811] EXT4-fs: Ignoring removed i_version option [ 202.041853][ T6811] EXT4-fs: Ignoring removed nobh option [ 202.086797][ T6811] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 202.100790][ T6811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.122354][ T6811] EXT4-fs (loop0): 1 truncate cleaned up [ 202.129979][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.198882][ T59] team0 (unregistering): Port device team_slave_1 removed [ 202.250232][ T59] team0 (unregistering): Port device team_slave_0 removed [ 202.287215][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.181191][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 203.366150][ T6824] input: syz1 as /devices/virtual/input/input5 [ 204.603209][ T6605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.727030][ T6605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.814532][ T6605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.067162][ T6605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.419442][ T6849] binder: 6833:6849 ioctl c0306201 2000000003c0 returned -14 [ 206.678087][ T6850] bpq0: left allmulticast mode [ 206.773401][ T6860] trusted_key: syz.3.239 sent an empty control message without MSG_MORE. [ 207.603216][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.661241][ T6863] 9pnet: Could not find request transport: fd0x0000000000000003 [ 208.232489][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.293654][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.301613][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.451813][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.459042][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.567908][ T6889] bpq0: entered allmulticast mode [ 211.008176][ T6906] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 211.026395][ T6906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.250'. [ 211.229766][ T6909] loop3: detected capacity change from 0 to 256 [ 211.255243][ T6903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.121787][ T6909] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 213.509186][ T6906] team0: Port device geneve0 added [ 213.688595][ T6911] bpq0: left allmulticast mode [ 213.971934][ T6903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.115731][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.503936][ T6903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.593878][ T6942] loop0: detected capacity change from 0 to 128 [ 214.666374][ T6942] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.715186][ T6942] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.751259][ T6941] bpq0: entered allmulticast mode [ 214.973800][ T6903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.201578][ T5867] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.453221][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.491836][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.620874][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.638672][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.717018][ T6605] veth0_vlan: entered promiscuous mode [ 215.766849][ T6605] veth1_vlan: entered promiscuous mode [ 215.849404][ T5942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 215.895693][ T6605] veth0_macvtap: entered promiscuous mode [ 215.915197][ T6605] veth1_macvtap: entered promiscuous mode [ 215.990540][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.010652][ T6971] 9pnet_fd: Insufficient options for proto=fd [ 216.050651][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 216.053422][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.058700][ T5942] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.094529][ T5942] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.185381][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.199894][ T5942] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 216.222216][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.227649][ T5942] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 216.278723][ T6030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.296733][ T5942] usb 3-1: Product: syz [ 216.313259][ T5942] usb 3-1: Manufacturer: syz [ 216.324308][ T6030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.346576][ T5942] hub 3-1:4.0: USB hub found [ 216.586212][ T5942] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 217.013491][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 217.410192][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.088240][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.018985][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.077893][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.100739][ T6999] tipc: Started in network mode [ 219.118849][ T6999] tipc: Node identity 26fdad59e5bc, cluster identity 4711 [ 219.126352][ T6999] tipc: Enabled bearer , priority 0 [ 219.148120][ T5942] usb 3-1: USB disconnect, device number 4 [ 219.194622][ T7004] syzkaller0: entered promiscuous mode [ 219.218562][ T7004] syzkaller0: entered allmulticast mode [ 219.328388][ T7004] tipc: Resetting bearer [ 219.630892][ T6998] tipc: Resetting bearer [ 219.732094][ T7010] binder: 7006:7010 ioctl c0306201 2000000003c0 returned -14 [ 220.209445][ T981] tipc: Node number set to 3275861337 [ 220.408703][ T6998] tipc: Disabling bearer [ 220.874220][ T7026] binder: 7014:7026 ioctl c0306201 2000000003c0 returned -14 [ 222.404068][ T7038] 9pnet_fd: Insufficient options for proto=fd [ 222.581414][ T7040] bpq0: left allmulticast mode [ 223.854779][ T7054] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 223.865622][ T7054] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 224.451486][ T7049] loop4: detected capacity change from 0 to 4096 [ 225.098482][ T7059] ipvlan2: entered promiscuous mode [ 225.240113][ T7059] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.497870][ T7059] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.485775][ T7082] binder: 7073:7082 ioctl c0306201 2000000003c0 returned -14 [ 226.942450][ T7081] 9pnet_fd: Insufficient options for proto=fd [ 227.868435][ T7095] loop4: detected capacity change from 0 to 16 [ 228.055712][ T7095] erofs (device loop4): mounted with root inode @ nid 36. [ 228.159097][ T7095] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 228.206583][ T7095] erofs (device loop4): failed to decompress -29 in[58, 4038] out[1851] [ 228.227723][ T7095] erofs (device loop4): read error -117 @ 43 of nid 36 [ 231.708345][ T7135] 9pnet_fd: Insufficient options for proto=fd [ 234.182202][ T7179] Bluetooth: MGMT ver 1.23 [ 234.921093][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.962525][ T7177] bond0: (slave rose0): Enslaving as an active interface with an up link [ 235.698257][ T7189] 9pnet_fd: Insufficient options for proto=fd [ 236.227892][ T5183] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 236.870603][ T7187] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 239.150383][ T7229] loop5: detected capacity change from 0 to 32768 [ 239.215339][ T7229] find_entry called with index >= next_index [ 239.332301][ T5183] Bluetooth: hci5: link tx timeout [ 239.338294][ T5183] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.352879][ T5183] Bluetooth: hci5: link tx timeout [ 239.557784][ T5183] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.566002][ T5183] Bluetooth: hci5: link tx timeout [ 239.571364][ T5183] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 240.460977][ T7242] read_mapping_page failed! [ 241.407833][ T7264] hugetlbfs: syz.4.340 (7264): Using mlock ulimits for SHM_HUGETLB is obsolete [ 241.598924][ T5183] Bluetooth: hci5: command 0x0406 tx timeout [ 242.027473][ T7259] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 244.024888][ T7292] loop4: detected capacity change from 0 to 128 [ 244.228642][ T7292] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.416642][ T7292] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.397693][ T5875] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.528791][ T7311] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.006327][ T10] IPVS: starting estimator thread 0... [ 247.108453][ T7320] IPVS: using max 36 ests per chain, 86400 per kthread [ 248.563366][ T7342] loop3: detected capacity change from 0 to 4096 [ 252.112724][ T7412] loop5: detected capacity change from 0 to 4096 [ 253.431801][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 255.128429][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.386'. [ 255.139345][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.386'. [ 255.854556][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865758][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.403236][ T7469] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 256.515292][ T7474] loop3: detected capacity change from 0 to 4096 [ 260.963406][ T7534] loop2: detected capacity change from 0 to 1024 [ 260.984891][ T7531] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 261.159078][ T7542] Invalid source name [ 261.366245][ T7542] UBIFS error (pid: 7542): cannot open "./file0", error -22 [ 261.464585][ T7549] Device name cannot be null; rc = [-22] [ 261.484291][ T7549] hfsplus: bad catalog entry type [ 261.954724][ T59] hfsplus: b-tree write err: -5, ino 4 [ 262.242337][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 263.772034][ T7574] loop5: detected capacity