last executing test programs: 18m51.003056151s ago: executing program 32 (id=49): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) capset(0x0, 0x0) syz_socket_connect_nvme_tcp() fanotify_init(0xf00, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x14) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffbfe, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 18m46.061875845s ago: executing program 33 (id=62): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 18m36.985902504s ago: executing program 34 (id=86): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") rename(0x0, &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x800000, 0x0, 0x40, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 17m13.833229275s ago: executing program 35 (id=239): listen(0xffffffffffffffff, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1fd, 0x16, 0x2, 0x100, &(0x7f0000000440)="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"}) 17m8.086122034s ago: executing program 36 (id=251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4e}, {&(0x7f00000006c0)}, {&(0x7f0000000400)}, {&(0x7f0000000300)}], 0x5}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16m46.542182137s ago: executing program 37 (id=333): syz_open_dev$usbfs(&(0x7f0000000000), 0x8854, 0x101582) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x8000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) sync_file_range(r1, 0x9, 0x10, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCDISCONN(r3, 0x7439) 14m35.06068806s ago: executing program 38 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) 13m25.971152587s ago: executing program 39 (id=759): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_open_procfs$pagemap(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 13m10.790095664s ago: executing program 40 (id=793): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x180) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0xffffffffffffffcd) 12m55.048209619s ago: executing program 41 (id=829): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) unshare(0x6a040000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x56e02eb) 12m48.43116005s ago: executing program 42 (id=867): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 9m51.165973057s ago: executing program 43 (id=1222): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) 9m19.58244627s ago: executing program 44 (id=1283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = socket$kcm(0x2, 0x3, 0x106) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r8}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r10 = syz_io_uring_setup(0x2fbb, &(0x7f00000001c0)={0x0, 0x84a8, 0x10000, 0x2, 0x2b0}, &(0x7f0000000080), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000300)=[@ioring_restriction_sqe_flags_required={0x3, 0x4}, @ioring_restriction_sqe_flags_required={0x3, 0x7}], 0x2) dup2(r0, r2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 6m55.230313556s ago: executing program 6 (id=1597): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x6, r1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0022a309844e3182a23a96530000000019491c32489cd0e18e8ecde85dbbe6042774464a766c2ed121d7ab9aaf17553422da7111ea9cbd99ad4ca2fc7b760c6b96fb522187c2ff1a4a24db98319a908e6e7fed90c965502d0014a41d98ead3f73fb45fc1d29a11413466598450b724b9038f097a8d50d67b6678e0458b1292b9918af99ac9701332daa116404e7cd9ed"], 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m54.242967968s ago: executing program 6 (id=1599): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) close(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 6m49.434943512s ago: executing program 6 (id=1608): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./file3\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000053c0)='./file3\x00', &(0x7f0000005400), 0x4000) 6m48.879124074s ago: executing program 6 (id=1609): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = signalfd4(r0, &(0x7f00000014c0)={[0x9]}, 0x8, 0x800) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000001640)={0x1, 0x7, 0x81, 0x6, 0x7fff, 0x3}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x101, 0x8000011, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchownat(r4, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x3, 0x9f, 0xd) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r7, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000002b40), &(0x7f0000000380)=0x30) listen(r7, 0x0) preadv(r7, 0x0, 0x0, 0xfffeffff, 0x8001) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m46.034916311s ago: executing program 6 (id=1611): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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") socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17d3, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x0) 6m45.48168109s ago: executing program 45 (id=1611): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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") socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17d3, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x0) 5m44.997817734s ago: executing program 2 (id=1742): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r1, 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32=r0, @ANYRES16], 0x0, 0x5, 0xd2, &(0x7f0000000540)=""/210, 0x0, 0xa, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x4e23, @remote}}}, 0x84) writev(r5, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f0000000400)="f9fe9570c868a9e631348c8d851dad66ba8f2342cdea8071aa9e8862c6b57f421ff56bfec759e0e7ac0e", 0x2a}], 0x3) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x0, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 5m43.75324353s ago: executing program 2 (id=1746): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_INTERRUPT(r2, 0x0, 0x0) 5m42.363160578s ago: executing program 2 (id=1748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2b, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400d0) 5m42.009195763s ago: executing program 2 (id=1749): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000200)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd}, {@barrier}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x67, 0x37, 0x74, 0x65, 0x36, 0x38]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20863, 0x0) 5m39.661602156s ago: executing program 2 (id=1759): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 5m31.915191456s ago: executing program 2 (id=1777): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 5m30.354071131s ago: executing program 46 (id=1777): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 4m47.875245182s ago: executing program 7 (id=1883): mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 4m47.402744911s ago: executing program 7 (id=1885): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40012}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x30004800}, 0x4000000) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040801) gettid() writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x5ad003, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x4040894) close_range(r3, 0xffffffffffffffff, 0x0) 4m46.236946477s ago: executing program 7 (id=1888): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m42.735169479s ago: executing program 7 (id=1898): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m38.493325503s ago: executing program 7 (id=1916): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714"], 0xdc}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x4048051}, 0x440c0) recvmmsg(r2, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000016c0)=""/4080, 0xff0}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000005c0)=""/242, 0xf2}], 0x4}, 0x4}], 0x1, 0x10000, 0x0) 4m35.566713211s ago: executing program 7 (id=1926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18ecd218", @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf250a00000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) poll(&(0x7f0000000240)=[{r8, 0x2620}], 0x1, 0xfffeffff) ioctl$VHOST_NET_SET_BACKEND(r8, 0xaf02, 0x0) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 4m18.912646746s ago: executing program 47 (id=1926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18ecd218", @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf250a00000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) poll(&(0x7f0000000240)=[{r8, 0x2620}], 0x1, 0xfffeffff) ioctl$VHOST_NET_SET_BACKEND(r8, 0xaf02, 0x0) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 2m51.449513016s ago: executing program 9 (id=2194): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m50.650083969s ago: executing program 9 (id=2195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getpgid(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 2m41.356734486s ago: executing program 9 (id=2217): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') 2m40.137201566s ago: executing program 9 (id=2219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m38.755232946s ago: executing program 9 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd72000000000039000000080003", @ANYRES32=r2, @ANYBLOB="18005a8014000180050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m37.562446516s ago: executing program 9 (id=2224): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m21.358275028s ago: executing program 48 (id=2224): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m14.905329865s ago: executing program 4 (id=2273): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 2m14.111002168s ago: executing program 4 (id=2276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000584000/0x3000)=nil, 