last executing test programs: 19.521072869s ago: executing program 2 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r3, &(0x7f0000000d40)=""/43, 0x2b) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r7}, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 16.424698005s ago: executing program 2 (id=56): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="93d9f7255baba7970886c06b31d58b288066", @ANYRES64=0x0], 0x20) 13.265933425s ago: executing program 0 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) close(0x3) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x0) 12.916365888s ago: executing program 4 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 12.091461013s ago: executing program 4 (id=69): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, r5) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 11.744469176s ago: executing program 0 (id=70): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$eJzs3U9LW1kUAPDzYkRHGCLMgCgD8wb3QR1mrwwKMoGBkSxmViNjZAbjCApCu9B01XVX3bSbfoB2U+i20EXptl+gFIotdKNduSikxKRGY1L/lJhSf7+NB+8579773iMvWeTk7x9WV5bWNpb39nYiM5j0Z6fj4dh+EsORib6oqwQA8DXZr1Zjt1rX67UAAJfD8x8Arp7m8z858fxPKo33BN/dGx/txeIAgK7w+R8Arp6FP//6baZQmP1jNx2MWL25Wdws1v/Wx2eW478oRykmIhfvI6qH6vHt+cLsRFrzejiKq9uN+u3NYt/x+snIxfDJ+rn5wuxkWne8vj+GGvUvhqIUU5GL79vXT7Wr74+I8SPz5yMXz/+JtSjHUtRqm/Vbk2n66++FlvkHDvIAAAAAAAAAAAAAAAAAAAAAAKAb8pmD1jnVgTRt278nn08/ahmv1x/tD/RNm/5Ac4f9gVr7+2RjLNvbvQMAAAAAAAAAAAAAAAAAAMCXYuPa9ZXFcrm0/qng/2f3n5yWc8YgaczbNmcgIj5/ijMG3/706k7nnBvnOT8XCKY7Dz3+set7Px7UTvt5q57u/Dv688bIL51yItu1NWdOuSjZdtt5m+twazVuyMrF1/Pg8Jq+OzX51sJl3eF9rf8ZuTu9+Gjr5ZuzHqdXr0gAAAAAAAAAAAAAAAAAAHB1Nb/02+uVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvNH//v0OQRC3IRkTnnHJpPYnk4Hhthiq93iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwIAAD//7QZm14=") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 11.629247421s ago: executing program 1 (id=71): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\f', @ANYRES32=r0, @ANYBLOB="bd1e7c76a7679b7d50cabc021372831eb5ce77d641d84bc389ae07d2979cbc6ca2aab83f5d63745385cc2fe742a6b9907937fef528af31335fb4958b06e63f74e241f69bbff68dddeb5ee8113e5605184466851ee8f326005d886a62f9b4b1e8826555ee675b5efd16c4d3e3038767b95149f4c3b5f302553d07964b55db3f5a79c19ad35ed160e1d2230ba7ba4d30ef37ac16ba1f4304f6661d0ca9ccd529fd543db81787547218b886fe928b9087f3"], 0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.636046263s ago: executing program 0 (id=74): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x38}, @dev}}}}}}, 0x0) 9.86525007s ago: executing program 3 (id=76): pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000066c0), r1) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = gettid() ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x140026}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f00000000c0)=0x594, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt(r1, 0x0, 0x0, &(0x7f0000000180)="3da312757366b13287d7dbd5b8070c2c74cb0daba6348773626070e3643da0c9059f94845a4d3bd86248a5f58721b6b4fb977a7492a49ae790b532816f80379aa9535fc00983d126a04ad073ffa355dac937497c653f7e5ee9c7c527e0de40b52731da51b663987c1fc7a6257d756294b89a4d23fd9ede038352386b99e7656a9d46af9a7b13fcd0b3a7", 0x8a) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x70bd29, 0x2ddfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) 9.130152571s ago: executing program 3 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x80000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03S\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\x00\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xdc\xdc\xe6*\x9c\xfdV\x82\x05\xcd@\xb1.P\xc9\xb0^\x83\t\xfd\x1c\x04\xd4*\x9bt:U\xda\xbe\x8f\x91\xc1\x92\xc0\xf0\x9b\xf5\rZ\xcdj\xc4\x9d\"\n\xa9jsB\n\xd4\xeb\xa6k>\xb2X\xf6\x1b\xef\xda\xbb\xc2\xfd\xec\xf1\xbf\xa5\xde#\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x10, 0x1000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0x2, 0x0, &(0x7f0000002140)) fanotify_mark(r3, 0x455, 0x0, r4, 0x0) fanotify_mark(r3, 0x7e, 0x800003a, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 6.902272367s ago: executing program 0 (id=85): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)="8033", 0x0, 0x3}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 6.317870438s ago: executing program 0 (id=86): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_open_procfs(0x0, &(0x7f0000019240)='net/udp6\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 6.16069439s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0x4000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000001c0)=[@cr4={0x1, 0x3420e5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000feb000/0x2000)=nil) getrlimit(0x0, 0x0) 3.657064427s ago: executing program 1 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x80000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03S\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\x00\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xdc\xdc\xe6*\x9c\xfdV\x82\x05\xcd@\xb1.P\xc9\xb0^\x83\t\xfd\x1c\x04\xd4*\x9bt:U\xda\xbe\x8f\x91\xc1\x92\xc0\xf0\x9b\xf5\rZ\xcdj\xc4\x9d\"\n\xa9jsB\n\xd4\xeb\xa6k>\xb2X\xf6\x1b\xef\xda\xbb\xc2\xfd\xec\xf1\xbf\xa5\xde#\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, 0x0, 0x10004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3.215519099s ago: executing program 2 (id=90): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0xb, @empty, 0x400}}, 0x0, 0x0, 0x18, 0x0, "61f1c2e7f69e0cf833f2ded7817fd82a5231af1e6bd0b81f7eec6dda14fd325064a85f25bbbb4592f974409b24865e3feefd76cbf0810eb0158b558e3bc7f9b9d6e14d174fc6902dbaaddb9aa41ea4d2"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2e, &(0x7f0000000000)=0xa, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x20}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000106, 0x0, 0xe2}]}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x442, 0x20000) 3.047847072s ago: executing program 1 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 2.950191126s ago: executing program 3 (id=92): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, r5) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 