change from 0 to 512 [ 263.801457][ T7574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.851019][ T7574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 263.905286][ T7574] EXT4-fs (loop5): 1 truncate cleaned up [ 263.918965][ T7574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.968892][ T7574] overlayfs: invalid origin (0000) [ 264.854705][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 264.931865][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 265.082403][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 267.263125][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 267.408149][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 267.433285][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 267.461883][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 267.527872][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 267.595510][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 267.785577][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 268.498221][ T7605] loop4: detected capacity change from 0 to 2048 [ 268.573223][ T7605] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 268.687683][ T7605] NILFS (loop4): mounting unchecked fs [ 268.709172][ T5874] udevd[5874]: incorrect nilfs2 checksum on /dev/loop4 [ 268.787461][ T7605] NILFS (loop4): recovery complete [ 268.892637][ T7615] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.095953][ T30] audit: type=1800 audit(1754423684.153:2): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.425" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 269.958152][ T6605] EXT4-fs error: 96 callbacks suppressed [ 269.958178][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 270.019917][ T30] audit: type=1800 audit(1754423684.253:3): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.425" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 270.050074][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 270.077671][ T30] audit: type=1800 audit(1754423684.603:4): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.425" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 270.128151][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 270.185251][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 270.234126][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 270.328234][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 270.424876][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 270.496557][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 270.545854][ T7630] loop0: detected capacity change from 0 to 4096 [ 270.587042][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /30/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 270.710412][ T6605] EXT4-fs error (device loop5): ext4_empty_dir:3122: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 272.833431][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.887452][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.087247][ T7669] pim6reg: entered allmulticast mode [ 273.095169][ T7668] tipc: Enabling of bearer rejected, failed to enable media [ 273.177272][ T7673] pim6reg: left allmulticast mode [ 273.540372][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 273.902939][ T7403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.421380][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.429502][ T7705] loop4: detected capacity change from 0 to 4096 [ 275.719433][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.899440][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.317790][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.479311][ T7729] binder: 7721:7729 ioctl c0306201 2000000003c0 returned -14 [ 277.979411][ T7730] loop4: detected capacity change from 0 to 16 [ 278.103711][ T7730] erofs (device loop4): mounted with root inode @ nid 36. [ 278.179905][ T7727] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 278.300703][ T7727] erofs (device loop4): failed to decompress -29 in[58, 4038] out[1851] [ 278.350469][ T59] bridge_slave_1: left allmulticast mode [ 278.361190][ T7727] erofs (device loop4): read error -117 @ 43 of nid 36 [ 278.525428][ T7746] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 278.544009][ T7746] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 278.557026][ T7746] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 278.557236][ T5930] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 278.564906][ T7746] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 278.584371][ T7746] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 279.148812][ T59] bridge_slave_1: left promiscuous mode [ 280.209879][ T7746] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 