last executing test programs: 14m44.655366425s ago: executing program 32 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 9m14.71560153s ago: executing program 5 (id=1214): r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0xa00000}], 0x1, 0x400020c1, 0x0) 9m14.606740133s ago: executing program 5 (id=1217): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 9m14.565427424s ago: executing program 5 (id=1218): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 9m13.526201819s ago: executing program 5 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 9m12.912559593s ago: executing program 5 (id=1225): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x26}, 0xfffffe1b) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x8, @void}, 0x10) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r9 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) waitid$P_PIDFD(0x3, r10, 0x0, 0xa000000c, 0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r10, 0x0, 0x0, 0x0, 0x0, 0x2}]) 9m12.179261891s ago: executing program 5 (id=1229): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000500), 0x0, 0x2c00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34565559}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xd8) 9m11.781752851s ago: executing program 33 (id=1229): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000500), 0x0, 0x2c00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x34565559}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xd8) 9m7.704431868s ago: executing program 1 (id=1245): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/101, 0x65) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x501, 0x0) write(r1, &(0x7f00000003c0)="f08732b6ee98568b0a88bb6c3cf31f9e3e221aa729b77357d5455252bca75a4635583dad382ba9e4730e099aedaa89a9d297761f8b3558e151d4004b5a781cf89e5bf4bf2b7b1b62110b3a9abb3cba9bcc97b4f9ef5c794018bf447d48f7b12d99fc", 0x62) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110b8"], 0x0}, 0x94) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x2, 0x0, 0x8001, 0x1, 0x1}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x40400) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) sendfile(r3, r4, 0x0, 0x106f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f00000001c0)={0x8, 0x4, 0x9, 0x3, 0x1, 0x1, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100040c5}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x38, 0xc}}], 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 9m7.299197568s ago: executing program 1 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xa797, 0xb, 0x20000000, 0x5}, 0x4f, 0x5, [{0x3e, 0x40, 0x400, 0xc46cc644, 0x551, 0x5}]}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x10000003, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x4, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x1, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8001, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x0, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24cd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x3, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x30000000, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x9, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x6, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x7596, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x40005) 9m1.898088797s ago: executing program 1 (id=1261): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000008c0)={0xc0, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}]}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) 9m0.52417757s ago: executing program 1 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 8m56.573172855s ago: executing program 1 (id=1267): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 8m56.002753988s ago: executing program 1 (id=1272): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m55.52855999s ago: executing program 34 (id=1272): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m34.170788012s ago: executing program 3 (id=1314): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 8m33.666623934s ago: executing program 3 (id=1318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xcbad}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x540c1}, 0x44840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 8m32.229368248s ago: executing program 3 (id=1323): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000940)={0x24, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x5452, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x3, 0x32, 0x20000}) 8m28.970857156s ago: executing program 3 (id=1333): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0\x00') 8m28.875337308s ago: executing program 3 (id=1334): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xa2042, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) fsopen(0x0, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000001c0)={0x2}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$cont(0x15, 0x0, 0x6, 0x4d3) accept4$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c30000000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) 8m27.779926885s ago: executing program 3 (id=1337): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 8m25.350233703s ago: executing program 35 (id=1337): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 8m25.345141283s ago: executing program 0 (id=1341): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000940)={0x24, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x5452, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x3, 0x32, 0x20000}) 8m22.197121469s ago: executing program 0 (id=1349): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/101, 0x65) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x501, 0x0) write(r1, &(0x7f00000003c0)="f08732b6ee98568b0a88bb6c3cf31f9e3e221aa729b77357d5455252bca75a4635583dad382ba9e4730e099aedaa89a9d297761f8b3558e151d4004b5a781cf89e5bf4bf2b7b1b62110b3a9abb3cba9bcc97b4f9ef5c794018bf447d48f7b12d99fc", 0x62) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110b8"], 0x0}, 0x94) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x2, 0x0, 0x8001, 0x1, 0x1}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x40400) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) sendfile(r3, r4, 0x0, 0x106f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f00000001c0)={0x8, 0x4, 0x9, 0x3, 0x1, 0x1, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100040c5}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x38, 0xc}}], 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 8m21.073402925s ago: executing program 0 (id=1350): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) acct(&(0x7f0000000000)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x880, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=',\x00') munmap(&(0x7f0000fed000/0x13000)=nil, 0x13000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 8m19.999889421s ago: executing program 0 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 8m19.841512805s ago: executing program 0 (id=1352): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 8m18.469587908s ago: executing program 0 (id=1354): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x26}, 0xfffffe1b) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x25, 0x8, @void}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0xa000000c, 0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) 8m17.832690123s ago: executing program 36 (id=1354): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x26}, 0xfffffe1b) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x25, 0x8, @void}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0xa000000c, 0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) 8m17.54641151s ago: executing program 6 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) connect$bt_rfcomm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x67, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 8m16.30152409s ago: executing program 6 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 8m16.034049036s ago: executing program 6 (id=1362): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x1d, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xf0}}, 0x0) setpgid(r4, 0x0) write(r0, &(0x7f00000000c0)="510003", 0x3) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) 8m15.636019476s ago: executing program 6 (id=1364): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x63) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000190}, 0x1) 8m14.961083522s ago: executing program 37 (id=1364): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x63) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000190}, 0x1) 12.810684363s ago: executing program 2 (id=2578): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x25, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x1c005, &(0x7f0000000600), 0x9, 0x565c, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$sndseq(r0, &(0x7f0000000280)=[{0x9, 0xa, 0x9, 0x4, @time={0x1, 0xc}, {0x4, 0x17}, {0x42, 0x7}, @raw32={[0x8, 0x63b, 0xf3]}}], 0x1c) 10.564145054s ago: executing program 4 (id=2583): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x200002, 0xf, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0xd0, 0x0, 0x100, 0x70fd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xacc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6468}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)}], 0x1}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf250000", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000cde5ec75022f9be36e95be35f6795cb50a06518d3a86ad27a59a12e030b34a"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) 9.241989523s ago: executing program 8 (id=2588): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setpriority(0x2, 0x0, 0x3) 9.062814278s ago: executing program 9 (id=2590): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x58, 0x3fffff) 8.822095673s ago: executing program 9 (id=2591): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0xfffffff7, 0x1000, 0xfffffff7, 0x7ff, 0x2, 0x3}, 0x1c) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r4, &(0x7f0000000540)={0x0, 0x1aa5, 0x1000, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x3e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x3fffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x80003, 0x1, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 8.498095211s ago: executing program 8 (id=2592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x2000005, r3}, 0x38) connect$bt_rfcomm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 7.20654926s ago: executing program 8 (id=2593): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/101, 0x65) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x501, 0x0) write(r1, &(0x7f00000003c0)="f08732b6ee98568b0a88bb6c3cf31f9e3e221aa729b77357d5455252bca75a4635583dad382ba9e4730e099aedaa89a9d297761f8b3558e151d4004b5a781cf89e5bf4bf2b7b1b62110b3a9abb3cba9bcc97b4f9ef5c794018bf447d48f7b12d99fc", 0x62) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB='f\n\x00\x00\x00\x00'], 0x0}, 0x94) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x2, 0x0, 0x8001, 0x1, 0x1}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x40400) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) sendfile(r3, r4, 0x0, 0x106f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f00000001c0)={0x8, 0x4, 0x9, 0x3, 0x1, 0x1, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100040c5}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x38, 0xc}}], 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 7.150811301s ago: executing program 2 (id=2595): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x38414262, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) unshare(0xa000200) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000000)={0x7, 0x2d, 0xfff, 0x101, 0x4}) semget$private(0x0, 0x4000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) 6.154747543s ago: executing program 9 (id=2596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.316636872s ago: executing program 9 (id=2599): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) iopl(0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 4.265254226s ago: executing program 8 (id=2600): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0xb, 0x7, 0x8, 0xc, {0x3, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0xfff, 0xc000, 0x7ff, r3, r4, 0x5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r0, r1, 0x0) write$binfmt_misc(r5, &(0x7f0000000440)=';', 0x1) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.222942797s ago: executing program 4 (id=2601): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0xffff) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.961248793s ago: executing program 4 (id=2602): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setpriority(0x2, 0x0, 0x3) 3.842632155s ago: executing program 2 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x2000005, r3}, 0x38) connect$bt_rfcomm(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.702760368s ago: executing program 8 (id=2605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) inotify_init1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 3.627362329s ago: executing program 4 (id=2606): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0xfffffff7, 0x1000, 0xfffffff7, 0x7ff, 0x2, 0x3}, 0x1c) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000004c0)) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r3, r4, &(0x7f0000000540)={0x0, 0x1aa5, 0x1000, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x3e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x3fffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x80003, 0x1, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.216146188s ago: executing program 7 (id=2607): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x4008010) 2.474797234s ago: executing program 8 (id=2608): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x0, 0x0) 2.468390285s ago: executing program 9 (id=2609): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYBLOB="ddb82572d6ae052ca4cf751a6a048d0be00710a34ae7c2753dcc957635e7a8b0e258359021733bd98bf98e4e7fadaaa0d308fa66", @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.382946877s ago: executing program 7 (id=2610): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@debug}, {@usrquota}, {@dax_inode}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffffffff}}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@abort}]}, 0x1, 0x236, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) rmdir(&(0x7f0000000100)='./bus\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.865373238s ago: executing program 2 (id=2611): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/101, 0x65) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x501, 0x0) write(r1, &(0x7f00000003c0)="f08732b6ee98568b0a88bb6c3cf31f9e3e221aa729b77357d5455252bca75a4635583dad382ba9e4730e099aedaa89a9d297761f8b3558e151d4004b5a781cf89e5bf4bf2b7b1b62110b3a9abb3cba9bcc97b4f9ef5c794018bf447d48f7b12d99fc", 0x62) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x0, {[0x9, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x390]}}, 