0x3000, 0xf) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) 2m8.777293053s ago: executing program 4 (id=2287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m7.528347686s ago: executing program 4 (id=2289): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') 2m6.657284506s ago: executing program 4 (id=2292): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000140)="e9", 0x1) 2m5.882892013s ago: executing program 4 (id=2294): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) 1m50.675215886s ago: executing program 49 (id=2294): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) 25.188034s ago: executing program 8 (id=2515): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000100)='./control\x00') 17.074971372s ago: executing program 5 (id=2532): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpgid(r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 17.07452801s ago: executing program 3 (id=2533): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) bpf$MAP_CREATE(0x0, 0x0, 0x50) 15.96364136s ago: executing program 5 (id=2535): socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xfffffffffffffff9, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x406c813) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) r3 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x7, &(0x7f00000008c0)={0x22, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x2) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000980)=""/222) 15.303133234s ago: executing program 3 (id=2537): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x20002, 0xffffffffffffffff, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000fc0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={r7}) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r9, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, 0x0) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 14.284386168s ago: executing program 8 (id=2539): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x20841, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 13.766564144s ago: executing program 1 (id=2542): munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 13.010927841s ago: executing program 3 (id=2543): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000380)={0x5, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e23, @remote}}}, 0x104) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000002000010000000000000000000a801000000000011800010014000100fc01000000000000000000000000000008000f00ffffffff1400020000000000000000000000ffffffffffff0c0017004e204e21"], 0x54}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) 12.890254256s ago: executing program 8 (id=2544): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000006c0)={@host}) 12.675761619s ago: executing program 1 (id=2546): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpgid(r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 12.498868679s ago: executing program 8 (id=2547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 11.870581165s ago: executing program 0 (id=2548): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 11.596530274s ago: executing program 1 (id=2549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 10.068310462s ago: executing program 8 (id=2550): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) 9.849025833s ago: executing program 1 (id=2551): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)="54c8", 0x2}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) 9.702465171s ago: executing program 8 (id=2552): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) r4 = syz_open_procfs(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") 8.707319509s ago: executing program 5 (id=2553): syz_io_uring_setup(0x31c7, 0x0, 0x0, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0xeeee8000, 0x5a, &(0x7f0000000680)=""/90}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7.416924829s ago: executing program 0 (id=2554): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x20002, 0xffffffffffffffff, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000fc0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={r7}) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r9, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, 0x0) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 7.326427244s ago: executing program 5 (id=2555): socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 6.250797438s ago: executing program 1 (id=2556): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @pix_mp={0x10000, 0x7, 0x50313459, 0x1, 0xb, [{0x1c, 0x81}, {0x0, 0x9}, {0xfff, 0x5}, {0x2, 0xff}, {0x8, 0xfff}, {0x0, 0x7}, {0x9, 0x1628}, {0x2, 0x2}], 0x3, 0x1, 0x4, 0x1, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x8) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 6.134828467s ago: executing program 5 (id=2557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x5]}, 0x8) faccessat(0xffffffffffffffff, 0x0, 0x18) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00') bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) 5.556899679s ago: executing program 0 (id=2558): bind$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) close(0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX=r1], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xae902, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.459016625s ago: executing program 3 (id=2559): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) kcmp(r0, r0, 0x5, r1, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="7a0d26bb729c8d8bb6922f2beefeb6f28f8ab4ebd42b4307120c540336e3990cb5172d4d58e1ad8f6cf2862b57da824d89204783e0ee2336c98eb17bba9f02e77e717a0c9f8b861659f8ba8a94a2e67a0f95195f78310a44d5852c9ae55c0d805482d701052c1454f3ae25f34e3df0f99cd3777c02", 0x75}], 0x1}}], 0x1, 0x10) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 5.386258724s ago: executing program 1 (id=2560): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x11}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, r8, 0xd05, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x488c1}, 0x811) 5.273243683s ago: executing program 5 (id=2561): setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f00000002c0)=""/231, 0xe7}, &(0x7f0000000240), 0x2}, 0x20) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x138, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x10c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x7, 0x7}, {0x80, 0x3, 0x2, 0x1e0}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x138}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', 0x0, &(0x7f0000001240)='\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40851}, 0x1) socket$inet(0x2, 0xa, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4606, &(0x7f0000000080)={0x2}) 4.56289755s ago: executing program 3 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}}, 0x20}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 2.455113302s ago: executing program 0 (id=2563): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.421775547s ago: executing program 3 (id=2564): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 1.974755194s ago: executing program 0 (id=2565): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r4, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 0 (id=2566): syz_io_uring_setup(0x31c7, 0x0, 0x0, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0xeeee8000, 0x5a, &(0x7f0000000680)=""/90}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): pending unlink 4294967287 [ 887.379348][T13924] vhci_hcd: connection reset by peer [ 887.402022][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.460414][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.470718][ T2943] vhci_hcd: stop threads [ 887.482612][ T2943] vhci_hcd: release socket [ 887.506946][ T2943] vhci_hcd: disconnect device [ 887.731496][T11658] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 887.838763][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.844799][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 887.856981][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.884494][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.901687][T11658] usb 6-1: Using ep0 maxpacket: 8 [ 887.924450][T11658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.949465][T11658] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 887.969904][T11658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.031540][T11658] usb 6-1: config 0 descriptor?? [ 888.250145][T11658] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 888.273763][T13749] hsr_slave_0: entered promiscuous mode [ 888.289344][T13749] hsr_slave_1: entered promiscuous mode [ 890.364197][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.484278][ T5879] usb 6-1: USB disconnect, device number 11 [ 890.606789][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.718144][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.725387][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.785083][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.792311][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.900589][T13955] loop2: detected capacity change from 0 to 32768 [ 890.917069][T13974] loop5: detected capacity change from 0 to 2048 [ 890.928124][T13955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1712 (13955) [ 890.940952][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.978018][T13974] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 891.000177][T13974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.017557][T13955] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 