280.685591][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.457678][ T5930] usb 3-1: device descriptor read/64, error -71 [ 281.467647][ T7746] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 281.477046][ T7746] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 281.547815][ T7746] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 281.556388][ T7746] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 281.564623][ T7746] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 281.570490][ T59] bridge_slave_0: left allmulticast mode [ 281.573599][ T7746] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 281.586671][ T7746] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 281.595025][ T7746] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 281.606039][ T7746] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 281.620073][ T59] bridge_slave_0: left promiscuous mode [ 281.679589][ T7746] syz.4.452: attempt to access beyond end of device [ 281.679589][ T7746] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 281.693779][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.727390][ T7759] loop3: detected capacity change from 0 to 512 [ 281.752950][ T7759] EXT4-fs: Ignoring removed i_version option [ 281.773873][ T7746] syz.4.452: attempt to access beyond end of device [ 281.773873][ T7746] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 281.806199][ T7763] loop2: detected capacity change from 0 to 256 [ 281.816240][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.829361][ T7759] EXT4-fs: Ignoring removed nobh option [ 281.835113][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.846111][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.857229][ T7746] syz.4.452: attempt to access beyond end of device [ 281.857229][ T7746] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 281.872303][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.882358][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.903373][ T7759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.916793][ T7746] erofs (device loop4): failed to decompress -29 in[58, 4038] out[2639] [ 281.930271][ T7746] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 281.939597][ T7746] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 281.952255][ T7746] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 281.958825][ T7763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 281.960818][ T7746] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 281.980554][ T7746] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 281.990854][ T7746] syz.4.452: attempt to access beyond end of device [ 281.990854][ T7746] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 282.004672][ T7746] erofs (device loop4): failed to decompress -29 in[58, 4038] out[3537] [ 282.064101][ T7759] EXT4-fs (loop3): 1 truncate cleaned up [ 282.173618][ T7759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.854446][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.156677][ T5872] Bluetooth: hci1: command tx timeout [ 285.237734][ T7788] binder: 7785:7788 ioctl c0306201 2000000003c0 returned -14 [ 285.450913][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.782199][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.804867][ T59] bond0 (unregistering): Released all slaves [ 285.962120][ T7752] pim6reg: entered allmulticast mode [ 285.989362][ T7753] pim6reg: left allmulticast mode [ 286.072380][ T7778] batman_adv: batadv0: Adding interface: ip6gretap1 [ 286.072403][ T7778] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.072424][ T7778] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 286.161772][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.161918][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.202266][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.241641][ T5872] Bluetooth: hci1: command tx timeout [ 286.278066][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.382445][ T7777] batman_adv: batadv0: Removing interface: ip6gretap1 [ 287.547878][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 287.885151][ T10] usb 5-1: no configurations [ 287.901896][ T10] usb 5-1: can't read configurations, error -22 [ 288.068499][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 288.190159][ T7821] loop2: detected capacity change from 0 to 256 [ 288.251225][ T7821] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 288.311659][ T5872] Bluetooth: hci1: command tx timeout [ 288.339274][ T10] usb 5-1: no configurations [ 288.343929][ T10] usb 5-1: can't read configurations, error -22 [ 288.358882][ T10] usb usb5-port1: attempt power cycle [ 288.368367][ T7823] loop3: detected capacity change from 