0x5c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB='f\n\x00\x00\x00\x00'], 0x0}, 0x94) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x2, 0x0, 0x8001, 0x1, 0x1}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x80061, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x40400) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) sendfile(r3, r4, 0x0, 0x106f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f00000001c0)={0x8, 0x4, 0x9, 0x3, 0x1, 0x1, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100040c5}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x38, 0xc}}], 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1.863787748s ago: executing program 7 (id=2612): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000076000104c60500000000000000000000000000080001000000000021bd95985d1b4ee0e2907bb8e64e6786b467d6b3c243e386f9154c7e773ca55a627d5cecdce91912b08fe6ed1c0dcf7d32b36f2de4c746293dc9efb11abfc3d4"], 0x20}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x190) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500005c000000000073907800000000ff00000100004e22004890780300000000000000d663cd75673f3c2fdc00000000000000"], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r4 = socket$key(0xf, 0x3, 0x2) ioctl(r4, 0x8b24, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.576976414s ago: executing program 9 (id=2613): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x200002, 0xf, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0xd0, 0x0, 0x100, 0x70fd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xacc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6468}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)}], 0x1}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf250000", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000cde5ec75022f9be36e95be35f6795cb50a06518d3a86ad27a59a12e030b34a"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) 546.678068ms ago: executing program 4 (id=2614): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x38414262, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) unshare(0xa000200) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000000)={0x7, 0x2d, 0xfff, 0x101, 0x4}) semget$private(0x0, 0x4000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) 531.030368ms ago: executing program 2 (id=2615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 445.35789ms ago: executing program 7 (id=2616): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setpriority(0x2, 0x0, 0x3) 246.351324ms ago: executing program 7 (id=2617): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 245.852464ms ago: executing program 4 (id=2618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 140.869957ms ago: executing program 2 (id=2619): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) inotify_init1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=2620): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) iopl(0x3) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): e_slave_0 left promiscuous mode [ 548.530883][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.628430][ T5924] device veth1_macvtap left promiscuous mode [ 548.646143][ T5924] device veth0_macvtap left promiscuous mode [ 548.667484][ T5924] device veth1_vlan left promiscuous mode [ 548.684799][ T5924] device veth0_vlan left promiscuous mode [ 549.516226][ T5924] team0 (unregistering): Port device team_slave_1 removed [ 549.556746][ T5924] team0 (unregistering): Port device team_slave_0 removed [ 549.595653][ T5924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.636187][ T5924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.918978][ T5924] bond0 (unregistering): Released all slaves [ 550.032242][ T9636] netlink: 'syz.2.1403': attribute type 7 has an invalid length. [ 550.040050][ T9636] netlink: 'syz.2.1403': attribute type 5 has an invalid length. [ 550.055020][ T9636] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1403'. [ 550.066938][ T9658] device syzkaller0 entered promiscuous mode [ 550.253104][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 550.298702][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 550.415310][ T9356] device veth0_vlan entered promiscuous mode [ 550.476854][ T9356] device veth1_vlan entered promiscuous mode [ 550.550986][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 550.597453][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 550.647612][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.786881][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 550.819243][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.837131][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 550.875290][ T9356] device veth0_macvtap entered promiscuous mode [ 550.953273][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.979580][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.054064][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.073771][ T9356] device veth1_macvtap entered promiscuous mode [ 551.135048][ T9412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.186183][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.208543][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.219706][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.231009][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.241049][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.251714][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.263642][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.301537][ T9412] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.320182][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.334571][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.346601][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.380807][ T4317] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 551.382320][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.404902][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.416621][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.428757][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.441453][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.451598][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.462164][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.476020][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1411'. [ 551.496876][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.527876][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.545717][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.561208][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.570121][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.570713][ T4317] usb 9-1: Using ep0 maxpacket: 8 [ 551.596177][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.603391][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.604677][ T4317] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 551.627032][ T9356] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.650386][ T9356] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.659128][ T9356] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.667938][ T4317] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.677976][ T4317] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.688933][ T9356] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.698245][ T4317] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.716568][ T4317] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.762099][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.795121][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.855596][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.893477][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.900684][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.091356][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 552.293988][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 552.556047][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 552.587991][ T4317] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.597188][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.628100][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 552.732568][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.775548][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 552.785111][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 552.795755][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.804999][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.818597][ T4317] usb 9-1: usb_control_msg returned -32 [ 552.829226][ T9412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.829333][ T4317] usbtmc 9-1:16.0: can't read capabilities [ 552.845859][ T9412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 552.863074][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1413'. [ 552.878689][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.911194][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.244516][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.393913][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.613347][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.841382][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.849266][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.925353][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 554.066043][ T9695] overlayfs: missing 'lowerdir' [ 554.078108][ T9695] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.086118][ T9695] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 554.095058][ T9695] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.105224][ T9695] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 554.123661][ T9695] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 554.385547][ T9702] device syzkaller0 entered promiscuous mode [ 554.533501][ T4315] usb 9-1: USB disconnect, device number 2 [ 557.519554][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1420'. [ 557.997636][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.013589][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.056676][ T9412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.116881][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1425'. [ 558.161975][ T9735] overlayfs: missing 'lowerdir' [ 558.173877][ T9735] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.181981][ T9735] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 558.190454][ T9735] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.198266][ T9735] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 558.208516][ T9735] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 560.245820][ T4288] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 560.410615][ T125] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 560.545938][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1432'. [ 560.640464][ T125] usb 10-1: Using ep0 maxpacket: 8 [ 560.652303][ T125] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 560.702649][ T125] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.778288][ T125] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.831023][ T125] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 561.094938][ T125] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.794726][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.801210][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.983347][ T125] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 563.049600][ T125] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.176995][ T125] usb 10-1: can't set config #16, error -71 [ 563.273508][ T125] usb 10-1: USB disconnect, device number 2 [ 564.888323][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 564.911495][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 564.991118][ T9786] overlayfs: unrecognized mount option "verity=on" or missing value [ 564.999730][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.026313][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.062444][ T9412] device veth0_vlan entered promiscuous mode [ 565.081369][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.104632][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 565.143117][ T9412] device veth1_vlan entered promiscuous mode [ 565.186107][ T9788] overlayfs: missing 'lowerdir' [ 565.200051][ T9788] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.208109][ T9788] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 565.216562][ T9788] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.224404][ T9788] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 565.239173][ T9788] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 565.368391][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 565.404034][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 565.455154][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 565.488310][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 565.521675][ T9412] device veth0_macvtap entered promiscuous mode [ 565.542102][ T9412] device veth1_macvtap entered promiscuous mode [ 565.579116][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1440'. [ 565.611343][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.659780][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.390470][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 567.394263][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.538953][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.659514][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.803706][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.931854][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.095806][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.199676][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.246545][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.284165][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 568.326427][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1442'. [ 568.342572][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.396275][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.433875][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.476652][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.541734][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.564801][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.586183][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.604942][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.618143][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.629050][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.642243][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.649951][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 568.681932][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 568.718767][ T9412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.740771][ T4317] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 568.769027][ T9412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.779101][ T9412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.803291][ T9412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.826706][ T9809] device syzkaller0 entered promiscuous mode [ 568.955910][ T9816] device syzkaller0 entered promiscuous mode [ 568.956640][ T4317] usb 10-1: Using ep0 maxpacket: 8 [ 568.981553][ T4317] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 569.009803][ T4317] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.033504][ T4317] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.053540][ T4317] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 569.072664][ T4317] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.095539][ T4317] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 569.107306][ T4317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.171613][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.179477][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.226845][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 569.346925][ T4317] usb 10-1: usb_control_msg returned -32 [ 569.354539][ T4317] usbtmc 10-1:16.0: can't read capabilities [ 569.419245][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.449239][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.469398][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 569.892292][ T9837] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 570.542139][ T4274] usb 10-1: USB disconnect, device number 3 [ 570.580531][ T9836] overlayfs: missing 'lowerdir' [ 570.637533][ T9843] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 570.754621][ T9842] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1451'. [ 570.788216][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1452'. [ 573.012262][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 575.224946][ T9869] device syzkaller0 entered promiscuous mode [ 576.335107][ T26] audit: type=1326 audit(1784043224.