891.044067][T13955] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 891.099100][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 891.099509][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 891.135888][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 891.193895][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 891.236018][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 891.264180][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 891.284461][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.326614][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 891.326954][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 891.347513][ T9243] usb 38-1: device descriptor read/8, error -110 [ 891.369025][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.376231][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.393403][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 891.393746][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 891.412465][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 891.435791][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.452775][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.469562][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 891.469903][T13955] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 891.481485][T13955] BTRFS error (device loop2): open_ctree failed: -12 [ 891.814599][ T9243] usb usb38-port1: attempt power cycle [ 892.531643][ T9243] usb usb38-port1: unable to enumerate USB device [ 892.733141][T13749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 892.878101][T13749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 892.997983][T13749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 893.101527][T13749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 893.306717][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.339082][T14023] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1714'. [ 894.043507][ T30] audit: type=1326 audit(1764745538.349:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80be98f749 code=0x7ffc0000 [ 894.360391][ T30] audit: type=1326 audit(1764745538.349:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80be98f749 code=0x7ffc0000 [ 894.489621][ T30] audit: type=1326 audit(1764745538.349:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f80be98f749 code=0x7ffc0000 [ 894.647624][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.688066][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 894.731615][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.806935][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.864768][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.871992][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.944896][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.952097][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.184566][T13486] veth0_vlan: entered promiscuous mode [ 895.243562][T13486] veth1_vlan: entered promiscuous mode [ 895.408725][T13486] veth0_macvtap: entered promiscuous mode [ 895.463895][T13486] veth1_macvtap: entered promiscuous mode [ 895.597043][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.665578][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.716797][T14067] loop2: detected capacity change from 0 to 2048 [ 895.729226][ T4182] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.788676][T14067] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 895.809247][ T4182] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.839715][ T4182] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.872988][T14067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 896.023038][ T4182] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.742993][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.802654][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.814592][T14087] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1731'. [ 896.942988][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.991820][T13505] veth0_vlan: entered promiscuous mode [ 897.015387][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.063564][T13505] veth1_vlan: entered promiscuous mode [ 897.069276][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.145295][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1733'. [ 897.204564][T13505] veth0_macvtap: entered promiscuous mode [ 897.345813][T13505] veth1_macvtap: entered promiscuous mode [ 897.951713][ T6005] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 898.151353][T14070] loop4: detected capacity change from 0 to 32768 [ 898.316120][T14070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1727 (14070) [ 898.395168][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.501867][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.574509][ T6005] usb 9-1: Using ep0 maxpacket: 32 [ 898.582093][ T6005] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 898.614737][T14070] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 898.720939][ T6005] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 898.777663][T14070] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 898.847727][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.865227][ T6005] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 898.952114][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 899.040849][ T6005] usb 9-1: Product: syz [ 899.061395][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 899.073630][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 899.147733][ T6005] usb 9-1: Manufacturer: syz [ 899.173885][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 899.188184][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 899.263668][ T6005] usb 9-1: SerialNumber: syz [ 899.279230][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 899.304406][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 899.425985][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 899.506203][ T6005] usb 9-1: config 0 descriptor?? [ 899.565088][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 899.594757][T14070] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 899.739250][T14105] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 899.933921][T14070] BTRFS error (device loop4): open_ctree failed: -12 [ 900.301941][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.543391][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.795120][ T6200] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.980753][ T5896] usb 9-1: USB disconnect, device number 8 [ 901.158021][T13749] veth0_vlan: entered promiscuous mode [ 901.333909][T13749] veth1_vlan: entered promiscuous mode [ 901.347198][T14135] loop8: detected capacity change from 0 to 2048 [ 901.425311][T14135] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 901.512745][T14135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.796676][T13749] veth0_macvtap: entered promiscuous mode [ 901.879438][T13749] veth1_macvtap: entered promiscuous mode [ 901.890993][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.951642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.252987][T13749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.275339][T14153] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1741'. [ 902.520065][T13749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.553270][T14158] ntfs3(nullb0): Primary boot signature is not NTFS. [ 902.607684][T14158] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 902.734657][ T7808] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.767946][ T7808] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.788366][T14156] kAFS: No cell specified [ 902.901468][ T7808] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.125265][ T7808] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.412748][T10609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 903.427467][T10609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 903.435700][T10609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 903.449191][T10609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 903.459746][T10609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 903.664352][T14175] fuse: Unknown parameter 'fd0x0000000000000003' [ 903.792366][ T7808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.800901][ T7808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.104216][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.157455][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.267867][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.880536][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.202190][T10609] Bluetooth: hci4: command 0x0405 tx timeout [ 905.417785][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.491784][ T5853] Bluetooth: hci5: command tx timeout [ 905.747439][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.813779][T14203] loop9: detected capacity change from 0 to 2048 [ 905.876109][T14203] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 905.920459][T14203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 906.275024][T14167] chnl_net:caif_netlink_parms(): no params data found [ 906.458411][T14218] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1753'. [ 906.470723][T14194] loop2: detected capacity change from 0 to 32768 [ 906.481983][T14194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1749 (14194) [ 906.687894][T14194] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 906.704921][T14223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1754'. [ 906.719054][T14194] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 906.947439][ T13] bridge_slave_1: left allmulticast mode [ 906.971835][T14194] BTRFS