0 to 512 [ 288.395434][ T7823] EXT4-fs: Ignoring removed i_version option [ 288.463190][ T7823] EXT4-fs: Ignoring removed nobh option [ 288.526880][ T7823] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.634462][ T7823] EXT4-fs (loop3): 1 truncate cleaned up [ 288.708335][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 288.747364][ T7823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.818332][ T10] usb 5-1: no configurations [ 288.873223][ T10] usb 5-1: can't read configurations, error -22 [ 288.953759][ T59] hsr_slave_0: left promiscuous mode [ 289.122722][ T59] hsr_slave_1: left promiscuous mode [ 289.235171][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.391208][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.602697][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.643972][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.669944][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.774741][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 289.850674][ T10] usb 5-1: no configurations [ 289.855330][ T10] usb 5-1: can't read configurations, error -22 [ 289.908927][ T10] usb usb5-port1: unable to enumerate USB device [ 290.023571][ T59] veth1_macvtap: left promiscuous mode [ 290.031372][ T59] veth0_macvtap: left promiscuous mode [ 290.037301][ T59] veth1_vlan: left promiscuous mode [ 290.111658][ T7840] binder: 7833:7840 ioctl c0306201 2000000003c0 returned -14 [ 290.447349][ T5872] Bluetooth: hci1: command tx timeout [ 290.471693][ T59] veth0_vlan: left promiscuous mode [ 292.997775][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 293.031009][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 293.243702][ T59] team0 (unregistering): Port device team_slave_1 removed [ 293.778419][ T59] team0 (unregistering): Port device team_slave_0 removed [ 293.832480][ T7868] loop3: detected capacity change from 0 to 256 [ 293.878789][ T7868] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53d99, utbl_chksum : 0xe619d30d) [ 293.930448][ T7868] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 293.944431][ T30] audit: type=1800 audit(1754423709.003:5): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 294.030218][ T30] audit: type=1800 audit(1754423709.093:6): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 294.616320][ T7870] loop4: detected capacity change from 0 to 65536 [ 294.662299][ T7870] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 294.729701][ T7843] pim6reg: entered allmulticast mode [ 294.743515][ T7844] pim6reg: left allmulticast mode [ 294.746773][ T7870] XFS (loop4): Ending clean mount [ 294.760269][ T7870] XFS (loop4): Quotacheck needed: Please wait. [ 294.807107][ T7870] XFS (loop4): Quotacheck: Done. [ 294.947241][ T5875] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 295.310821][ T5851] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 295.694243][ T5851] usb 3-1: no configurations [ 295.782115][ T5851] usb 3-1: can't read configurations, error -22 [ 296.085781][ T5851] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 296.298520][ T5851] usb 3-1: no configurations [ 296.305225][ T5851] usb 3-1: can't read configurations, error -22 [ 296.349733][ T5851] usb usb3-port1: attempt power cycle [ 296.770108][ T5851] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 296.954781][ T5851] usb 3-1: no configurations [ 297.043433][ T5851] usb 3-1: can't read configurations, error -22 [ 297.267959][ T5851] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 297.311676][ T5851] usb 3-1: no configurations [ 297.316329][ T5851] usb 3-1: can't read configurations, error -22 [ 297.362600][ T59] IPVS: stop unused estimator thread 0... [ 297.400135][ T7760] chnl_net:caif_netlink_parms(): no params data found [ 297.407179][ T5851] usb usb3-port1: unable to enumerate USB device [ 299.313163][ T7932] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 299.501793][ T7933] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffc000: 0000 [#1] SMP KASAN PTI [ 299.513785][ T7933] KASAN: probably user-memory-access in range [0x00000000fffe0000-0x00000000fffe0007] [ 299.523345][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: dhcpcd-run-hook Not tainted 6.16.0-next-20250805-syzkaller #0 PREEMPT(full) [ 299.534889][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.544974][ T7933] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 299.550856][ T7933] Code: 01 48 c7 c7 60 4c 98 8b be 4b 03 00 00 48 c7 c2 a0 4c 98 8b e8 24 b7 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 4d f7 ff 49 8b 07 a8 03 75 62 [ 299.557617][ T981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 299.570476][ T7933] RSP: 0000:ffffc9000d0c7398 EFLAGS: 