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.8.1461" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff0259de59 code=0x0 [ 576.475196][ T9902] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1466'. [ 576.699045][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1467'. [ 576.990373][ T125] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 579.030391][ T125] usb 8-1: Using ep0 maxpacket: 8 [ 579.031886][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 579.053553][ T125] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 579.073916][ T125] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 579.110580][ T125] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 579.151861][ T125] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.185297][ T125] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.241621][ T125] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 579.424969][ T125] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.617485][ T125] usb 8-1: can't set config #16, error -71 [ 580.631634][ T125] usb 8-1: USB disconnect, device number 3 [ 581.847844][ T9943] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 581.957428][ T9946] device syzkaller0 entered promiscuous mode [ 585.321851][ T9961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.023329][ T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 586.044221][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1485'. [ 586.230578][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 587.018098][ T125] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 587.026791][ T125] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 587.036952][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 587.052116][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 587.065225][ T125] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.078563][ T125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 587.087872][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.315057][ T125] usb 5-1: usb_control_msg returned -32 [ 587.324366][ T125] usbtmc 5-1:16.0: can't read capabilities [ 587.705299][T10005] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 588.204160][ T125] usb 5-1: USB disconnect, device number 4 [ 588.453435][T10013] 9pnet_virtio: no channels available for device syz [ 589.500375][ T125] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 591.231267][T10032] overlayfs: missing 'lowerdir' [ 591.283823][T10035] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 591.321484][T10035] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 591.387331][T10032] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 591.470542][T10035] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 591.500693][T10035] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 591.779672][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 592.189598][ T4274] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 592.350314][ T4274] usb 5-1: device descriptor read/64, error -71 [ 592.630684][ T4274] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 592.799842][T10093] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1506'. [ 595.560366][ T4274] usb 5-1: device descriptor read/64, error -71 [ 595.701907][ T4274] usb usb5-port1: attempt power cycle [ 595.885361][T10107] Bluetooth: MGMT ver 1.22 [ 596.014190][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1512'. [ 598.446823][T10115] overlayfs: missing 'lowerdir' [ 599.339280][T10120] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 599.352055][T10120] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 599.423093][T10120] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 599.423868][T10115] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 599.530343][T10120] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 599.735117][T10146] ubi16: attaching mtd0 [ 600.226765][T10166] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1522'. [ 600.271527][ T4259] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 600.440422][ T4259] usb 8-1: device descriptor read/64, error -71 [ 600.710494][ T4259] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 600.880368][ T4259] usb 8-1: device descriptor read/64, error -71 [ 601.010817][ T4259] usb usb8-port1: attempt power cycle [ 601.132545][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 601.435902][ T4259] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 602.212493][ T4259] usb 8-1: device descriptor read/8, error -71 [ 602.490379][ T4259] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 602.545849][ T4259] usb 8-1: device descriptor read/8, error -71 [ 602.692846][ T4259] usb usb8-port1: unable to enumerate USB device [ 602.971228][T10206] overlayfs: missing 'lowerdir' [ 603.049492][T10206] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.665700][T10206] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 605.033129][T10206] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 605.100450][T10206] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 605.451821][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 605.686336][T10242] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1540'. [ 606.199031][T10240] cgroup: fork rejected by pids controller in /syz7 [ 609.690330][ T9527] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 609.870359][ T9527] usb 9-1: device descriptor read/64, error -71 [ 609.938327][T10304] device syzkaller0 entered promiscuous mode [ 610.827063][ T9719] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 610.990417][ T9527] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 611.030583][ T9719] usb 5-1: Using ep0 maxpacket: 8 [ 611.060209][ T9719] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 611.148823][ T9719] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.200508][ T9527] usb 9-1: device descriptor read/64, error -71 [ 611.250907][ T9719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.348924][ T9719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.451323][ T9719] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.573046][ T9719] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.661869][ T9719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.865643][ T9527] usb usb9-port1: attempt power cycle [ 612.017237][ T9719] usb 5-1: usb_control_msg returned -32 [ 612.023752][ T9719] usbtmc 5-1:16.0: can't read capabilities [ 612.093264][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1558'. [ 612.300375][ T9527] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 614.291625][ T9527] usb 9-1: device descriptor read/8, error -71 [ 614.299219][T10329] fuse: Unknown parameter 'grou00000000000000000000' [ 614.318226][ T4317] usb 5-1: USB disconnect, device number 8 [ 614.774917][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1560'. [ 616.320041][T10374] device syzkaller0 entered promiscuous mode [ 617.404725][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1567'. [ 620.229785][T10399] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1571'. [ 620.775675][T10396] cgroup: fork rejected by pids controller in /syz9 [ 622.303294][T10439] fuse: Unknown parameter 'grou00000000000000000000' [ 622.396366][T10440] overlayfs: missing 'lowerdir' [ 624.129013][T10445] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 624.234283][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.240700][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.503982][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 627.050545][ T4259] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 627.050732][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1583'. [ 627.196053][T10489] overlayfs: missing 'lowerdir' [ 627.220554][ T4259] usb 8-1: device descriptor read/64, error -71 [ 627.250963][T10491] random: crng reseeded on system resumption [ 628.920649][ T4259] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 629.130620][ T4259] usb 8-1: device descriptor read/64, error -71 [ 629.281100][ T4259] usb usb8-port1: attempt power cycle [ 629.690542][ T4259] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 631.344501][ T4259] usb 8-1: device descriptor read/8, error -71 [ 631.659596][T10512] fuse: Unknown parameter 'group_i00000000000000000000' [ 631.669978][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1587'. [ 631.817080][T10516] overlayfs: unrecognized mount option "verity=on" or missing value [ 631.919416][ T9361] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 631.976908][ T9361] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 633.262566][T10540] overlayfs: missing 'lowerdir' [ 633.313447][T10540] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 634.797105][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1598'. [ 634.853739][T10564] fuse: Unknown parameter 'group_i00000000000000000000' [ 635.659234][T10569] device syzkaller0 entered promiscuous mode [ 637.360347][ T4317] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 639.632653][T10587] overlayfs: missing 'lowerdir' [ 639.693251][T10587] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 639.747918][ T4317] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.765843][T10590] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 639.775680][T10587] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 639.796311][T10609] fuse: Unknown parameter 'group_i00000000000000000000' [ 639.806453][T10587] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 639.815225][ T4317] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.834636][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.843109][T10587] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 639.870292][ T4317] usb 8-1: Product: syz [ 639.875644][ T4317] usb 8-1: Manufacturer: syz [ 639.880953][ T4317] usb 8-1: SerialNumber: syz [ 640.045744][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 640.481415][ T4317] usb 8-1: USB disconnect, device number 12 [ 640.678458][T10624] device syzkaller0 entered promiscuous mode [ 640.892925][T10626] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 643.056590][T10661] fuse: Unknown parameter 'group_id00000000000000000000' [ 643.560458][T10670] overlayfs: missing 'lowerdir' [ 643.576903][T10670] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 643.800473][ T4317] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 643.880093][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 644.002121][ T4317] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.056131][ T4317] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.138135][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.172697][ T4317] usb 9-1: Product: syz [ 644.176962][ T4317] usb 9-1: Manufacturer: syz [ 644.220379][ T4317] usb 9-1: SerialNumber: syz [ 644.437103][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.307141][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.375069][T10694] 9pnet_virtio: no channels available for device syz [ 646.641323][ T4317] usb 9-1: USB disconnect, device number 8 [ 646.680351][ T125] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 646.790505][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 646.910346][ T125] usb 10-1: Using ep0 maxpacket: 32 [ 648.102038][T10709] fuse: Unknown parameter 'group_id00000000000000000000' [ 648.119428][T10710] overlayfs: missing 'lowerdir' [ 648.135815][T10710] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 648.218805][ T125] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 648.228948][ T125] usb 10-1: can't read configurations, error -71 [ 648.596641][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 651.911390][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 652.624891][T10730] device syzkaller0 entered promiscuous mode [ 653.420490][ T9361] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 654.402252][ T9361] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.454397][ T9361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.521368][ T9361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.552139][ T9361] usb 5-1: Product: syz [ 654.570319][ T9361] usb 5-1: Manufacturer: syz [ 654.596656][ T9361] usb 5-1: SerialNumber: syz [ 654.781773][T10757] fuse: Unknown parameter 'group_id00000000000000000000' [ 654.858264][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.870867][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.931245][ T9361] usb 5-1: bad CDC descriptors [ 654.977402][ T9361] usb 5-1: USB disconnect, device number 9 [ 655.014915][T10760] overlayfs: missing 'lowerdir' [ 655.065799][T10760] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 655.073799][T10760] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 655.082308][T10760] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 655.090134][T10760] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 655.121921][T10760] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 655.490439][ T9361] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 655.750848][ T9361] usb 5-1: Using ep0 maxpacket: 8 [ 656.494371][ T9361] usb 5-1: device descriptor read/all, error -71 [ 657.030370][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 657.136602][ T4288] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 657.358945][T10817] overlayfs: unrecognized mount option "verity=on" or missing value [ 657.426083][T10815] netlink: 'syz.9.1663': attribute type 10 has an invalid length. [ 657.484210][ T4892] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 657.512791][ T4892] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 657.945021][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.000787][T10815] team0: Port device bond0 added [ 658.265306][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 658.559191][T10821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.357846][T10847] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1668'. [ 660.700728][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1672'. [ 664.151096][T10884] fuse: Bad value for 'user_id' [ 667.753501][T10905] overlayfs: missing 'lowerdir' [ 667.770000][T10905] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 668.030293][ T4315] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 669.743199][ T4315] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.838018][ T4315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.915626][ T4315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.984796][ T4315] usb 10-1: Product: syz [ 670.113280][T10928] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1683'. [ 670.688164][ T4315] usb 10-1: Manufacturer: syz [ 670.693007][ T4315] usb 10-1: SerialNumber: syz [ 670.822232][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 673.013141][ T4315] usb 10-1: can't set config #1, error -71 [ 673.050492][ T4315] usb 10-1: USB disconnect, device number 6 [ 673.373252][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1685'. [ 673.535886][T10956] device syzkaller0 entered promiscuous mode [ 674.675542][T10971] fuse: Bad value for 'user_id' [ 675.746095][T10986] overlayfs: missing 'lowerdir' [ 675.766457][T10986] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 675.774600][T10986] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 675.783941][T10986] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 675.791893][T10986] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 675.809283][T10986] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 676.683781][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 676.940349][ T4315] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 679.153744][ T4315] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.224716][ T4315] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.257686][ T4315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.346546][ T4315] usb 10-1: Product: syz [ 679.386520][ T4315] usb 10-1: Manufacturer: syz [ 679.412253][ T4315] usb 10-1: SerialNumber: syz [ 679.606862][T11020] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1701'. [ 680.527014][ T4315] usb 10-1: bad CDC descriptors [ 680.605149][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 680.617361][ T4315] usb 10-1: USB disconnect, device number 7 [ 682.079876][T11110] overlayfs: missing 'lowerdir' [ 682.136413][T11111] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 682.144538][T11111] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 682.153512][T11111] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 682.161547][T11111] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 682.214395][T11112] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 682.971071][T11116] fuse: Bad value for 'user_id' [ 683.057803][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 685.677413][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.683837][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.110299][ T4471] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 686.465504][ T4471] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.488253][ T4471] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.545794][ T4471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.590553][ T4471] usb 9-1: Product: syz [ 686.635389][ T4471] usb 9-1: Manufacturer: syz [ 686.649594][ T4471] usb 9-1: SerialNumber: syz [ 686.884198][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.990044][T11169] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1719'. [ 687.220715][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.281934][ T4471] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 687.320973][ T4471] usb 9-1: USB disconnect, device number 9 [ 687.840332][ T4471] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 688.620367][ T4471] usb 9-1: Using ep0 maxpacket: 8 [ 688.899031][ T4471] usb 9-1: device descriptor read/all, error -71 [ 689.043691][T11196] fuse: Bad value for 'fd' [ 689.119739][T11198] overlayfs: missing 'lowerdir' [ 689.136800][T11198] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 689.145666][T11198] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 689.154928][T11198] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 689.163023][T11198] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 689.183520][T11198] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 689.888169][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1728'. [ 695.246405][T11251] device syzkaller0 entered promiscuous mode [ 695.823012][T11268] fuse: Bad value for 'fd' [ 695.920315][T10498] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 696.005947][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 696.180476][T10498] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.809157][T10498] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.840568][T10498] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.862864][T10498] usb 9-1: Product: syz [ 697.867095][T10498] usb 9-1: Manufacturer: syz [ 697.872177][T10498] usb 9-1: SerialNumber: syz [ 698.869224][T11284] overlayfs: missing 'lowerdir' [ 698.885232][T11284] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 698.893380][T11284] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 698.902665][T11284] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 698.910858][T11284] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 698.925143][T11284] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 699.232209][T10498] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 699.330584][T10498] usb 9-1: USB disconnect, device number 12 [ 699.630056][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 702.034360][T11334] fuse: Bad value for 'fd' [ 702.206916][T11335] device syzkaller0 entered promiscuous mode [ 704.973284][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1755'. [ 707.712819][T11372] overlayfs: missing 'lowerdir' [ 707.763138][T11372] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 707.771181][T11372] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 707.781035][T11372] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 707.788957][T11372] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 707.816685][T11372] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 712.300617][T11401] fuse: Bad value for 'fd' [ 712.749702][T11415] device syzkaller0 entered promiscuous mode [ 713.060401][ T27] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 714.620459][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 714.762498][ T27] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.813967][ T27] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.830738][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.839247][ T27] usb 9-1: Product: syz [ 714.849368][ T27] usb 9-1: Manufacturer: syz [ 714.855696][ T27] usb 9-1: SerialNumber: syz [ 714.927782][T11438] overlayfs: missing 'lowerdir' [ 714.936042][T11438] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 715.676659][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.819222][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.868811][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1777'. [ 717.931383][ T27] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 718.001713][ T27] usb 9-1: USB disconnect, device number 13 [ 718.242969][T11460] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1780'. [ 719.028175][T11457] fuse: Bad value for 'fd' [ 721.462578][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 721.500092][T11474] device syzkaller0 entered promiscuous mode [ 723.674868][T11505] overlayfs: missing 'lowerdir' [ 723.686195][T11505] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 724.727634][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1795'. [ 726.827288][T11523] fuse: Bad value for 'fd' [ 728.160688][T11528] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1799'. [ 728.405404][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1801'. [ 731.072298][T11568] device syzkaller0 entered promiscuous mode [ 731.276330][T11580] overlayfs: missing 'lowerdir' [ 731.286254][T11580] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 733.370276][T10498] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 733.583193][T10498] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.690147][T10498] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.737628][T11610] fuse: Invalid rootmode [ 733.758545][T10498] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.912153][T11619] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1815'. [ 734.158478][T10498] usb 9-1: Product: syz [ 734.179143][T10498] usb 9-1: Manufacturer: syz [ 734.193037][T10498] usb 9-1: SerialNumber: syz [ 734.417012][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1817'. [ 734.459138][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.558244][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.762814][T10498] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 735.349233][T10498] usb 9-1: USB disconnect, device number 14 [ 735.810288][T10498] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 736.892774][T11650] overlayfs: missing 'lowerdir' [ 737.005093][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1824'. [ 739.053743][T11656] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 739.072381][T11656] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 739.081708][T11656] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 739.089532][T11656] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 739.174050][T11650] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 740.451683][T11680] fuse: Invalid rootmode [ 740.651745][T11692] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1829'. [ 742.885054][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1831'. [ 743.638184][T11708] device syzkaller0 entered promiscuous mode [ 743.767879][T11721] overlayfs: missing 'lowerdir' [ 743.803377][T11721] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 743.811423][T11721] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 743.822839][T11721] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 743.830979][T11721] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 743.840438][ T14] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 743.852818][T11721] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 744.817130][ T14] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.910699][ T14] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.067914][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.208052][ T14] usb 10-1: Product: syz [ 745.289099][ T14] usb 10-1: Manufacturer: syz [ 745.377081][ T14] usb 10-1: SerialNumber: syz [ 745.707485][T11731] fuse: Invalid rootmode [ 745.758336][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.791100][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.852221][ T14] cdc_ether: probe of 10-1:1.0 failed with error -22 [ 745.903053][ T14] usb 10-1: USB disconnect, device number 8 [ 746.387080][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1844'. [ 746.450378][ T14] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 746.670357][ T14] usb 10-1: Using ep0 maxpacket: 8 [ 746.696632][ T14] usb 10-1: config index 0 descriptor too short (expected 301, got 72) [ 746.763970][ T14] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 746.848328][ T14] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.924857][ T14] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 746.990310][ T14] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 747.069872][ T14] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 747.113650][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.121674][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.258034][ T14] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.386284][ T14] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 747.475467][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.703692][ T14] usb 10-1: can't set config #16, error -71 [ 747.792317][ T14] usb 10-1: USB disconnect, device number 9 [ 748.024756][T11762] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1846'. [ 752.805124][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 753.880523][T11788] overlayfs: missing 'lowerdir' [ 753.938264][T11789] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 753.946302][T11789] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 753.955157][T11789] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 753.963108][T11789] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 754.015821][T11790] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 754.893032][T11794] fuse: Bad value for 'rootmode' [ 755.313514][T11806] device syzkaller0 entered promiscuous mode [ 755.337682][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1858'. [ 756.640339][ T4319] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 756.856923][ T4319] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.966939][ T4319] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.116050][ T4319] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.197213][T11823] cgroup: fork rejected by pids controller in /syz8 [ 757.258051][ T4319] usb 10-1: Product: syz [ 757.315957][ T4319] usb 10-1: Manufacturer: syz [ 757.390971][ T4319] usb 10-1: SerialNumber: syz [ 757.705160][T11813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.743013][T11813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.756714][T11858] device syzkaller0 entered promiscuous mode [ 757.786045][ T4319] cdc_ether: probe of 10-1:1.0 failed with error -22 [ 757.815915][ T4319] usb 10-1: USB disconnect, device number 10 [ 757.864469][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1864'. [ 759.770445][ T4319] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 760.437384][T11877] overlayfs: missing 'lowerdir' [ 760.471111][T11877] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 763.492873][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1871'. [ 766.730417][T11910] device syzkaller0 entered promiscuous mode [ 766.846271][T11928] overlayfs: missing 'lowerdir' [ 766.908011][T11929] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 766.910829][ T4773] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 766.923735][T11929] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 766.932627][T11929] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 766.940718][T11929] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 766.981707][T11931] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 767.831825][ T4773] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.881620][ T4773] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.913598][ T4773] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.947310][ T4773] usb 10-1: Product: syz [ 767.965049][ T4773] usb 10-1: Manufacturer: syz [ 769.597384][ T4773] usb 10-1: SerialNumber: syz [ 770.588468][ T4773] usb 10-1: can't set config #1, error -71 [ 770.597224][ T4773] usb 10-1: USB