info (device loop2): turning on async discard [ 906.999158][ T13] bridge_slave_1: left promiscuous mode [ 907.020470][T14194] BTRFS info (device loop2): enabling free space tree [ 907.024456][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.028474][T14194] BTRFS info (device loop2): enabling auto defrag [ 907.076922][T14194] BTRFS info (device loop2): force zlib compression, level 3 [ 907.131527][T14194] BTRFS info (device loop2): max_inline set to 0 [ 907.147265][ T13] bridge_slave_0: left allmulticast mode [ 907.176656][ T13] bridge_slave_0: left promiscuous mode [ 907.196926][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.488056][T14252] loop2: detected capacity change from 32768 to 64 [ 907.574859][ T5853] Bluetooth: hci5: command tx timeout [ 907.616168][T14258] fuse: Unknown parameter 'fd0x0000000000000003' [ 907.677861][ T6178] kworker/u8:19: attempt to access beyond end of device [ 907.677861][ T6178] loop2: rw=4097, sector=2064, nr_sectors = 8 limit=64 [ 907.747724][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 907.809623][ T6178] kworker/u8:19: attempt to access beyond end of device [ 907.809623][ T6178] loop2: rw=4097, sector=10480, nr_sectors = 8 limit=64 [ 907.908459][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 907.954581][ T6178] kworker/u8:19: attempt to access beyond end of device [ 907.954581][ T6178] loop2: rw=4097, sector=10488, nr_sectors = 8 limit=64 [ 908.004213][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 908.019726][ T6178] kworker/u8:19: attempt to access beyond end of device [ 908.019726][ T6178] loop2: rw=4097, sector=10496, nr_sectors = 8 limit=64 [ 908.034430][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 908.094542][ T6178] kworker/u8:19: attempt to access beyond end of device [ 908.094542][ T6178] loop2: rw=4097, sector=10504, nr_sectors = 8 limit=64 [ 908.169841][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 909.650416][ T5853] Bluetooth: hci5: command tx timeout [ 910.881377][ T6178] kworker/u8:19: attempt to access beyond end of device [ 910.881377][ T6178] loop2: rw=4097, sector=10512, nr_sectors = 8 limit=64 [ 910.897149][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 910.910539][ T6178] kworker/u8:19: attempt to access beyond end of device [ 910.910539][ T6178] loop2: rw=4097, sector=10520, nr_sectors = 8 limit=64 [ 910.941064][ T6178] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 910.960780][T10636] BTRFS error (device loop2 state A): Transaction aborted (error -5) [ 910.990376][T10636] BTRFS: error (device loop2 state A) in __btrfs_free_extent:3237: errno=-5 IO failure [ 911.000472][T10636] BTRFS info (device loop2 state EA): forced readonly [ 911.010035][T10636] BTRFS error (device loop2 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -5 [ 911.520697][T10636] BTRFS: error (device loop2 state EA) in btrfs_run_delayed_refs:2161: errno=-5 IO failure [ 911.550697][T14285] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1766'. [ 911.730396][ T5853] Bluetooth: hci5: command tx timeout [ 913.048935][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.075878][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.108008][ T13] bond0 (unregistering): Released all slaves [ 913.834714][T14281] bridge0: port 3(gretap0) entered blocking state [ 913.857818][T14281] bridge0: port 3(gretap0) entered disabled state [ 913.883008][T14281] gretap0: entered allmulticast mode [ 913.893948][T14281] gretap0: entered promiscuous mode [ 913.899591][T14281] bridge0: port 3(gretap0) entered blocking state [ 913.906153][T14281] bridge0: port 3(gretap0) entered forwarding state [ 915.151810][T10636] BTRFS info (device loop2 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 915.219388][T14167] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.238175][T14167] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.287516][T14334] fuse: Unknown parameter 'fd0x0000000000000003' [ 915.287971][T14167] bridge_slave_0: entered allmulticast mode [ 915.386941][T14167] bridge_slave_0: entered promiscuous mode [ 915.417693][T14167] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.526971][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.573549][T14167] bridge_slave_1: entered allmulticast mode [ 915.619791][T14167] bridge_slave_1: entered promiscuous mode [ 916.983957][T14167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.022215][T14167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.444049][T14368] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1784'. [ 919.124932][ T13] hsr_slave_0: left promiscuous mode [ 919.168923][ T13] hsr_slave_1: left promiscuous mode [ 919.184240][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.213140][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.247843][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.281187][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.638971][T14381] loop5: detected capacity change from 0 to 764 [ 919.650182][ T13] veth1_macvtap: left promiscuous mode [ 919.760512][ T13] veth0_macvtap: left promiscuous mode [ 919.795218][ T13] veth1_vlan: left promiscuous mode [ 919.822727][ T13] veth0_vlan: left promiscuous mode [ 919.830989][T10609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 919.843241][T10609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 919.861757][T10609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 919.881139][T10609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 919.888873][T10609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 921.695802][ T13] team0 (unregistering): Port device team_slave_1 removed [ 921.783245][ T13] team0 (unregistering): Port device team_slave_0 removed [ 921.984663][T10609] Bluetooth: hci1: command tx timeout [ 922.542920][T14410] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1795'. [ 922.879477][T14371] bridge0: port 3(gretap0) entered blocking state [ 922.886545][T14371] bridge0: port 3(gretap0) entered disabled state [ 922.893464][T14371] gretap0: entered allmulticast mode [ 922.903318][T14371] gretap0: entered promiscuous mode [ 922.909035][T14371] bridge0: port 3(gretap0) entered blocking state [ 922.915605][T14371] bridge0: port 3(gretap0) entered forwarding state [ 922.928436][T14167] team0: Port device team_slave_0 added [ 922.957331][T14167] team0: Port device team_slave_1 added [ 923.426874][T14422] loop4: detected capacity change from 0 to 764 [ 923.953964][T14167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.050525][T10609] Bluetooth: hci1: command tx timeout [ 924.889411][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.917171][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.160639][T14167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.189445][T14167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.204620][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.230626][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.238882][T14436] 9pnet_virtio: no channels available for device syz [ 925.335256][T14167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.719409][ T5954] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 926.210643][T10609] Bluetooth: hci1: command tx timeout [ 926.580446][ T5954] usb 9-1: Using ep0 maxpacket: 16 [ 926.606672][ T5954] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 926.608228][T14167] hsr_slave_0: entered promiscuous mode [ 926.642727][ T5954] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.644447][T14167] hsr_slave_1: entered promiscuous mode [ 926.676204][T14167] debugfs: 'hsr0' already exists in 'hsr' [ 926.687309][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 926.727801][T14167] Cannot create hsr debugfs directory [ 926.763370][ T5954] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 926.796236][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.868932][ T5954] usb 9-1: config 0 descriptor?? [ 926.877836][T14450] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1808'. [ 926.932757][ T5954] pxrc 9-1:0.0: Could not find endpoint [ 926.939211][ T5954] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 927.550565][ T6172] usb 9-1: USB disconnect, device number 9 [ 928.302868][T10609] Bluetooth: hci1: command tx timeout [ 928.543217][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.781755][T14465] loop8: detected capacity change from 0 to 764 [ 929.197952][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.392780][T14386] chnl_net:caif_netlink_parms(): no params data found [ 929.492605][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.659115][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.842958][T14486] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1817'. [ 931.471052][T14386] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.478290][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.567361][T14386] bridge_slave_0: entered allmulticast mode [ 931.585072][T14386] bridge_slave_0: entered promiscuous mode [ 931.788235][T14386] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.805017][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.830791][T14386] bridge_slave_1: entered allmulticast mode [ 931.905060][T14386] bridge_slave_1: entered promiscuous mode [ 932.159662][T14386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.231799][T14386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.483931][T14526] loop5: detected capacity change from 0 to 1024 [ 932.505391][T14526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 932.546054][T14526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 932.559594][T14526] System zones: 0-1, 3-12 [ 932.617641][T14533] loop9: detected capacity change from 0 to 764 [ 932.945842][ T13] gretap0: left allmulticast mode [ 932.953165][T14526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.960407][ T13] gretap0: left promiscuous mode [ 932.970337][ T13] bridge0: port 3(gretap0) entered disabled state [ 932.992557][ T13] bridge_slave_1: left allmulticast mode [ 932.998226][ T13] bridge_slave_1: left promiscuous mode [ 933.010615][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.033792][T14526] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 933.061712][T14526] EXT4-fs (loop5): can't enable nombcache during remount [ 933.070505][ T13] bridge_slave_0: left allmulticast mode [ 933.100411][ T13] bridge_slave_0: left promiscuous mode [ 933.237331][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.324415][T10362] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.070901][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.077203][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.540536][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 939.600985][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.630752][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.652781][ T13] bond0 (unregistering): Released all slaves [ 939.927772][T14590] loop5: detected capacity change from 0 to 764 [ 939.949261][T14386] team0: Port device team_slave_0 added [ 940.252188][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 940.260065][ T9] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 940.268252][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.278609][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 940.291557][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 940.300616][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.313245][ T9] usb 5-1: config 0 descriptor?? [ 940.321888][ T9] pxrc 5-1:0.0: Could not find endpoint [ 940.328275][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 940.521234][T14386] team0: Port device team_slave_1 added [ 940.609492][ T5896] usb 5-1: USB disconnect, device number 22 [ 942.050934][T14611] loop5: detected capacity change from 0 to 512 [ 942.100811][T14611] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1842: inode has both inline data and extents flags [ 942.130103][T14611] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1842: couldn't read orphan inode 15 (err -117) [ 942.158302][T14611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.209273][T14167] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 942.281787][T14594] tipc: Started in network mode [ 942.290542][T14594] tipc: Node identity 16068d74ec4, cluster identity 4711 [ 942.297742][T14594] tipc: Enabled bearer , priority 0 [ 942.436994][T14593] tipc: Disabling bearer [ 942.444287][T10362] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.525028][T14386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.552622][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.659076][T14386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.698831][T14167] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 942.762909][T14386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.810904][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.331697][T14628] binder_alloc: 14622: binder_alloc_buf, no vma [ 943.877874][T14386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.890019][T14167] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 944.102872][ T13] hsr_slave_0: left promiscuous mode [ 944.150676][ T13] hsr_slave_1: left promiscuous mode [ 944.184717][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.220044][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.253701][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.261423][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.321514][ T13] veth1_macvtap: left promiscuous mode [ 944.337866][ T13] veth0_macvtap: left promiscuous mode [ 944.379026][ T13] veth1_vlan: left promiscuous mode [ 944.398250][ T13] veth0_vlan: left promiscuous mode [ 944.592285][ T6841] libceph: connect (1)[c::]:6789 error -101 [ 944.598526][ T6841] libceph: mon0 (1)[c::]:6789 connect error [ 944.628610][T14645] ceph: No mds server is up or the cluster is laggy [ 945.685522][ T13] team0 (unregistering): Port device team_slave_1 removed [ 945.762051][T14657] loop4: detected capacity change from 0 to 764 [ 946.135739][ T13] team0 (unregistering): Port device team_slave_0 removed [ 946.723680][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 946.904894][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 946.910539][ T5848] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 946.927197][ T9] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 946.936291][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.947538][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 946.961542][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 946.971503][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.991146][ T9] usb 5-1: config 0 descriptor?? [ 947.008831][ T9] pxrc 5-1:0.0: Could not find endpoint [ 947.017348][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 947.070536][ T5848] usb 9-1: device descriptor read/64, error -71 [ 947.094847][T14167] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 947.220771][ T5896] usb 5-1: USB disconnect, device number 23 [ 947.259777][T14672] loop9: detected capacity change from 0 to 512 [ 947.310401][ T5848] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 947.341873][T14672] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1855: inode has both inline data and extents flags [ 947.366678][T14672] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1855: couldn't read orphan inode 15 (err -117) [ 947.384780][T14672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.423467][T14386] hsr_slave_0: entered promiscuous mode [ 947.461947][T14386] hsr_slave_1: entered promiscuous mode [ 947.476735][ T5848] usb 9-1: device descriptor read/64, error -71 [ 947.490585][T14386] debugfs: 'hsr0' already exists in 'hsr' [ 947.509050][T14386] Cannot create hsr debugfs directory [ 947.538876][T13749] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.602592][ T5848] usb usb9-port1: attempt power cycle [ 948.419643][ T5848] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 948.451731][ T5848] usb 9-1: device descriptor read/8, error -71 [ 948.734821][ T5848] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 948.828014][ T5848] usb 9-1: device descriptor read/8, error -71 [ 948.980909][ T5848] usb usb9-port1: unable to enumerate USB device [ 949.499481][T14167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.657807][T14167] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.678764][ T2901] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.685953][ T2901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.848643][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.855827][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.914192][T14167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.931308][T14386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 950.960817][T14386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 950.989155][T14386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 951.092186][T14386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 951.922489][T14386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.018016][T14386] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.080964][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.088156][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.153033][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.160167][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.514319][T14717] loop9: detected capacity change from 0 to 2048 [ 952.569815][T14717] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 952.633486][T14717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 953.058046][T14167] veth0_vlan: entered promiscuous mode [ 954.239793][T14167] veth1_vlan: entered promiscuous mode [ 954.422199][T14386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.514727][T14167] veth0_macvtap: entered promiscuous mode [ 954.898052][T14167] veth1_macvtap: entered promiscuous mode [ 955.147578][T14746] loop8: detected capacity change from 0 to 512 [ 955.215527][T14386] veth0_vlan: entered promiscuous mode [ 955.279537][T14167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.287343][T14746] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1867: inode has both inline data and extents flags [ 955.383777][T14386] veth1_vlan: entered promiscuous mode [ 955.389395][T14746] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1867: couldn't read orphan inode 15 (err -117) [ 955.449560][T14167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.480677][ T5848] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 955.481474][T14746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.533308][ T1086] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.554268][ T1086] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.592252][ T1086] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.637277][ T1086] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.690461][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 955.723963][ T5848] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 955.739430][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.760510][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.813571][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 955.868822][ T5848] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 