00010206 [ 299.570527][ T7933] RAX: 000000001fffc000 RBX: ffffffff822bce79 RCX: 0859e8e14356a400 [ 299.570542][ T7933] RDX: 0000000000000000 RSI: ffffffff8be34260 RDI: ffffffff8be34220 [ 299.570554][ T7933] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bce79 [ 299.570566][ T7933] R10: dffffc0000000000 R11: fffffbfff1f45747 R12: dffffc0000000000 [ 299.570579][ T7933] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000fffe0000 [ 299.623993][ T7933] FS: 0000000000000000(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 299.632933][ T7933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.639526][ T7933] CR2: 00007f3d2e2e56c0 CR3: 00000000616a2000 CR4: 00000000003526f0 [ 299.647540][ T7933] Call Trace: [ 299.650830][ T7933] [ 299.653772][ T7933] refill_obj_stock+0x254/0x850 [ 299.658627][ T7933] ? refill_obj_stock+0x116/0x850 [ 299.663671][ T7933] __memcg_slab_free_hook+0x127/0x3d0 [ 299.669046][ T7933] ? unlink_anon_vmas+0x2cc/0x670 [ 299.674082][ T7933] kmem_cache_free+0x223/0x400 [ 299.678856][ T7933] ? __pfx___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 299.686231][ T7933] unlink_anon_vmas+0x2cc/0x670 [ 299.691092][ T7933] free_pgtables+0x72b/0x9c0 [ 299.695700][ T7933] ? __pfx_free_pgtables+0x10/0x10 [ 299.700813][ T7933] ? __pfx_down_write+0x10/0x10 [ 299.705665][ T7933] ? __mas_set_range+0x12f/0x3c0 [ 299.710616][ T7933] exit_mmap+0x444/0xb50 [ 299.714880][ T7933] ? uprobe_clear_state+0x20f/0x290 [ 299.720128][ T7933] ? __pfx_exit_mmap+0x10/0x10 [ 299.724912][ T7933] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 299.730583][ T7933] ? __pfx_exit_aio+0x10/0x10 [ 299.735271][ T7933] ? preempt_schedule_common+0x83/0xd0 [ 299.740749][ T7933] ? uprobe_clear_state+0x274/0x290 [ 299.745967][ T7933] __mmput+0x118/0x420 [ 299.750056][ T7933] exec_mmap+0x6ac/0x7d0 [ 299.754311][ T7933] ? generic_permission+0x2e5/0x690 [ 299.759517][ T7933] ? __pfx_exec_mmap+0x10/0x10 [ 299.764329][ T7933] begin_new_exec+0x129c/0x2120 [ 299.769197][ T7933] ? __pfx_load_elf_phdrs+0x10/0x10 [ 299.774415][ T7933] load_elf_binary+0x998/0x2740 [ 299.779284][ T7933] ? load_misc_binary+0x110/0xc40 [ 299.784333][ T7933] ? __lock_acquire+0xab9/0xd20 [ 299.789194][ T7933] ? __pfx_load_elf_binary+0x10/0x10 [ 299.794493][ T7933] bprm_execve+0x999/0x1450 [ 299.799130][ T7933] ? __pfx_bprm_execve+0x10/0x10 [ 299.804087][ T7933] do_execveat_common+0x510/0x6a0 [ 299.809125][ T7933] __x64_sys_execve+0x94/0xb0 [ 299.813816][ T7933] do_syscall_64+0xfa/0x3b0 [ 299.818388][ T7933] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.823603][ T7933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.829683][ T7933] ? clear_bhb_loop+0x60/0xb0 [ 299.834377][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.840277][ T7933] RIP: 0033:0x7fa2b33fb107 [ 299.844715][ T7933] Code: Unable to access opcode bytes at 0x7fa2b33fb0dd. [ 299.851733][ T7933] RSP: 002b:00007ffc03e59168 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 299.860151][ T7933] RAX: ffffffffffffffda RBX: 00005638d41801b8 RCX: 00007fa2b33fb107 [ 299.868126][ T7933] RDX: 00005638d41801d8 RSI: 00005638d41801b8 RDI: 00005638d4180288 [ 299.876099][ T7933] RBP: 00005638d4180288 R08: 00007ffc03e5edf9 R09: 0000000000000000 [ 299.884070][ T7933] R10: 0000000000000008 R11: 0000000000000246 R12: 00005638d41801d8 [ 299.892047][ T7933] R13: 00007fa2b35c0e8b R14: 00005638d41801d8 R15: 0000000000000000 [ 299.900029][ T7933] [ 299.903048][ T7933] Modules linked in: [ 299.907676][ T7933] ---[ end trace 0000000000000000 ]--- [ 299.914284][ T7933] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 299.920174][ T7933] Code: 01 48 c7 c7 60 4c 98 8b be 4b 03 00 00 48 c7 c2 a0 4c 98 8b e8 24 b7 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 4d f7 ff 49 8b 07 a8 03 75 62 [ 299.939901][ T7933] RSP: 0000:ffffc9000d0c7398 EFLAGS: 00010206 [ 299.946007][ T7933] RAX: 000000001fffc000 RBX: ffffffff822bce79 RCX: 0859e8e14356a400 [ 299.954326][ T7933] RDX: 0000000000000000 RSI: ffffffff8be34260 RDI: ffffffff8be34220 [ 299.962643][ T7933] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bce79 [ 299.971085][ T7933] R10: dffffc0000000000 R11: fffffbfff1f45747 R12: dffffc0000000000 [ 299.979131][ T7933] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000fffe0000 [ 299.987149][ T7933] FS: 0000000000000000(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 299.996248][ T7933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.002860][ T7933] CR2: 00007fa2b33fb0dd CR3: 00000000616a2000 CR4: 00000000003526f0 [ 300.010850][ T7933] Kernel panic - not syncing: Fatal exception [ 300.017319][ T7933] Kernel Offset: disabled [ 300.021641][ T7933] Rebooting in 86400 seconds..