disconnect, device number 12 [ 772.860408][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 777.913557][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1899'. [ 778.843250][T12004] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1898'. [ 779.111075][ T4276] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 779.950580][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'. [ 780.499085][T12020] autofs4:pid:12020:autofs_fill_super: called with bogus options [ 782.785649][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1910'. [ 783.978779][T12048] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1912'. [ 784.449716][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1914'. [ 786.367117][T12054] device syzkaller0 entered promiscuous mode [ 787.446477][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1924'. [ 793.023585][T12114] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1928'. [ 793.169232][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1927'. [ 794.295593][T12124] overlayfs: missing 'lowerdir' [ 794.357307][T12124] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 795.275958][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 795.560282][ T9527] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 797.002707][ T4288] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 797.012472][ T9527] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.062476][ T9527] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 797.110418][ T9527] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.118478][ T9527] usb 9-1: Product: syz [ 797.241521][T12146] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1940'. [ 797.357804][ T9527] usb 9-1: Manufacturer: syz [ 797.362540][ T9527] usb 9-1: SerialNumber: syz [ 799.819007][ T9527] cdc_ether 9-1:1.0: skipping garbage [ 799.826801][ T9527] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 799.937542][T12169] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1943'. [ 800.180543][ T9527] usb 9-1: USB disconnect, device number 16 [ 800.756767][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1948'. [ 801.596341][T12191] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 802.190345][T11558] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 802.416162][T11558] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.520056][T11558] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.707358][T11558] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.861871][T11558] usb 10-1: Product: syz [ 802.866210][T11558] usb 10-1: Manufacturer: syz [ 803.009934][T12221] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1958'. [ 805.663281][T11558] usb 10-1: SerialNumber: syz [ 806.789913][T11558] usb 10-1: can't set config #1, error -71 [ 806.799304][T11558] usb 10-1: USB disconnect, device number 13 [ 806.830312][ T4276] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 807.364321][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1965'. [ 808.557121][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.563550][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.550308][T10498] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 809.772372][T10498] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.801910][T10498] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.829364][T10498] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.858117][T10498] usb 10-1: Product: syz [ 809.875757][T10498] usb 10-1: Manufacturer: syz [ 809.888972][T10498] usb 10-1: SerialNumber: syz [ 810.252909][T12277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.035811][T12277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.106389][T10498] cdc_ether 10-1:1.0: skipping garbage [ 811.119806][T10498] cdc_ether: probe of 10-1:1.0 failed with error -22 [ 811.208515][T10498] usb 10-1: USB disconnect, device number 14 [ 811.363796][T12303] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1977'. [ 811.772652][T10498] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 812.028061][T10498] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.346897][T10498] usb 10-1: string descriptor 0 read error: -71 [ 813.358209][T10498] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.410260][T10498] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.432636][T10498] usb 10-1: can't set config #1, error -71 [ 813.453665][T10498] usb 10-1: USB disconnect, device number 15 [ 813.541081][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1980'. [ 814.708540][ T4276] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 815.487365][T12358] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1992'. [ 817.464038][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1996'. [ 818.355414][T12373] netlink: 'syz.2.1997': attribute type 8 has an invalid length. [ 821.509551][T12429] input: syz1 as /devices/virtual/input/input21 [ 824.383549][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2023'. [ 826.105660][ T4276] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 826.194107][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2025'. [ 829.106294][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 830.175053][T12538] device syzkaller0 entered promiscuous mode [ 833.090603][ T4288] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 833.172776][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2053'. [ 837.166402][T12597] device syzkaller0 entered promiscuous mode [ 837.454046][T12611] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2063'. [ 841.740917][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2067'. [ 842.557418][T12653] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 842.790581][T12652] overlayfs: missing 'lowerdir' [ 842.833932][T12652] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.844347][ T4276] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 842.868959][T12653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 842.919313][T12652] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 842.920066][T12657] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 843.002566][T12652] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 843.041550][T12652] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 843.138181][T12653] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 843.182897][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 844.148610][T12698] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2080'. [ 844.612328][T12696] cgroup: fork rejected by pids controller in /syz4 [ 845.396713][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2084'. [ 847.134389][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 847.148480][T12740] overlayfs: missing 'lowerdir' [ 847.215452][T12744] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 847.360621][T12744] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 847.368910][T12744] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 847.465281][T12744] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 847.516082][T12754] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 849.045358][T12773] device syzkaller0 entered promiscuous mode [ 849.608366][T12790] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2097'. [ 850.692135][T12850] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 850.699965][T12850] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2100'. [ 852.512236][T12867] device syzkaller0 entered promiscuous mode [ 853.748211][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2118'. [ 854.921728][T12921] device syzkaller0 entered promiscuous mode [ 856.993902][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 857.724755][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 857.759512][T12958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 857.969022][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2139'. [ 859.806398][T12984] device syzkaller0 entered promiscuous mode [ 860.550449][ T9361] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 861.541948][ T9361] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.583982][ T9361] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.594283][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2153'. [ 861.624158][ T9361] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.318520][ T9361] usb 10-1: Product: syz [ 863.323172][ T9361] usb 10-1: Manufacturer: syz [ 863.327964][ T9361] usb 10-1: SerialNumber: syz [ 863.502829][T13032] device syzkaller0 entered promiscuous mode [ 863.540800][ T9361] usb 10-1: can't set config #1, error -71 [ 863.570858][ T9361] usb 10-1: USB disconnect, device number 16 [ 864.080244][ T9361] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 864.282317][ T9361] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 864.301736][ T9361] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 864.350463][ T9361] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 864.387053][ T9361] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 864.419077][ T9361] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 864.490621][ T9361] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 864.525219][ T9361] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 864.549447][ T9361] usb 10-1: Product: syz [ 864.560918][ T9361] usb 10-1: Manufacturer: syz [ 864.599654][ T9361] cdc_wdm 10-1:1.0: skipping garbage [ 864.627133][ T9361] cdc_wdm 10-1:1.0: skipping garbage [ 864.655642][ T4288] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 864.679717][ T9361] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 864.724689][ T9361] cdc_wdm 10-1:1.0: Unknown control protocol [ 865.199670][ T9361] usb 10-1: USB disconnect, device number 17 [ 865.265199][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 865.580385][ T4773] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 865.775392][ T4773] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.818970][ T4773] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.851947][ T4773] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.879900][ T4773] usb 9-1: Product: syz [ 865.884736][ T4773] usb 9-1: Manufacturer: syz [ 865.889368][ T4773] usb 9-1: SerialNumber: syz [ 865.894267][ T27] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 866.114682][ T27] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 866.925698][T13077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.934089][ T27] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 866.934137][ T27] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 866.934162][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.961224][T13077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.974161][ T4773] cdc_ether 9-1:1.0: skipping garbage [ 866.979690][ T4773] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 867.068134][ T4773] usb 9-1: USB disconnect, device number 17 [ 867.151261][T13088] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 867.442216][ T9361] usb 8-1: USB disconnect, device number 13 [ 867.580296][ T4773] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 867.770399][ T4773] usb 9-1: Using ep0 maxpacket: 8 [ 867.782929][ T4773] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 867.822288][ T4773] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 867.852451][ T4773] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.902322][ T4773] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 867.949271][ T4773] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.970508][ T4773] usbtmc 9-1:16.0: bulk endpoints not found [ 868.295490][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2178'. [ 870.005388][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.011886][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.437268][ T4319] usb 9-1: USB disconnect, device number 18 [ 870.763170][T13151] device syzkaller0 entered promiscuous mode [ 871.075340][T13160] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 872.149983][ T4276] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 874.635936][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 876.992219][T13223] overlayfs: missing 'lowerdir' [ 877.036732][T13218] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 877.120882][T13218] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 877.123502][T13223] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 877.141699][T13218] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 877.149661][T13218] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 880.329624][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 880.446573][T13259] block device autoloading is deprecated and will be removed. [ 880.498584][ T4288] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 880.894497][T13237] cgroup: subsys name conflicts with all [ 882.927380][T13294] device syzkaller0 entered promiscuous mode [ 882.949161][T13298] overlayfs: missing 'lowerdir' [ 882.986025][T13298] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 882.994208][T13298] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 883.002674][T13298] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 883.010548][T13298] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 883.031306][T13298] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 885.652762][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2220'. [ 888.998997][T13350] overlayfs: missing 'lowerdir' [ 889.012616][T13350] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 889.020643][T13350] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 889.029058][T13350] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 889.036944][T13350] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 889.058737][T13350] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 889.859440][T13366] device syzkaller0 entered promiscuous mode [ 890.329380][T13378] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 890.426772][T13378] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 890.464851][T13378] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 890.475255][T13378] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 890.484148][T13378] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 890.496751][T13378] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 890.508283][T13378] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 890.518811][T13378] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 890.527482][T13378] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 890.640523][T13378] pit: kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 893.256720][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2240'. [ 895.786894][T13409] overlayfs: missing 'lowerdir' [ 895.793150][T13409] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 895.801272][T13409] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 895.809707][T13409] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 895.817575][T13409] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 895.833539][T13409] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 895.986681][T13412] device syzkaller0 entered promiscuous mode [ 896.040560][ T9361] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 897.110329][ T9361] usb 8-1: Using ep0 maxpacket: 8 [ 897.123223][ T9361] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.144773][ T9361] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.285606][ T9361] usb 8-1: config 0 interface 0 has no altsetting 0 [ 897.380271][ T9361] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 897.389517][ T9361] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.420561][ T9361] usb 8-1: config 0 descriptor?? [ 897.898610][ T9361] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 897.908706][ T9361] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 897.916350][ T9361] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 897.924096][ T9361] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 897.931636][ T9361] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 897.941207][ T9361] mcp2221 0003:04D8:00DD.001F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 898.102408][T12063] usb 8-1: USB disconnect, device number 14 [ 901.374611][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 903.239703][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'. [ 903.561224][T13513] device syzkaller0 entered promiscuous mode [ 905.290948][T13558] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2285'. [ 906.753622][T13570] create_pit_timer: 11 callbacks suppressed [ 906.753676][T13570] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 906.842116][T13570] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 906.858514][T13570] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 906.914623][T13570] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 906.923982][T13570] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 906.936259][T13570] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 906.949508][T13570] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 907.090008][T13570] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 907.098944][T13570] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 907.108516][T13570] pit: kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 909.709562][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2286'. [ 910.321447][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 911.575855][T13636] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2308'. [ 913.857704][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2314'. [ 915.501769][T13665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 915.605206][T13665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.732740][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2328'. [ 919.709904][T13723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.771899][T13723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.029223][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2336'. [ 920.210872][T13732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 920.224912][T13732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 920.233734][T13732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 920.243664][T13732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 920.263687][T13732] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 920.271084][T13732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 920.282037][T11658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.445623][T13737] [U]  [ 920.448884][T13737] [U] K{ [ 920.452862][T13737] [U] T 1ŠFFˊ`GJǘGO/MC [ 920.466820][T13737] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 920.485171][T13737] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 920.506437][T13737] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 920.552007][T13737] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 920.582033][T13737] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 920.604246][T13737] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 920.622671][T13737] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 920.751702][T13737] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 920.765402][T13737] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 920.779580][T13737] [U] 22Ʃ۩X?0;3U [ 920.788338][T13737] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 920.816988][T13737] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 920.828521][T13737] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 920.839217][T13737] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 920.847567][T13737] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 920.860493][T13737] [U] EC [ 920.867132][T13737] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 921.206045][T13733] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 921.406493][T11658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.747799][T11658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.310338][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 923.948853][T11658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.342914][T13730] chnl_net:caif_netlink_parms(): no params data found [ 924.400351][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 924.462774][T13772] device syzkaller0 entered promiscuous mode [ 925.182612][T13779] overlayfs: missing 'lowerdir' [ 925.189060][T13779] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 925.197064][T13779] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 925.205468][T13779] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 925.213314][T13779] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 925.223393][T13779] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 925.441839][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2347'. [ 925.745988][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.761995][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.825912][T13730] device bridge_slave_0 entered promiscuous mode [ 925.885766][T13807] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 926.059430][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.070360][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.084296][T13730] device bridge_slave_1 entered promiscuous mode [ 926.470242][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 927.104819][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.182993][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.194417][T13730] team0: Port device team_slave_0 added [ 928.248397][T13730] team0: Port device team_slave_1 added [ 928.366012][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.393938][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.500613][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.550288][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 928.683625][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.704511][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.775882][T13835] overlayfs: missing 'lowerdir' [ 928.785932][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.812689][T13835] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 928.820639][T13835] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 928.829035][T13835] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 928.836914][T13835] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 928.847213][T13835] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 928.948702][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2360'. [ 929.515754][T13730] device hsr_slave_0 entered promiscuous mode [ 929.530954][T13730] device hsr_slave_1 entered promiscuous mode [ 929.690706][T13858] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2364'. [ 929.957833][T13730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.990565][T13730] Cannot create hsr debugfs directory [ 930.121385][T11658] device hsr_slave_0 left promiscuous mode [ 930.256044][T11658] device hsr_slave_1 left promiscuous mode [ 930.307675][T11658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.323459][T11658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.373137][T11658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.405864][T11658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.477520][T11658] device bridge_slave_1 left promiscuous mode [ 930.501475][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.546504][T11658] device bridge_slave_0 left promiscuous mode [ 930.553843][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.672541][T11658] device veth1_macvtap left promiscuous mode [ 930.678964][T11658] device veth1_vlan left promiscuous mode [ 930.705545][T11658] device veth0_vlan left promiscuous mode [ 931.335952][T11658] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 931.357476][T11658] bond2 (unregistering): Released all slaves [ 931.403380][T11658] bond1 (unregistering): (slave geneve2): Releasing active interface [ 931.440647][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.447534][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.563040][T13892] overlayfs: missing 'lowerdir' [ 931.569448][T13892] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 931.577514][T13892] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 931.585948][T13892] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 931.593905][T13892] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 931.604305][T13892] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 931.901791][T11658] bond1 (unregistering): Released all slaves [ 931.911374][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2371'. [ 932.141406][T13914] create_pit_timer: 13 callbacks suppressed [ 932.141421][T13914] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 932.175311][T13914] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 932.217156][T13914] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 932.235429][T13914] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 932.250387][T13914] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 932.259037][T13914] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 932.279170][T13914] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 932.287961][T13914] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 932.296667][T13914] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 932.318559][T13914] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 932.933703][T11658] team0 (unregistering): Port device team_slave_1 removed [ 933.097460][T11658] team0 (unregistering): Port device team_slave_0 removed [ 933.229633][T11658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.322336][T11658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.168965][T13927] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2378'. [ 934.187460][T11658] team0 (unregistering): Port device bond0 removed [ 934.216169][T11658] bond0 (unregistering): Released all slaves [ 935.534803][T13940] overlayfs: missing 'lowerdir' [ 935.592128][T13941] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 935.603193][T13941] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 935.616192][T13941] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 935.628160][T13941] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 935.654418][T13944] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 935.820687][T13931] device veth0_macvtap left promiscuous mode [ 935.907120][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2381'. [ 936.250379][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2382'. [ 936.571276][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'. [ 937.106667][T13730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 937.146330][T13730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 937.193500][T13730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 937.292644][T13730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 938.185633][T13980] overlayfs: missing 'lowerdir' [ 938.196705][T13980] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 938.204737][T13980] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 938.213193][T13980] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 938.221027][T13980] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 938.237199][T13980] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 938.246857][T13979] overlayfs: failed to set xattr on upper [ 938.300675][T13979] overlayfs: ...falling back to index=off,metacopy=off. [ 938.418114][T13730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.487201][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 938.497771][T13972] fscrypt: Error allocating hmac(sha512): -2 [ 938.511744][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 938.553054][T13730] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.611897][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 938.642442][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.688997][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.696207][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.776108][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2394'. [ 938.833089][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 938.936173][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 939.041160][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 939.120351][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.127538][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.236998][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 939.292570][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 939.342335][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 939.405161][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 939.439790][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 939.505148][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 939.526040][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 939.558838][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 939.579350][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 939.710419][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 939.723756][T13730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.787541][T13730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 939.812172][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 939.837165][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 939.900397][ T4319] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 940.094727][ T4319] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.126242][T14027] create_pit_timer: 6 callbacks suppressed [ 940.126256][T14027] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 940.144699][ T4319] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.164272][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.176668][ T4319] usb 8-1: Product: syz [ 940.187341][ T4319] usb 8-1: Manufacturer: syz [ 940.198749][ T4319] usb 8-1: SerialNumber: syz [ 940.208635][T14032] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 940.257146][T14032] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 940.288619][T14032] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 940.324281][T14032] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 940.346835][T14032] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 940.372380][T14032] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 940.400593][T14032] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 940.438760][T14032] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 