1.422253339s ago: executing program 1 (id=93): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x58) 751.860941ms ago: executing program 4 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) close(0x3) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x0) 643.978582ms ago: executing program 2 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 177.265982ms ago: executing program 2 (id=96): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x60840, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xfe9) 0s ago: executing program 4 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r1 = memfd_create(&(0x7f0000000180)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\x03\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\x8eW\xd4\r\x8c\xd7\xd3\b\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\x00'/212, 0xa) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x80, 0x4) fchmod(r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 155.030776][ T5755] cgroup: Unknown subsys name 'net' [ 155.151372][ T5755] cgroup: Unknown subsys name 'cpuset' [ 155.165107][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.554834][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.813952][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.823140][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.832729][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.841906][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.857285][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.874249][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.883141][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.892193][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.937109][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.948871][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.950151][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.961433][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.976485][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.983731][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.988883][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.000259][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.004450][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.019447][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.023827][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.055702][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.074931][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.099672][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.113136][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.125908][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.136793][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.469624][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 166.547061][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 166.660982][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 166.792184][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 167.023404][ T5778] Bluetooth: hci0: command tx timeout [ 167.036852][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 167.105338][ T5778] Bluetooth: hci3: command tx timeout [ 167.110936][ T5778] Bluetooth: hci1: command tx timeout [ 167.186050][ T5778] Bluetooth: hci2: command tx timeout [ 167.264970][ T5778] Bluetooth: hci4: command tx timeout [ 167.512338][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.522381][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.530129][ T5773] bridge_slave_0: entered allmulticast mode [ 167.540076][ T5773] bridge_slave_0: entered promiscuous mode [ 167.592868][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.603424][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.611017][ T5775] bridge_slave_0: entered allmulticast mode [ 167.645984][ T5775] bridge_slave_0: entered promiscuous mode [ 167.693034][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.700504][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.711807][ T5773] bridge_slave_1: entered allmulticast mode [ 167.721946][ T5773] bridge_slave_1: entered promiscuous mode [ 167.766221][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.774955][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.782538][ T5775] bridge_slave_1: entered allmulticast mode [ 167.794080][ T5775] bridge_slave_1: entered promiscuous mode [ 167.804346][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.811782][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.820120][ T5783] bridge_slave_0: entered allmulticast mode [ 167.828696][ T5783] bridge_slave_0: entered promiscuous mode [ 167.904592][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.912173][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.919774][ T5783] bridge_slave_1: entered allmulticast mode [ 167.931787][ T5783] bridge_slave_1: entered promiscuous mode [ 167.993849][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.048990][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.056760][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.064526][ T5774] bridge_slave_0: entered allmulticast mode [ 168.072522][ T5774] bridge_slave_0: entered promiscuous mode [ 168.113874][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.132060][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.166927][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.174669][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.182058][ T5774] bridge_slave_1: entered allmulticast mode [ 168.191065][ T5774] bridge_slave_1: entered promiscuous mode [ 168.200303][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.208117][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.215892][ T5788] bridge_slave_0: entered allmulticast mode [ 168.224663][ T5788] bridge_slave_0: entered promiscuous mode [ 168.265034][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.307147][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.340141][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.347811][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.355534][ T5788] bridge_slave_1: entered allmulticast mode [ 168.364070][ T5788] bridge_slave_1: entered promiscuous mode [ 168.478032][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.537520][ T5773] team0: Port device team_slave_0 added [ 168.550083][ T5775] team0: Port device team_slave_0 added [ 168.586568][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.625315][ T5773] team0: Port device team_slave_1 added [ 168.637242][ T5775] team0: Port device team_slave_1 added [ 168.674483][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.690788][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.708632][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.773456][ T5783] team0: Port device team_slave_0 added [ 168.905756][ T5783] team0: Port device team_slave_1 added [ 168.940797][ T5788] team0: Port device team_slave_0 added [ 168.949100][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.956470][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.982917][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.997286][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.004790][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.031270][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.073434][ T5774] team0: Port device team_slave_0 added [ 169.086600][ T5788] team0: Port device team_slave_1 added [ 169.094561][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.101649][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.128242][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.139124][ T5778] Bluetooth: hci0: command tx timeout [ 169.147888][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.155444][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.181816][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.193522][ T5778] Bluetooth: hci1: command tx timeout [ 169.193566][ T5777] Bluetooth: hci3: command tx timeout [ 169.241476][ T5774] team0: Port device team_slave_1 added [ 169.263043][ T5778] Bluetooth: hci2: command tx timeout [ 169.314195][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.321294][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.347739][ T5778] Bluetooth: hci4: command tx timeout [ 169.354933][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.416200][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.423392][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.449670][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.466626][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.473822][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.500006][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.528944][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.536413][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.563290][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.624589][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.631629][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.658199][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.689639][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.696841][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.723559][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.830816][ T5773] hsr_slave_0: entered promiscuous mode [ 169.839447][ T5773] hsr_slave_1: entered promiscuous mode [ 169.860701][ T5775] hsr_slave_0: entered promiscuous mode [ 169.869350][ T5775] hsr_slave_1: entered promiscuous mode [ 169.877385][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 169.883351][ T5775] Cannot create hsr debugfs directory [ 169.986569][ T5788] hsr_slave_0: entered promiscuous mode [ 169.995460][ T5788] hsr_slave_1: entered promiscuous mode [ 170.003078][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 170.008944][ T5788] Cannot create hsr debugfs directory [ 170.169760][ T5774] hsr_slave_0: entered promiscuous mode [ 170.178349][ T5774] hsr_slave_1: entered promiscuous mode [ 170.186290][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 170.192117][ T5774] Cannot create hsr debugfs directory [ 170.211053][ T5783] hsr_slave_0: entered promiscuous mode [ 170.219421][ T5783] hsr_slave_1: entered promiscuous mode [ 170.227957][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 170.233880][ T5783] Cannot create hsr debugfs directory [ 171.182882][ T5778] Bluetooth: hci0: command tx timeout [ 171.263133][ T5778] Bluetooth: hci1: command tx timeout [ 171.263173][ T5777] Bluetooth: hci3: command tx timeout [ 171.343474][ T5778] Bluetooth: hci2: command tx timeout [ 171.424172][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.426687][ T5778] Bluetooth: hci4: command tx timeout [ 171.449766][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.481283][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.513428][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.585641][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.620587][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.641479][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.665919][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.822285][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.874698][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.912470][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.966407][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.149525][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.201006][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.255899][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.276792][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.555224][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.579702][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.599906][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.664328][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.755083][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.872455][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.977589][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.039455][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.046913][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.104347][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.146297][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.153758][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.177642][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.247155][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.254544][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.266497][ T5778] Bluetooth: hci0: command tx timeout [ 173.341990][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.348955][ T5778] Bluetooth: hci1: command tx timeout [ 173.354496][ T5778] Bluetooth: hci3: command tx timeout [ 173.382894][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.390236][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.423201][ T5778] Bluetooth: hci2: command tx timeout [ 173.469835][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.477205][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.503632][ T5778] Bluetooth: hci4: command tx timeout [ 173.540336][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.547703][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.711155][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.990867][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.108353][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.115968][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.223721][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.252223][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.259781][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.575313][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.654997][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.662467][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.701591][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.781406][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.788787][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.011787][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.399610][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.408078][ T5773] veth0_vlan: entered promiscuous mode [ 175.636452][ T5773] veth1_vlan: entered promiscuous mode [ 175.731369][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.808641][ T5775] veth0_vlan: entered promiscuous mode [ 175.943351][ T5775] veth1_vlan: entered promiscuous mode [ 176.105759][ T5788] veth0_vlan: entered promiscuous mode [ 176.123128][ T5773] veth0_macvtap: entered promiscuous mode [ 176.188395][ T5773] veth1_macvtap: entered promiscuous mode [ 176.226358][ T5788] veth1_vlan: entered promiscuous mode [ 176.354336][ T5774] veth0_vlan: entered promiscuous mode [ 176.390189][ T5775] veth0_macvtap: entered promiscuous mode [ 176.439725][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.461934][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.477389][ T5774] veth1_vlan: entered promiscuous mode [ 176.573560][ T5775] veth1_macvtap: entered promiscuous mode [ 176.620846][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.685706][ T5788] veth0_macvtap: entered promiscuous mode [ 176.761817][ T1127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.788799][ T1127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.809988][ T5788] veth1_macvtap: entered promiscuous mode [ 176.860654][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.915355][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.925706][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.094023][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.282992][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.300022][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.335659][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.373952][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.416993][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.442152][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.571599][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.597267][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.635157][ T5774] veth0_macvtap: entered promiscuous mode [ 177.677749][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.702968][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.768155][ T5774] veth1_macvtap: entered promiscuous mode [ 178.064964][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.171361][ T5783] veth0_vlan: entered promiscuous mode [ 178.245477][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.339010][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.371197][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.404544][ T5783] veth1_vlan: entered promiscuous mode [ 178.436309][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.506798][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.797943][ T5783] veth0_macvtap: entered promiscuous mode [ 178.850293][ T5783] veth1_macvtap: entered promiscuous mode [ 179.099681][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.252996][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.351851][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.387137][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.457794][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.477622][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.130888][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.202763][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.473763][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.500867][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.632917][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.640927][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.971910][ T5773] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 182.993319][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.013087][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.178673][ T248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.235926][ T248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.559567][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.614350][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.715537][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 