955.893886][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.902573][T14386] veth0_macvtap: entered promiscuous mode [ 955.941889][ T5848] usb 6-1: config 0 descriptor?? [ 955.955365][T14386] veth1_macvtap: entered promiscuous mode [ 955.966562][ T5848] pxrc 6-1:0.0: Could not find endpoint [ 955.996052][ T5848] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 956.013585][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.037860][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.154883][T14386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.184287][ T5848] usb 6-1: USB disconnect, device number 12 [ 956.252109][ T5879] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 956.254227][T14386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.260470][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.308610][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.310466][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.338611][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.373105][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.420926][ T5879] usb 9-1: device descriptor read/64, error -71 [ 956.425639][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.557740][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.596496][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.670515][ T5879] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 956.711667][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.729782][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.820781][ T5879] usb 9-1: device descriptor read/64, error -71 [ 956.934253][ T5879] usb usb9-port1: attempt power cycle [ 957.300431][ T5879] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 957.424622][ T5879] usb 9-1: device descriptor read/8, error -71 [ 957.800786][ T5879] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 957.834620][ T5879] usb 9-1: device descriptor read/8, error -71 [ 957.978513][ T5879] usb usb9-port1: unable to enumerate USB device [ 959.373609][T14823] loop8: detected capacity change from 0 to 512 [ 959.462814][T14823] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1882: inode has both inline data and extents flags [ 959.522496][T14823] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1882: couldn't read orphan inode 15 (err -117) [ 959.618740][T14823] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.074179][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.170645][ T5954] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 960.412910][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 960.574784][ T5954] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 960.747137][ T5954] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 960.954146][ T5954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 961.035137][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 961.136560][ T5954] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 961.240620][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 961.343568][ T5954] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 961.434288][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.539797][ T5954] usb 5-1: config 0 descriptor?? [ 961.597846][ T6005] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 961.783577][ T6005] usb 9-1: Using ep0 maxpacket: 16 [ 961.795856][ T5954] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 961.833689][ T6005] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 961.856204][ T6005] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.880961][ T5954] usb 5-1: USB disconnect, device number 24 [ 961.897124][ T6005] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 961.911841][ T30] audit: type=1326 audit(1764745606.349:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14852 comm="syz.9.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5dd8f749 code=0x7ffc0000 [ 961.940673][ T5954] usblp0: removed [ 961.970413][ T6005] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 961.981113][ T6005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.016666][ T6005] usb 9-1: config 0 descriptor?? [ 962.030391][ T30] audit: type=1326 audit(1764745606.369:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14852 comm="syz.9.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5dd8f749 code=0x7ffc0000 [ 962.066775][ T6005] pxrc 9-1:0.0: Could not find endpoint [ 962.103443][ T6005] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 962.150488][ T30] audit: type=1326 audit(1764745606.369:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14852 comm="syz.9.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fec5dd8f749 code=0x7ffc0000 [ 962.223825][ T30] audit: type=1326 audit(1764745606.369:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14852 comm="syz.9.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5dd8f749 code=0x7ffc0000 [ 962.385627][ T5954] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 962.792168][ T6005] usb 9-1: USB disconnect, device number 18 [ 962.861679][ T6841] libceph: connect (1)[c::]:6789 error -101 [ 962.867746][ T6841] libceph: mon0 (1)[c::]:6789 connect error [ 963.020508][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 963.084569][T14864] ceph: No mds server is up or the cluster is laggy [ 963.153337][ T6841] libceph: connect (1)[c::]:6789 error -101 [ 963.172301][ T6841] libceph: mon0 (1)[c::]:6789 connect error [ 963.298512][ T5954] usb 5-1: device descriptor read/all, error -71 [ 964.165871][ T5954] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 964.472660][ T5954] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 964.510515][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.573293][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 964.651137][ T5954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.696710][ T5954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.742314][ T5954] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 964.784404][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 964.840056][ T5954] usb 5-1: Product: syz [ 965.689937][ T5954] usb 5-1: Manufacturer: syz [ 965.704967][ T5954] cdc_wdm 5-1:1.0: skipping garbage [ 965.710207][ T5954] cdc_wdm 5-1:1.0: skipping garbage [ 965.717707][ T5954] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 965.723737][ T5954] cdc_wdm 5-1:1.0: Unknown control protocol [ 965.742831][T14904] 9pnet_fd: Insufficient options for proto=fd [ 965.921208][ T5954] usb 5-1: USB disconnect, device number 26 [ 966.053888][ T30] audit: type=1326 audit(1764745610.489:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12638f749 code=0x7ffc0000 [ 966.096906][ T30] audit: type=1326 audit(1764745610.489:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fb12638f749 code=0x7ffc0000 [ 966.166591][ T30] audit: type=1326 audit(1764745610.489:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12638f749 code=0x7ffc0000 [ 969.599093][ T30] audit: type=1326 audit(1764745614.029:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 969.734033][T14965] 9pnet_fd: Insufficient options for proto=fd [ 969.863097][ T30] audit: type=1326 audit(1764745614.059:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 969.956189][ T30] audit: type=1326 audit(1764745614.059:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 970.456963][ T30] audit: type=1326 audit(1764745614.059:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 970.480197][ T30] audit: type=1326 audit(1764745614.059:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14959 comm="syz.5.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 971.902399][ T6030] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 971.990864][T14928] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 972.103931][ T6030] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 972.145232][ T6030] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.166339][T14928] usb 6-1: Using ep0 maxpacket: 8 [ 972.385714][ T6030] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 972.405790][T14928] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 973.088719][ T6030] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.100206][T14928] usb 6-1: config 179 has no interface number 0 [ 973.109905][T14928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 973.223563][ T6030] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.233904][T14928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 973.248012][ T6030] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 973.265993][T14928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 973.282380][ T6030] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 973.497520][ T6030] usb 9-1: Product: syz [ 973.503044][T14928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 973.514529][ T6030] usb 9-1: Manufacturer: syz [ 973.521762][T14928] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 973.537778][T14928] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 973.539432][ T6030] cdc_wdm 9-1:1.0: skipping garbage [ 973.555313][T14928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.563570][ T6030] cdc_wdm 9-1:1.0: skipping garbage [ 973.576647][T14992] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 973.590948][ T6030] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 973.600472][ T6030] cdc_wdm 9-1:1.0: Unknown control protocol [ 973.757820][T14985] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 973.808682][T14928] usb 9-1: USB disconnect, device number 19 [ 973.999357][ T6030] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14 [ 974.192918][ T6030] usb 6-1: USB disconnect, device number 13 [ 974.198892][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 