940.466376][T14009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.555848][T14009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.652467][T14032] pit: kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 940.701075][ T4319] cdc_ether 8-1:1.0: skipping garbage [ 940.706630][ T4319] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 941.253241][ T4319] usb 8-1: USB disconnect, device number 15 [ 941.433300][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 941.450664][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 941.467454][T13730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.559350][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 941.578512][T14041] overlayfs: missing 'lowerdir' [ 941.596406][T14041] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 941.604485][T14041] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 941.612941][T14041] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 941.620899][T14041] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 941.641620][T14041] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 941.668808][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.690342][ T4319] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 941.747769][T13730] device veth0_vlan entered promiscuous mode [ 941.788112][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 941.802143][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.825323][T13730] device veth1_vlan entered promiscuous mode [ 941.848035][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.889361][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.900294][ T4319] usb 8-1: Using ep0 maxpacket: 8 [ 941.907903][ T4319] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 941.925486][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 941.929157][ T4319] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 941.956245][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 941.972225][ T4319] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.998093][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 942.024030][ T4319] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.037097][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 942.060206][ T4319] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 942.182180][ T4319] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.205058][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 942.249118][T13730] device veth0_macvtap entered promiscuous mode [ 942.313761][ T4319] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 942.339285][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2409'. [ 942.381870][T13730] device veth1_macvtap entered promiscuous mode [ 942.408510][ T4319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.475797][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.481588][ T4319] usbtmc 8-1:16.0: bulk endpoints not found [ 942.508042][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.520699][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.565213][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.576084][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.586956][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.597264][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.610732][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.643966][T13730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.688573][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 942.727157][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 942.775791][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 942.786191][ T4319] usb 8-1: USB disconnect, device number 16 [ 942.836103][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 942.873563][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.903742][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.940930][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.959489][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.969745][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.986826][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.999183][T13730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.016010][T13730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.038688][T13730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.073633][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 943.127014][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 943.224962][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 943.298295][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 943.367750][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 943.437379][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 943.658832][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 943.748702][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.805145][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 943.948056][T13730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.020847][T13730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.116071][T13730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.234412][T13730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.579106][T14089] mmap: syz.7.2414 (14089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 944.662504][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.692523][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.729582][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 944.830858][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.875330][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.957714][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 945.580627][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2419'. [ 945.787656][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2420'. [ 945.991950][T14127] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2421'. [ 951.515387][T14135] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 954.029272][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 954.042335][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2432'. [ 957.635336][ T4276] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 958.050230][ T9528] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 958.474253][ T9528] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.022384][T14235] overlayfs: workdir and upperdir must reside under the same mount [ 959.041388][ T9528] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.116788][ T9528] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.135144][T14238] create_pit_timer: 6 callbacks suppressed [ 959.135159][T14238] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 959.169952][ T9528] usb 8-1: Product: syz [ 959.187055][ T9528] usb 8-1: Manufacturer: syz [ 959.207251][ T9528] usb 8-1: SerialNumber: syz [ 959.625921][T14224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.231489][T14224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.971852][ T9528] cdc_ether 8-1:1.0: skipping garbage [ 962.990455][ T9528] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 963.148033][ T9528] usb 8-1: USB disconnect, device number 17 [ 964.813761][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2451'. [ 969.160346][ T4317] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 969.393279][ T4317] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.428142][ T4317] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 969.468055][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.486453][ T4317] usb 8-1: Product: syz [ 969.510206][ T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 969.510653][ T4317] usb 8-1: Manufacturer: syz [ 969.550565][ T4317] usb 8-1: SerialNumber: syz [ 969.588800][T13732] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 969.712132][ T14] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 969.758853][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.804123][T14291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.825412][ T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 969.841276][T14291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.865554][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.881271][ T4317] cdc_ether 8-1:1.0: skipping garbage [ 969.893620][ T4317] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 969.910282][ T14] usb 5-1: Product: syz [ 969.929210][ T14] usb 5-1: Manufacturer: syz [ 969.949446][ T14] usb 5-1: SerialNumber: syz [ 970.161698][ T14] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input22 [ 970.370817][ T3622] bcm5974 5-1:1.0: could not read from device [ 970.719080][ T4317] usb 8-1: USB disconnect, device number 18 [ 970.728732][ T14] bcm5974 5-1:1.0: could not read from device [ 970.782711][ T3622] bcm5974 5-1:1.0: could not read from device [ 970.884618][ T14] input: failed to attach handler mousedev to device input22, error: -5 [ 970.948746][ T3622] bcm5974 5-1:1.0: could not read from device [ 970.979543][ T3622] bcm5974 5-1:1.0: could not read from device [ 970.989353][ T14] usb 5-1: USB disconnect, device number 12 [ 971.120706][ T4317] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 971.320306][ T4317] usb 8-1: Using ep0 maxpacket: 8 [ 971.326891][ T4317] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 971.370197][ T4317] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 971.409284][ T4317] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.470376][ T4317] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.513878][ T4317] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 971.565441][ T4317] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.603244][ T4317] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 971.627384][T14317] loop9: detected capacity change from 0 to 32768 [ 971.639918][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.683463][T14317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.2469 (14317) [ 972.514515][T14317] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 972.526432][T14317] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 972.529799][T14327] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 972.538132][T14317] BTRFS info (device loop9): turning on sync discard [ 972.551041][T14317] BTRFS info (device loop9): use zlib compression, level 3 [ 972.558325][T14317] BTRFS info (device loop9): turning off barriers [ 972.565224][T14317] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 972.576190][T14317] BTRFS info (device loop9): trying to use backup root at mount time [ 972.587791][T14317] BTRFS info (device loop9): force clearing of disk cache [ 972.595048][T14317] BTRFS info (device loop9): enabling auto defrag [ 972.601725][T14317] BTRFS info (device loop9): max_inline at 0 [ 972.607751][T14317] BTRFS info (device loop9): using free space tree [ 972.832957][T14317] BTRFS error (device loop9): open_ctree failed: -12 [ 972.930552][ T4317] usb 8-1: usb_control_msg returned -71 [ 972.936223][ T4317] usbtmc 8-1:16.0: can't read capabilities [ 973.073298][ T4317] usb 8-1: USB disconnect, device number 19 [ 973.365031][T13189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by udevd (13189) [ 974.868908][T14394] device syzkaller0 entered promiscuous mode [ 975.670228][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 976.940159][ T14] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 979.018533][ T14] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.546651][ T14] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.556764][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.565062][ T14] usb 8-1: Product: syz [ 979.569339][ T14] usb 8-1: Manufacturer: syz [ 979.574330][ T14] usb 8-1: SerialNumber: syz [ 979.826287][T14428] overlayfs: missing 'lowerdir' [ 979.850919][T14428] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.858866][T14428] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 979.867601][T14428] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.875852][T14428] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 979.894875][T14430] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 979.997830][ T14] cdc_ether 8-1:1.0: skipping garbage [ 980.617884][ T14] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 980.627579][ T14] usb 8-1: USB disconnect, device number 20 [ 980.718798][ T4276] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 982.282538][T14464] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2497'. [ 984.755564][T14467] loop4: detected capacity change from 0 to 32768 [ 984.812367][T14467] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2499 (14467) [ 984.911483][ T14] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 984.919897][T14467] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 985.008982][T14467] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 985.112623][T14467] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 985.151786][ T14] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.163588][T14467] BTRFS info (device loop4): use zstd compression, level 3 [ 985.182539][ T14] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.206604][T14467] BTRFS info (device loop4): using free space tree [ 985.220153][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.250508][ T14] usb 10-1: Product: syz [ 985.260606][ T14] usb 10-1: Manufacturer: syz [ 985.265342][ T14] usb 10-1: SerialNumber: syz [ 985.284356][T14474] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 985.524423][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.540435][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.575687][ T14] cdc_ether 10-1:1.0: skipping garbage [ 985.588860][ T14] cdc_ether: probe of 10-1:1.0 failed with error -22 [ 985.601396][ T14] usb 10-1: USB disconnect, device number 18 [ 985.703187][T14467] BTRFS error (device loop4): open_ctree failed: -22 [ 986.078341][T14517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 986.170218][ T14] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 986.195688][T14523] overlayfs: workdir and upperdir must reside under the same mount [ 986.360479][ T14] usb 10-1: Using ep0 maxpacket: 8 [ 986.375412][ T14] usb 10-1: config index 0 descriptor too short (expected 301, got 72) [ 986.486968][ T14] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 986.638605][ T14] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 986.808412][ T14] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 986.976112][ T14] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 987.683109][ T14] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.699080][ T14] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 987.708502][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.911018][ T14] usb 10-1: can't set config #16, error -71 [ 988.666133][ T14] usb 10-1: USB disconnect, device number 19 [ 988.852544][T14538] device syzkaller0 entered promiscuous mode [ 989.137847][T14551] [U]  [ 989.140903][T14551] [U] K{ [ 989.144843][T14551] [U] T 1ŠFFˊ`GJǘGO/MC [ 989.155627][T14551] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 989.173243][T14551] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 989.199051][T14551] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 989.243792][T14551] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 989.270140][T14551] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 