184.986721][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.966086][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.044197][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.085426][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.603228][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.611245][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.853784][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.899340][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.244598][ T5996] loop0: detected capacity change from 0 to 128 [ 191.270253][ T5996] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.218151][ T5996] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.464346][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 199.204884][ T6017] binder: 6009:6017 ioctl c0306201 0 returned -14 [ 200.589598][ T6019] loop1: detected capacity change from 0 to 512 [ 200.990318][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 201.403195][ T5829] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 201.550926][ T6032] loop3: detected capacity change from 0 to 128 [ 201.563995][ T9] hid-generic 0003:0004:FFFFFFFE.0001: unknown main item tag 0x0 [ 201.595840][ T9] hid-generic 0003:0004:FFFFFFFE.0001: unknown main item tag 0x0 [ 201.611191][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 201.653203][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.702978][ T9] hid-generic 0003:0004:FFFFFFFE.0001: unknown main item tag 0x0 [ 201.748666][ T5829] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.764638][ T6032] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.819597][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.859015][ T9] hid-generic 0003:0004:FFFFFFFE.0001: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 201.894037][ T6032] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.897814][ T5829] usb 1-1: config 0 descriptor?? [ 202.522064][ T5829] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.643108][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.830166][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.014549][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.201119][ T5829] usb 1-1: USB disconnect, device number 2 [ 203.414246][ T6043] netlink: 'syz.4.25': attribute type 3 has an invalid length. [ 203.479646][ T6043] netlink: 'syz.4.25': attribute type 3 has an invalid length. [ 203.537736][ T6040] fido_id[6040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.005584][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.012205][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.203571][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 204.244932][ T6052] loop3: detected capacity change from 0 to 8 [ 204.629651][ T6052] SQUASHFS error: Failed to read block 0x2d7: -5 [ 204.677817][ T6052] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 205.147062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 205.154582][ T6060] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 205.383221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 206.541755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 206.545231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.557331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 206.643734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 206.645491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.652213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 206.950789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.053324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 207.055075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 208.128375][ T6063] loop4: detected capacity change from 0 to 2048 [ 208.250476][ T6063] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 208.326530][ T6063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.551010][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 208.634008][ T6074] cgroup: Unknown subsys name 'cpuset' [ 208.924379][ T6074] loop1: detected capacity change from 0 to 2048 [ 208.960347][ T6078] loop0: detected capacity change from 0 to 764 [ 208.973390][ T6074] ======================================================= [ 208.973390][ T6074] WARNING: The mand mount option has been deprecated and [ 208.973390][ T6074] and is ignored by this kernel. Remove the mand [ 208.973390][ T6074] option from the mount to silence this warning. [ 208.973390][ T6074] ======================================================= [ 209.052431][ T6078] iso9660: Unknown parameter '/dev/kvm' [ 209.091883][ T6081] loop3: detected capacity change from 0 to 256 [ 209.365777][ T6074] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 209.644117][ T6086] loop2: detected capacity change from 0 to 128 [ 209.702440][ T6086] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 210.102120][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 211.423062][ T5829] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 211.542388][ T6108] loop4: detected capacity change from 0 to 128 [ 211.654751][ T5829] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 211.855033][ T6099] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 212.012487][ T6099] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 212.138418][ T6099] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 212.151560][ T6104] loop3: detected capacity change from 0 to 2048 [ 212.316696][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.331841][ T5829] usb 2-1: config 0 descriptor?? [ 212.342296][ T6108] input: syz1 as /devices/virtual/input/input6 [ 212.368494][ T5829] asix 2-1:0.0: probe with driver asix failed with error -22 [ 212.444468][ T6104] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 212.604962][ T6104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.689320][ T9] usb 2-1: USB disconnect, device number 2 [ 215.008665][ T5829] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 215.288459][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.354549][ T5829] usb 4-1: not running at top speed; connect to a high speed hub [ 215.413780][ T5829] usb 4-1: config 56 has an invalid interface number: 252 but max is 0 [ 215.508705][ T5829] usb 4-1: config 56 has no interface number 0 [ 215.593440][ T5829] usb 4-1: config 56 interface 252 has no altsetting 0 [ 215.684488][ T5829] usb 4-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=28.76 [ 215.744473][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 215.759959][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.782051][ T5829] usb 4-1: Product: syz [ 215.807137][ T5829] usb 4-1: Manufacturer: syz [ 215.811962][ T5829] usb 4-1: SerialNumber: syz [ 216.140508][ T6131] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 216.299926][ T5829] appletouch 4-1:56.252: Could not find int-in endpoint [ 216.352833][ T5829] appletouch 4-1:56.252: probe with driver appletouch failed with error -5 [ 216.385416][ T5829] usbhid 4-1:56.252: couldn't find an input interrupt endpoint [ 216.477203][ T5829] usb 4-1: USB disconnect, device number 2 [ 218.253212][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 218.478186][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.542900][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.613053][ T5831] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.693029][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.804360][ T5831] usb 4-1: config 0 descriptor?? [ 219.364438][ T5831] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 219.516680][ T5831] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input7 [ 220.134747][ T5831] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 220.264596][ T5831] usb 4-1: USB disconnect, device number 3 [ 220.486837][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 221.056420][ T6166] fido_id[6166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 221.152359][ T6173] loop0: detected capacity change from 0 to 256 [ 221.210708][ T6173] FAT-fs (loop0): Directory bread(block 1285) failed [ 221.249243][ T6173] FAT-fs (loop0): Directory bread(block 1286) failed [ 221.295867][ T6173] FAT-fs (loop0): Directory bread(block 1287) failed [ 221.353511][ T6173] FAT-fs (loop0): Directory bread(block 1288) failed [ 221.416120][ T6173] FAT-fs (loop0): Directory bread(block 1285) failed [ 221.437261][ T6173] FAT-fs (loop0): Directory bread(block 1286) failed [ 221.457711][ T5831] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 221.506497][ T6173] FAT-fs (loop0): Directory bread(block 1287) failed [ 221.526651][ T6173] FAT-fs (loop0): Directory bread(block 1288) failed [ 221.570673][ T6173] FAT-fs (loop0): Directory bread(block 1285) failed [ 221.603492][ T6173] FAT-fs (loop0): Directory bread(block 1286) failed [ 221.698780][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.741277][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.782919][ T5831] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.833049][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.866946][ T5831] usb 2-1: config 0 descriptor?? [ 221.919732][ T5831] hub 2-1:0.0: USB hub found [ 222.091863][ T5831] hub 2-1:0.0: 30 ports detected [ 222.143302][ T5831] hub 2-1:0.0: insufficient power available to use all downstream ports [ 222.303358][ T6182] xt_hashlimit: size too large, truncated to 1048576 [ 222.325437][ T6175] loop1: detected capacity change from 0 to 128 [ 223.220610][ T5831] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 223.227299][ T5831] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 223.306587][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 223.336257][ T5831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 223.414802][ T5831] usb 2-1: USB disconnect, device number 3 [ 225.324134][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 225.538046][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.722984][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 225.728546][ T5832] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 225.744397][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.761824][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.778024][ T5831] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 225.788764][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.459306][ T5831] usb 5-1: config 0 descriptor?? [ 227.472890][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 227.510121][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.945638][ T5832] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 227.959231][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.974670][ T5831] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 227.991422][ T5832] usb 4-1: config 0 descriptor?? [ 228.213872][ T30] usb 5-1: USB disconnect, device number 2 [ 228.882488][ T5832] hid (null): unknown global tag 0xd [ 228.944602][ T5832] hid (null): invalid report_size 1285344853 [ 228.962936][ T5832] hid (null): unknown global tag 0xe [ 228.992782][ T5832] hid (null): report_id 239428730 is invalid [ 229.116828][ T5832] usb 4-1: USB disconnect, device number 4 [ 229.331176][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 231.465411][ T6235] loop1: detected capacity change from 0 to 128 [ 232.087935][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 232.588616][ T6242] loop2: detected capacity change from 0 to 16 [ 232.645152][ T6242] erofs (device loop2): mounted with root inode @ nid 36. [ 232.734319][ T6242] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 232.791192][ T5778] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 232.808499][ T6242] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 232.880782][ T6242] erofs (device loop2): read error -117 @ 1 of nid 89 [ 232.890846][ T29] audit: type=1800 audit(1771397078.041:2): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 232.916304][ T6242] ===================================================== [ 232.923726][ T6242] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 232.931329][ T6242] _copy_to_iter+0xef3/0x3400 [ 232.936469][ T6242] copy_page_to_iter+0x482/0x900 [ 232.941599][ T6242] filemap_read+0xd03/0x2300 [ 232.950643][ T6242] erofs_file_read_iter+0x2ef/0x360 [ 232.956286][ T6242] vfs_read+0x8ec/0xf90 [ 232.962844][ T6242] ksys_read+0x1d9/0x470 [ 232.967267][ T6242] __x64_sys_read+0x97/0xf0 [ 232.971944][ T6242] x64_sys_call+0x311c/0x3ea0 [ 232.977869][ T6242] do_syscall_64+0x134/0xf80 [ 232.982795][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.988869][ T6242] [ 232.991271][ T6242] [ 232.991271][ T6242] [ 233.001557][ T6242] Uninit was stored to memory at: [ 233.007001][ T6242] LZ4_decompress_safe_partial+0x1f78/0x2180 [ 233.013509][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.019293][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.025303][ T6242] z_erofs_runqueue+0x33ba/0x3660 [ 233.030498][ T6242] z_erofs_read_folio+0x4c6/0x9a0 [ 233.036223][ T6242] filemap_get_pages+0x30ad/0x3d30 [ 233.041613][ T6242] filemap_read+0x5d2/0x2300 [ 233.046485][ T6242] erofs_file_read_iter+0x2ef/0x360 [ 233.051871][ T6242] __kernel_read+0x7e0/0xe20 [ 233.056779][ T6242] integrity_kernel_read+0x77/0x90 [ 233.064581][ T6242] ima_calc_file_hash+0x1795/0x4030 [ 233.069946][ T6242] ima_collect_measurement+0x463/0xe80 [ 233.076829][ T6242] process_measurement+0x2d10/0x4170 [ 233.082289][ T6242] ima_file_check+0x91/0xd0 [ 233.087130][ T6242] security_file_post_open+0xbb/0x510 [ 233.092877][ T6242] path_openat+0x587d/0x64c0 [ 233.099650][ T6242] do_file_open+0x2aa/0x680 [ 233.104537][ T6242] do_sys_openat2+0x163/0x380 [ 233.109371][ T6242] __x64_sys_openat+0x240/0x300 [ 233.114566][ T6242] x64_sys_call+0x2445/0x3ea0 [ 233.119424][ T6242] do_syscall_64+0x134/0xf80 [ 233.124302][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.130355][ T6242] [ 233.133020][ T6242] Uninit was stored to memory at: [ 233.138284][ T6242] LZ4_decompress_safe_partial+0x1f42/0x2180 [ 233.144580][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.150356][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.156444][ T6242] z_erofs_runqueue+0x33ba/0x3660 [ 233.161627][ T6242] z_erofs_read_folio+0x4c6/0x9a0 [ 233.169123][ T6242] filemap_get_pages+0x30ad/0x3d30 [ 233.175450][ T6242] filemap_read+0x5d2/0x2300 [ 233.180258][ T6242] erofs_file_read_iter+0x2ef/0x360 [ 233.185993][ T6242] __kernel_read+0x7e0/0xe20 [ 233.190767][ T6242] integrity_kernel_read+0x77/0x90 [ 233.196351][ T6242] ima_calc_file_hash+0x1795/0x4030 [ 233.201916][ T6242] ima_collect_measurement+0x463/0xe80 [ 233.207763][ T6242] process_measurement+0x2d10/0x4170 [ 233.213451][ T6242] ima_file_check+0x91/0xd0 [ 233.218198][ T6242] security_file_post_open+0xbb/0x510 [ 233.223946][ T6242] path_openat+0x587d/0x64c0 [ 233.228724][ T6242] do_file_open+0x2aa/0x680 [ 233.233627][ T6242] do_sys_openat2+0x163/0x380 [ 233.238504][ T6242] __x64_sys_openat+0x240/0x300 [ 233.243640][ T6242] x64_sys_call+0x2445/0x3ea0 [ 233.248505][ T6242] do_syscall_64+0x134/0xf80 [ 233.253826][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.259889][ T6242] [ 233.262287][ T6242] Uninit was stored to memory at: [ 233.270434][ T6242] LZ4_decompress_safe_partial+0x1f0a/0x2180 [ 233.277502][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.283488][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.289392][ T6242] z_erofs_runqueue+0x33ba/0x3660 [ 233.294890][ T6242] z_erofs_read_folio+0x4c6/0x9a0 [ 233.300073][ T6242] filemap_get_pages+0x30ad/0x3d30 [ 233.305628][ T6242] filemap_read+0x5d2/0x2300 [ 233.310408][ T6242] erofs_file_read_iter+0x2ef/0x360 [ 233.316015][ T6242] __kernel_read+0x7e0/0xe20 [ 233.320779][ T6242] integrity_kernel_read+0x77/0x90 [ 233.326297][ T6242] ima_calc_file_hash+0x1795/0x4030 [ 233.331672][ T6242] ima_collect_measurement+0x463/0xe80 [ 233.337447][ T6242] process_measurement+0x2d10/0x4170 [ 233.343283][ T6242] ima_file_check+0x91/0xd0 [ 233.348077][ T6242] security_file_post_open+0xbb/0x510 [ 233.354131][ T6242] path_openat+0x587d/0x64c0 [ 233.358902][ T6242] do_file_open+0x2aa/0x680 [ 233.363697][ T6242] do_sys_openat2+0x163/0x380 [ 233.371249][ T6242] __x64_sys_openat+0x240/0x300 [ 233.377234][ T6242] x64_sys_call+0x2445/0x3ea0 [ 233.382133][ T6242] do_syscall_64+0x134/0xf80 [ 233.387185][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.393465][ T6242] [ 233.395860][ T6242] Uninit was stored to memory at: [ 233.401113][ T6242] LZ4_decompress_safe_partial+0x1fae/0x2180 [ 233.407467][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.413418][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.419319][ T6242] z_erofs_decompressqueue_work+0x67/0x90 [ 233.427025][ T6242] process_scheduled_works+0xb21/0x1e30 [ 233.432873][ T6242] worker_thread+0xede/0x1580 [ 233.437715][ T6242] kthread+0x53f/0x600 [ 233.441985][ T6242] ret_from_fork+0x20f/0x910 [ 233.446981][ T6242] ret_from_fork_asm+0x1a/0x30 [ 233.451937][ T6242] [ 233.454449][ T6242] Uninit was stored to memory at: [ 233.459720][ T6242] LZ4_decompress_safe_partial+0x1f78/0x2180 [ 233.466038][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.475025][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.480926][ T6242] z_erofs_decompressqueue_work+0x67/0x90 [ 233.487866][ T6242] process_scheduled_works+0xb21/0x1e30 [ 233.493748][ T6242] worker_thread+0xede/0x1580 [ 233.498609][ T6242] kthread+0x53f/0x600 [ 233.503057][ T6242] ret_from_fork+0x20f/0x910 [ 233.507818][ T6242] ret_from_fork_asm+0x1a/0x30 [ 233.512918][ T6242] [ 233.515315][ T6242] Uninit was stored to memory at: [ 233.520590][ T6242] LZ4_decompress_safe_partial+0x1f42/0x2180 [ 233.526931][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.532829][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.538741][ T6242] z_erofs_decompressqueue_work+0x67/0x90 [ 233.544748][ T6242] process_scheduled_works+0xb21/0x1e30 [ 233.550477][ T6242] worker_thread+0xede/0x1580 [ 233.555484][ T6242] kthread+0x53f/0x600 [ 233.559747][ T6242] ret_from_fork+0x20f/0x910 [ 233.564692][ T6242] ret_from_fork_asm+0x1a/0x30 [ 233.569747][ T6242] [ 233.572148][ T6242] Uninit was stored to memory at: [ 233.580361][ T6242] LZ4_decompress_safe_partial+0x1f0a/0x2180 [ 233.587649][ T6242] z_erofs_lz4_decompress+0x2434/0x2890 [ 233.593546][ T6242] z_erofs_decompress_queue+0x3183/0x6a20 [ 233.599439][ T6242] z_erofs_decompressqueue_work+0x67/0x90 [ 233.605698][ T6242] process_scheduled_works+0xb21/0x1e30 [ 233.611425][ T6242] worker_thread+0xede/0x1580 [ 233.616406][ T6242] kthread+0x53f/0x600 [ 233.620662][ T6242] ret_from_fork+0x20f/0x910 [ 233.625617][ T6242] ret_from_fork_asm+0x1a/0x30 [ 233.630577][ T6242] [ 233.633098][ T6242] Uninit was created at: [ 233.637571][ T6242] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 233.643772][ T6242] alloc_pages_mpol+0x328/0x860 [ 233.648812][ T6242] folio_alloc_noprof+0x108/0x360 [ 233.654144][ T6242] filemap_alloc_folio_noprof+0xd9/0x480 [ 233.659962][ T6242] page_cache_ra_order+0x897/0x16f0 [ 233.665585][ T6242] page_cache_sync_ra+0xb96/0x11b0 [ 233.670875][ T6242] filemap_get_pages+0xcb2/0x3d30 [ 233.679080][ T6242] filemap_read+0x5d2/0x2300 [ 233.684876][ T6242] erofs_file_read_iter+0x2ef/0x360 [ 233.690284][ T6242] __kernel_read+0x7e0/0xe20 [ 233.695140][ T6242] integrity_kernel_read+0x77/0x90 [ 233.700447][ T6242] ima_calc_file_hash+0x1795/0x4030 [ 233.705946][ T6242] ima_collect_measurement+0x463/0xe80 [ 233.711583][ T6242] process_measurement+0x2d10/0x4170 [ 233.717154][ T6242] ima_file_check+0x91/0xd0 [ 233.721850][ T6242] security_file_post_open+0xbb/0x510 [ 233.727544][ T6242] path_openat+0x587d/0x64c0 [ 233.732309][ T6242] do_file_open+0x2aa/0x680 [ 233.737161][ T6242] do_sys_openat2+0x163/0x380 [ 233.741986][ T6242] __x64_sys_openat+0x240/0x300 [ 233.747265][ T6242] x64_sys_call+0x2445/0x3ea0 [ 233.752126][ T6242] do_syscall_64+0x134/0xf80 [ 233.757019][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.763190][ T6242] [ 233.765582][ T6242] Bytes 3928-3946 of 4073 are uninitialized [ 233.771562][ T6242] Memory access of size 4073 starts at ffff88805f172000 [ 233.781807][ T6242] Data copied to user address 0000200000000600 [ 233.789124][ T6242] [ 233.791624][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT(full) [ 233.801109][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.811503][ T6242] ===================================================== [ 233.818644][ T6242] Disabling lock debugging due to kernel taint [ 233.899621][ T6242] Kernel panic - not syncing: kmsan.panic set ... [ 233.906233][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.2.96 Tainted: G B syzkaller #0 PREEMPT(full) [ 233.917111][ T6242] Tainted: [B]=BAD_PAGE [ 233.921360][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.931556][ T6242] Call Trace: [ 233.934945][ T6242] [ 233.937971][ T6242] __dump_stack+0x26/0x30 [ 233.942480][ T6242] dump_stack_lvl+0x50/0x1c0 [ 233.947250][ T6242] ? dump_stack+0x12/0x25 [ 233.951772][ T6242] dump_stack+0x1e/0x25 [ 233.956107][ T6242] vpanic+0x7b4/0x1430 [ 233.960397][ T6242] panic+0x15d/0x160 [ 233.964535][ T6242] kmsan_report+0x31a/0x320 [ 233.969243][ T6242] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 233.975002][ T6242] ? kmsan_internal_check_memory+0x166/0x240 [ 233.981181][ T6242] ? kmsan_copy_to_user+0xef/0x190 [ 233.986491][ T6242] ? _copy_to_iter+0xef3/0x3400 [ 233.991546][ T6242] ? copy_page_to_iter+0x482/0x900 [ 233.996862][ T6242] ? filemap_read+0xd03/0x2300 [ 234.001805][ T6242] ? erofs_file_read_iter+0x2ef/0x360 [ 234.007371][ T6242] ? vfs_read+0x8ec/0xf90 [ 234.011867][ T6242] ? ksys_read+0x1d9/0x470 [ 234.016459][ T6242] ? __x64_sys_read+0x97/0xf0 [ 234.021318][ T6242] ? x64_sys_call+0x311c/0x3ea0 [ 234.026367][ T6242] ? do_syscall_64+0x134/0xf80 [ 234.031321][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.037568][ T6242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.043608][ T6242] ? update_load_avg+0x14eb/0x25d0 [ 234.048935][ T6242] ? kmsan_get_metadata+0xf1/0x160 [ 234.054251][ T6242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.060279][ T6242] ? trace_raw_output_file_check_and_advance_wb_err+0x3d1/0x430 [ 234.068164][ T6242] ? filter_irq_stacks+0x49/0x190 [ 234.073401][ T6242] ? kmsan_get_metadata+0xf1/0x160 [ 234.078719][ T6242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.084746][ T6242] ? kmsan_get_metadata+0xf1/0x160 [ 234.090147][ T6242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.096176][ T6242] kmsan_internal_check_memory+0x166/0x240 [ 234.102200][ T6242] kmsan_copy_to_user+0xef/0x190 [ 234.107328][ T6242] _copy_to_iter+0xef3/0x3400 [ 234.112194][ T6242] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 234.118228][ T6242] ? filemap_get_pages+0x398d/0x3d30 [ 234.123756][ T6242] copy_page_to_iter+0x482/0x900 [ 234.128909][ T6242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.134948][ T6242] filemap_read+0xd03/0x2300 [ 234.139732][ T6242] ? kmsan_get_metadata+0xf1/0x160 [ 234.145051][ T6242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.151075][ T6242] ? __rcu_read_unlock+0x6c/0xd0 [ 234.156213][ T6242] ? aa_file_perm+0x417/0x27c0 [ 234.161188][ T6242] ? aa_file_perm+0x532/0x27c0 [ 234.166155][ T6242] ? __rcu_read_unlock+0x6c/0xd0 [ 234.171290][ T6242] ? futex_unqueue+0x225/0x2c0 [ 234.176301][ T6242] erofs_file_read_iter+0x2ef/0x360 [ 234.181725][ T6242] vfs_read+0x8ec/0xf90 [ 234.186075][ T6242] ? __pfx_erofs_file_read_iter+0x10/0x10 [ 234.192019][ T6242] ksys_read+0x1d9/0x470 [ 234.196464][ T6242] __x64_sys_read+0x97/0xf0 [ 234.201162][ T6242] x64_sys_call+0x311c/0x3ea0 [ 234.206034][ T6242] do_syscall_64+0x134/0xf80 [ 234.210818][ T6242] ? clear_bhb_loop+0x50/0xa0 [ 234.215663][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.221751][ T6242] RIP: 0033:0x7f1fbc19c629 [ 234.226301][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.246073][ T6242] RSP: 002b:00007f1fba3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.254678][ T6242] RAX: ffffffffffffffda RBX: 00007f1fbc415fa0 RCX: 00007f1fbc19c629 [ 234.262798][ T6242] RDX: 0000000000000fe9 RSI: 0000200000000600 RDI: 0000000000000004 [ 234.270895][ T6242] RBP: 00007f1fbc232b39 R08: 0000000000000000 R09: 0000000000000000 [ 234.278994][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.287091][ T6242] R13: 00007f1fbc416038 R14: 00007f1fbc415fa0 R15: 00007fffacc31358 [ 234.295233][ T6242] [ 234.298746][ T6242] Kernel Offset: disabled [ 234.303128][ T6242] Rebooting in 86400 seconds..