989.284607][T14551] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 989.308696][T14551] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 989.422621][T14551] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 989.434498][T14551] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 989.448754][T14551] [U] 22Ʃ۩X?0;3U [ 989.457150][T14551] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 989.485472][T14551] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 989.496165][T14551] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 989.505589][T14551] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 989.513895][T14551] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 989.526691][T14551] [U] EC [ 989.539606][T14551] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 989.900406][T14548] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 990.024062][T13732] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 991.310962][T14553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 992.874512][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.880873][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.920533][ T14] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 993.919106][T14583] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 994.021630][ T14] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.069455][ T14] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.134848][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.188828][ T14] usb 9-1: Product: syz [ 994.201665][ T14] usb 9-1: Manufacturer: syz [ 995.062221][ T14] usb 9-1: SerialNumber: syz [ 995.308664][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.348583][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.382024][ T14] cdc_ether 9-1:1.0: skipping garbage [ 995.392198][ T14] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 995.484790][ T14] usb 9-1: USB disconnect, device number 19 [ 995.736572][T14602] device syzkaller0 entered promiscuous mode [ 996.000410][ T14] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 996.190174][ T14] usb 9-1: Using ep0 maxpacket: 8 [ 996.980551][ T14] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 996.996683][ T14] usb 9-1: can't read configurations, error -71 [ 998.061198][ T4276] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 998.357840][T14605] loop4: detected capacity change from 0 to 32768 [ 998.411279][T14605] gfs2: Bad value for 'quota' [ 998.583771][T14635] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 998.844584][T14614] loop2: detected capacity change from 0 to 32768 [ 998.853234][T14635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 998.904213][T14614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2531 (14614) [ 998.926805][T14614] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 999.060308][T14614] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 999.179753][T14614] BTRFS info (device loop2): using free space tree [ 999.253759][T14639] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 999.398401][T14614] BTRFS error (device loop2): open_ctree failed: -12 [ 999.809821][T13189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (13189) [ 1000.853872][T14678] device syzkaller0 entered promiscuous mode [ 1002.398251][T14688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.434049][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.442715][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.607364][T14689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.687031][T14689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.928063][T14733] loop9: detected capacity change from 0 to 32768 [ 1005.997027][T14733] XFS (loop9): Mounting V5 Filesystem [ 1006.079055][T14733] XFS (loop9): Ending clean mount [ 1006.198625][T14733] XFS (loop9): Quotacheck needed: Please wait. [ 1006.307109][T14733] XFS (loop9): Quotacheck: Done. [ 1006.411075][ T26] audit: type=1804 audit(1784043654.681:11): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2554" name="/newroot/221/file0/file0/file0" dev="loop9" ino=9284 res=1 errno=0 [ 1006.451165][T14689] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.515606][T14689] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.543288][T14689] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.554637][T14689] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.587504][ T9356] XFS (loop9): Unmounting Filesystem [ 1006.833545][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2550'. [ 1008.335156][T14756] [U]  [ 1008.337981][T14756] [U] K{ [ 1008.421510][T14756] [U] T 1ŠFFˊ`GJǘGO/MC [ 1008.483326][T14756] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1008.590594][T14756] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1008.665916][T14756] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1008.705648][T14763] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1008.760351][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1008.877301][T14768] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2569'. [ 1008.957200][T14756] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1009.220556][T14756] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1009.410614][T14756] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1009.461363][T14756] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< 23 [ 1011.507606][T14782] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1012.619519][ T26] audit: type=1804 audit(1784043660.891:12): pid=14782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2564" name="/newroot/247/file1/bus" dev="loop8" ino=17059 res=1 errno=0 [ 1012.667227][T14782] (syz.8.2564,14782,0):ocfs2_get_clusters:606 ERROR: status = -34 [ 1012.701513][T14782] (syz.8.2564,14782,0):ocfs2_reflink_remap_extent:4534 ERROR: status = -34 [ 1012.750189][T14782] (syz.8.2564,14782,0):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34 [ 1012.933506][T14782] (syz.8.2564,14782,1):ocfs2_remap_file_range:2710 ERROR: status = -34 [ 1013.492382][T14836] [U]  [ 1013.495402][T14836] [U] K{ [ 1013.499262][T14836] [U] T 1ŠFFˊ`GJǘGO/MC [ 1013.515138][T14836] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1013.533702][T14836] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1013.552132][T14836] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1013.597965][T14836] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1013.625147][T14836] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1013.639674][T14836] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1013.655718][T14836] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1013.762988][T14836] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1013.775015][T14836] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1013.789491][T14836] [U] 22Ʃ۩X?0;3U [ 1013.798747][T14836] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1013.827383][T14836] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1013.838692][T14836] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1013.848327][T14836] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1013.856740][T14836] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1013.869559][T14836] [U] EC [ 1013.874942][T14836] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1014.129124][T14832] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1014.458952][ T9265] ocfs2: Unmounting device (7,8) on (node local) [ 1014.827404][T14856] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1015.937542][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2583'. [ 1015.966853][T14837] loop2: detected capacity change from 0 to 32768 [ 1015.997868][T14837] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2578 (14837) [ 1016.073844][T14837] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1016.154875][T14837] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1016.227459][T14837] BTRFS info (device loop2): use zlib compression, level 3 [ 1016.287179][T14837] BTRFS info (device loop2): using free space tree [ 1016.809035][T14837] BTRFS info (device loop2): enabling ssd optimizations [ 1017.139364][ T26] audit: type=1800 audit(1784043665.411:13): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2578" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1018.916387][T13730] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1020.847567][T14945] overlayfs: missing 'lowerdir' [ 1020.904848][T14946] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1020.912969][T14946] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1020.921867][T14946] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1020.929788][T14946] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1020.986872][T14947] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1023.831857][T14999] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2609'. [ 1024.518177][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2612'. [ 1025.635260][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2613'. [ 1025.854621][T15020] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1025.905509][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1026.054840][T15028] [ 1026.057239][T15028] ============================================ [ 1026.063397][T15028] WARNING: possible recursive locking detected [ 1026.069560][T15028] syzkaller #0 Not tainted [ 1026.073981][T15028] -------------------------------------------- [ 1026.080135][T15028] syz.2.2619/15028 is trying to acquire lock: [ 1026.086235][T15028] ffffffff8d403d78 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.096441][T15028] [ 1026.096441][T15028] but task is already holding lock: [ 1026.103817][T15028] ffffffff8d403d78 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.113930][T15028] [ 1026.113930][T15028] other info that might help us debug this: [ 1026.122173][T15028] Possible unsafe locking scenario: [ 1026.122173][T15028] [ 1026.129635][T15028] CPU0 [ 1026.132924][T15028] ---- [ 1026.136207][T15028] lock(qp_broker_list.mutex); [ 1026.141086][T15028] lock(qp_broker_list.mutex); [ 1026.145961][T15028] [ 1026.145961][T15028] *** DEADLOCK *** [ 1026.145961][T15028] [ 1026.154115][T15028] May be due to missing lock nesting notation [ 1026.154115][T15028] [ 1026.162443][T15028] 1 lock held by syz.2.2619/15028: [ 1026.167577][T15028] #0: ffffffff8d403d78 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.178130][T15028] [ 1026.178130][T15028] stack backtrace: [ 1026.184048][T15028] CPU: 1 PID: 15028 Comm: syz.2.2619 Not tainted syzkaller #0 [ 1026.191536][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1026.201613][T15028] Call Trace: [ 1026.204919][T15028] [ 1026.207876][T15028] dump_stack_lvl+0x188/0x24e [ 1026.212603][T15028] ? show_regs_print_info+0x12/0x12 [ 1026.217824][T15028] ? load_image+0x410/0x410 [ 1026.222361][T15028] __lock_acquire+0x12c8/0x7c40 [ 1026.227262][T15028] ? mark_lock+0x94/0x320 [ 1026.231623][T15028] ? verify_lock_unused+0x140/0x140 [ 1026.236845][T15028] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1026.242857][T15028] ? __lock_acquire+0x7c40/0x7c40 [ 1026.247926][T15028] ? lock_chain_count+0x20/0x20 [ 1026.252811][T15028] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1026.258801][T15028] ? lockdep_hardirqs_on+0x94/0x140 [ 1026.264053][T15028] lock_acquire+0x1bb/0x4a0 [ 1026.268620][T15028] ? vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.274016][T15028] ? __might_sleep+0xd0/0xd0 [ 1026.278676][T15028] ? read_lock_is_recursive+0x10/0x10 [ 1026.284079][T15028] ? kasan_set_track+0x60/0x70 [ 1026.288936][T15028] ? kasan_save_free_info+0x27/0x40 [ 1026.294159][T15028] ? ____kasan_slab_free+0x126/0x1f0 [ 1026.299483][T15028] ? slab_free_freelist_hook+0x133/0x1b0 [ 1026.305142][T15028] ? vmci_ctx_put+0x5a6/0xc10 [ 1026.309881][T15028] ? vmci_ctx_enqueue_datagram+0x3bf/0x430 [ 1026.315801][T15028] ? vmci_datagram_dispatch+0x449/0xc20 [ 1026.321374][T15028] __mutex_lock+0x12d/0xae0 [ 1026.325955][T15028] ? vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.331350][T15028] ? do_syscall_64+0x58/0xa0 [ 1026.335966][T15028] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.342060][T15028] ? vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.347459][T15028] ? mutex_lock_nested+0x10/0x10 [ 1026.352425][T15028] ? mark_lock+0x94/0x320 [ 1026.356786][T15028] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1026.362793][T15028] vmci_qp_broker_detach+0xe6/0xeb0 [ 1026.368010][T15028] ? kasan_quarantine_put+0xd4/0x210 [ 1026.373403][T15028] ? lockdep_hardirqs_on+0x94/0x140 [ 1026.378635][T15028] ? qp_notify_peer+0x1f0/0x1f0 [ 1026.383545][T15028] ? slab_free_freelist_hook+0x133/0x1b0 [ 1026.389225][T15028] ? vmci_ctx_put+0x5a6/0xc10 [ 1026.393930][T15028] ? __kmem_cache_free+0xb6/0x200 [ 1026.398977][T15028] vmci_ctx_put+0x605/0xc10 [ 1026.403520][T15028] ? vmci_ctx_put+0x13b/0xc10 [ 1026.408238][T15028] ? vmci_ctx_destroy+0xf0/0xf0 [ 1026.413116][T15028] ? __lock_acquire+0x7c40/0x7c40 [ 1026.418168][T15028] ? do_raw_spin_lock+0x128/0x2f0 [ 1026.423249][T15028] ? preempt_schedule_thunk+0x16/0x18 [ 1026.428759][T15028] vmci_ctx_enqueue_datagram+0x3bf/0x430 [ 1026.434434][T15028] vmci_datagram_dispatch+0x449/0xc20 [ 1026.439885][T15028] ? vmci_is_context_owner+0xd0/0xd0 [ 1026.445201][T15028] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1026.451225][T15028] vmci_qp_broker_detach+0x875/0xeb0 [ 1026.456533][T15028] ? lockdep_hardirqs_on+0x94/0x140 [ 1026.461755][T15028] ? qp_notify_peer+0x1f0/0x1f0 [ 1026.466663][T15028] ? vmci_ctx_put+0x5a6/0xc10 [ 1026.471361][T15028] ? __kmem_cache_free+0xb6/0x200 [ 1026.476402][T15028] vmci_ctx_put+0x605/0xc10 [ 1026.481010][T15028] ? vmci_ctx_put+0x13b/0xc10 [ 1026.485714][T15028] ? vmci_ctx_destroy+0xf0/0xf0 [ 1026.490594][T15028] ? do_raw_spin_lock+0x128/0x2f0 [ 1026.495640][T15028] ? __rwlock_init+0x140/0x140 [ 1026.500423][T15028] ? do_raw_spin_unlock+0x11d/0x230 [ 1026.505653][T15028] vmci_host_close+0x8d/0x140 [ 1026.510342][T15028] ? vmci_host_open+0xe0/0xe0 [ 1026.515031][T15028] __fput+0x20a/0x8b0 [ 1026.519098][T15028] task_work_run+0x1d0/0x260 [ 1026.523754][T15028] ? task_work_cancel+0x220/0x220 [ 1026.528798][T15028] ? __close_range+0x20c/0x770 [ 1026.533628][T15028] ? exit_to_user_mode_loop+0x3b/0x110 [ 1026.539169][T15028] exit_to_user_mode_loop+0xe6/0x110 [ 1026.544521][T15028] exit_to_user_mode_prepare+0xee/0x180 [ 1026.550099][T15028] syscall_exit_to_user_mode+0x16/0x40 [ 1026.555586][T15028] do_syscall_64+0x58/0xa0 [ 1026.560039][T15028] ? clear_bhb_loop+0x60/0xb0 [ 1026.564765][T15028] ? clear_bhb_loop+0x60/0xb0 [ 1026.569467][T15028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.575397][T15028] RIP: 0033:0x7ff74d99de59 [ 1026.579839][T15028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.599471][T15028] RSP: 002b:00007ff74e92d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1026.607904][T15028] RAX: 0000000000000000 RBX: 00007ff74dc26090 RCX: 00007ff74d99de59 [ 1026.615892][T15028] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 1026.623884][T15028] RBP: 00007ff74da33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1026.631875][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.639855][T15028] R13: 00007ff74dc26128 R14: 00007ff74dc26090 R15: 00007ffe834ee798 [ 1026.647860][T15028]