974.198931][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 974.351191][T14928] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 974.539137][T14928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 974.564253][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 974.598055][T14928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 974.695382][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 974.786590][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 974.851798][ T6841] IPVS: starting estimator thread 0... [ 974.858863][T14928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 974.887089][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 974.941882][T15024] IPVS: using max 32 ests per chain, 76800 per kthread [ 974.956426][T14928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.003212][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 975.039323][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 975.103692][T14928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 975.153560][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 975.441260][T14928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.620747][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 975.680580][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 975.687199][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 975.704766][T14928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 975.722723][T14928] usb 5-1: string descriptor 0 read error: -22 [ 975.730783][T14928] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 975.740860][T14928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.761881][T14928] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 975.942878][T14928] libceph: connect (1)[c::]:6789 error -101 [ 975.958005][T14928] libceph: mon0 (1)[c::]:6789 connect error [ 975.990123][T15035] ceph: No mds server is up or the cluster is laggy [ 979.334782][T15083] loop9: detected capacity change from 0 to 2048 [ 979.387873][T15083] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 979.412272][T15083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.553024][ T5921] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 979.723551][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 979.752866][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.787683][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 979.825567][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.861571][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.887475][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 979.922991][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 979.965257][ T5921] usb 2-1: Product: syz [ 979.969466][ T5921] usb 2-1: Manufacturer: syz [ 980.028018][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 980.049586][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 980.088805][ T5921] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 980.111869][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol [ 980.426847][ T5921] usb 5-1: USB disconnect, device number 27 [ 982.407235][ T5954] usb 2-1: USB disconnect, device number 7 [ 982.973811][T15136] 9pnet_virtio: no channels available for device syz [ 982.991002][T15136] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 982.999640][T15136] overlayfs: overlapping lowerdir path [ 986.198447][T15153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1965'. [ 988.605827][T15178] binder: BINDER_SET_CONTEXT_MGR already set [ 988.624294][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 988.660217][T15178] binder: 15177:15178 ioctl 4018620d 200000000100 returned -16 [ 988.945713][T15182] binder: BINDER_SET_CONTEXT_MGR already set [ 988.952115][T15182] binder: 15177:15182 ioctl 4018620d 2000000002c0 returned -16 [ 991.438228][T15201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 991.570970][T15210] syzkaller0: entered promiscuous mode [ 991.576690][T15210] syzkaller0: entered allmulticast mode [ 991.607371][T15201] block device autoloading is deprecated and will be removed. [ 992.020588][ T5954] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 992.198328][ T5954] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 992.267110][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.902157][ T5954] usb 2-1: Product: syz [ 992.914143][ T5954] usb 2-1: Manufacturer: syz [ 992.918758][ T5954] usb 2-1: SerialNumber: syz [ 992.977169][ T5954] usb 2-1: config 0 descriptor?? [ 993.020429][ T5921] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 993.075460][T15241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 993.086402][T15241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 993.095521][T15241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 993.104063][T15241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 993.112247][T15241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 993.310364][ T5921] usb 10-1: Using ep0 maxpacket: 8 [ 993.414359][ T5921] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 993.446157][ T5921] usb 10-1: config 0 has no interface number 0 [ 993.593260][ T5921] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 993.660568][ T5921] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 993.731025][ T5921] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 993.797663][ T5921] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 994.370798][T15241] Bluetooth: hci4: command 0x0405 tx timeout [ 994.573064][ T5921] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 994.601571][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.612068][ T5921] usb 10-1: config 0 descriptor?? [ 994.625117][ T5921] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 995.180894][T10609] Bluetooth: hci3: command tx timeout [ 996.980508][ T9243] usb 10-1: USB disconnect, device number 7 [ 997.021140][ T9243] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 997.330649][T10609] Bluetooth: hci3: command tx timeout [ 997.425897][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.439058][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.733738][T15236] chnl_net:caif_netlink_parms(): no params data found [ 997.856498][T15271] openvswitch: netlink: Missing key (keys=40, expected=100) [ 997.939446][T15271] 9pnet_virtio: no channels available for device syz [ 999.131024][ T6841] usb 2-1: USB disconnect, device number 8 [ 999.410613][T10609] Bluetooth: hci3: command tx timeout [ 999.758596][T15318] netlink: 'syz.5.2006': attribute type 1 has an invalid length. [ 999.805132][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2006'. [ 999.832843][T15298] syzkaller0: entered promiscuous mode [ 999.838327][T15298] syzkaller0: entered allmulticast mode [ 1000.246339][ T4182] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.541399][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.550181][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.568579][T15236] bridge_slave_0: entered allmulticast mode [ 1000.600978][T15236] bridge_slave_0: entered promiscuous mode [ 1000.742245][T15335] i2c i2c-0: Invalid block write size 34 [ 1001.153019][ T4182] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.330352][T15342] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1001.357119][T15342] 9pnet_virtio: no channels available for device syz [ 1001.410949][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.437702][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.446804][T15236] bridge_slave_1: entered allmulticast mode [ 1001.490210][T15236] bridge_slave_1: entered promiscuous mode [ 1001.490568][T10609] Bluetooth: hci3: command tx timeout [ 1001.786426][ T4182] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.199113][ T4182] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.527548][T15236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.595344][T15236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.161270][ T5921] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1005.244702][T15236] team0: Port device team_slave_0 added [ 1005.322238][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 1005.333180][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1005.353159][ T5921] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1005.377027][T15236] team0: Port device team_slave_1 added [ 1005.387649][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.455683][ T5921] usb 6-1: config 0 descriptor?? [ 1006.111515][ T4182] bridge_slave_1: left allmulticast mode [ 1006.117215][ T4182] bridge_slave_1: left promiscuous mode [ 1006.143217][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.258524][ T4182] bridge_slave_0: left allmulticast mode [ 1006.291128][ T4182] bridge_slave_0: left promiscuous mode [ 1006.296968][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.336348][T15385] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1006.424923][ T5921] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1008.161844][ T5921] usb 6-1: USB disconnect, device number 14 [ 1016.984067][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.054959][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.088308][ T4182] bond0 (unregistering): Released all slaves [ 1017.470545][T15236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.875196][ T5954] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1017.897173][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.022196][ T5954] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1018.155920][T15236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.181083][T15458] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1018.243187][T15478] fido_id[15478]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1019.441438][T15236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.448421][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.475626][T15236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.607075][T15458] 9pnet_virtio: no channels available for device syz [ 1021.504272][T15236] hsr_slave_0: entered promiscuous mode [ 1021.512874][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2056'. [ 1021.546195][T15236] hsr_slave_1: entered promiscuous mode [ 1021.889049][T15236] debugfs: 'hsr0' already exists in 'hsr' [ 1021.895463][T15236] Cannot create hsr debugfs directory [ 1022.719694][ T4182] hsr_slave_0: left promiscuous mode [ 1022.800510][ T4182] hsr_slave_1: left promiscuous mode [ 1022.806605][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.890417][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.921291][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.981415][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.352863][T15540] loop8: detected capacity change from 0 to 764 [ 1024.454248][ T4182] veth1_macvtap: left promiscuous mode [ 1024.464344][ T4182] veth0_macvtap: left promiscuous mode [ 1024.810413][ T4182] veth1_vlan: left promiscuous mode [ 1024.815792][ T4182] veth0_vlan: left promiscuous mode [ 1027.086362][T15554] loop8: detected capacity change from 0 to 2048 [ 1027.125498][T11658] libceph: connect (1)[c::]:6789 error -101 [ 1027.135632][T15554] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1027.169440][T11658] libceph: mon0 (1)[c::]:6789 connect error [ 1027.220994][T15550] ceph: No mds server is up or the cluster is laggy [ 1027.243984][T14928] libceph: connect (1)[c::]:6789 error -101 [ 1027.250146][T14928] libceph: mon0 (1)[c::]:6789 connect error [ 1027.301965][T15554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.620882][T15561] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1029.763782][T15583] loop5: detected capacity change from 0 to 764 [ 1032.119903][T15581] block device autoloading is deprecated and will be removed. [ 1034.024405][T15611] loop4: detected capacity change from 0 to 2048 [ 1034.063598][T15611] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1034.123466][T15611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1034.496598][T15613] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1036.045090][ T4182] team0 (unregistering): Port device team_slave_1 removed [ 1037.201029][ T4182] team0 (unregistering): Port device team_slave_0 removed [ 1037.740607][T11658] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1038.238041][T11658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1038.254995][T11658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1038.290543][T11658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1038.304255][T11658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1038.379382][T11658] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1038.400133][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 1038.408653][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 1038.415971][T11658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.425061][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 1038.432771][T11658] usb 2-1: Product: syz [ 1038.437193][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 1038.443688][T11658] usb 2-1: Manufacturer: syz [ 1038.460389][T11658] usb 2-1: SerialNumber: syz [ 1038.479059][T11658] usb 2-1: config 0 descriptor?? [ 1038.613448][T15653] ceph: No mds server is up or the cluster is laggy [ 1038.713379][T11658] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1038.750525][T15658] loop9: detected capacity change from 0 to 2048 [ 1038.839205][T15658] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1038.932638][T15658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1038.972384][T11658] usb 2-1: USB disconnect, device number 9 [ 1043.510114][ T4182] IPVS: stop unused estimator thread 0... [ 1043.630400][ T9781] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1043.839612][ T9781] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1043.858692][ T9781] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1043.869358][ T9781] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1043.885942][ T9781] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1043.971391][ T9781] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1043.980996][ T9781] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.989182][ T9781] usb 10-1: Product: syz [ 1043.994478][ T9781] usb 10-1: Manufacturer: syz [ 1043.999315][ T9781] usb 10-1: SerialNumber: syz [ 1044.081601][ T9781] usb 10-1: config 0 descriptor?? [ 1044.375728][ T9781] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1044.532594][ T6172] usb 10-1: USB disconnect, device number 8 [ 1045.410483][T15728] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1045.417042][T15728] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1045.425640][T15728] vhci_hcd vhci_hcd.0: Device attached [ 1045.719028][T15732] vhci_hcd: connection closed [ 1045.720007][ T60] vhci_hcd: stop threads [ 1045.720914][ T9781] usb 50-1: SetAddress Request (2) to port 0 [ 1045.767318][ T9781] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1046.026226][T15236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1046.260355][ T60] vhci_hcd: release socket [ 1046.278376][ T60] vhci_hcd: disconnect device [ 1046.300168][T15236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1046.418731][T15236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1046.514529][T15236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1046.710617][ T5921] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 1047.093059][ T5921] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.137604][ T5921] usb 10-1: config 0 has no interface number 0 [ 1047.164363][ T5921] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1047.228665][ T5921] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1047.279911][ T5921] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1047.311089][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.429706][ T5921] usb 10-1: config 0 descriptor?? [ 1047.471284][T15750] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1047.596374][T15236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.615086][ T5921] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1047.855411][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.888129][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.895318][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.013272][ T5921] usb 10-1: USB disconnect, device number 9 [ 1048.031550][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.038707][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.697331][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2129'. [ 1050.167268][T15241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.176426][T15241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.186081][T15241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.200795][T15241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.210104][T15241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.781171][ T6172] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1050.944809][ T9781] usb 50-1: device descriptor read/8, error -110 [ 1050.980705][ T6172] usb 5-1: Using ep0 maxpacket: 8 [ 1051.300048][ T6172] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1051.387939][ T6172] usb 5-1: config 0 has no interface number 0 [ 1051.422744][ T6172] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1051.447565][ T6172] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1051.474098][ T6172] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1051.545328][ T6172] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1051.610537][ T6172] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1051.655574][ T9781] usb usb50-port1: attempt power cycle [ 1051.693924][ T6172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.744352][ T6172] usb 5-1: config 0 descriptor?? [ 1051.787324][ T6172] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1052.136060][ T5954] usb 5-1: USB disconnect, device number 28 [ 1052.138135][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1052.142321][T15808] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1052.221644][ T9781] usb usb50-port1: unable to enumerate USB device [ 1052.330866][ T5954] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1052.344956][T10609] Bluetooth: hci5: command tx timeout [ 1054.202678][T15798] chnl_net:caif_netlink_parms(): no params data found [ 1054.370358][T10609] Bluetooth: hci5: command tx timeout [ 1055.072651][ T2982] bridge_slave_1: left allmulticast mode [ 1055.140502][ T2982] bridge_slave_1: left promiscuous mode [ 1055.200748][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.723118][ T2982] bridge_slave_0: left allmulticast mode [ 1056.068152][ T2982] bridge_slave_0: left promiscuous mode [ 1056.200519][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.465865][T10609] Bluetooth: hci5: command tx timeout [ 1056.956891][T15882] serio: Serial port ptm0 [ 1058.530609][T10609] Bluetooth: hci5: command tx timeout [ 1058.855151][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1058.861849][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.815526][T15921] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2156'. [ 1060.317184][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.467247][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.558600][ T2982] bond0 (unregistering): Released all slaves [ 1060.716911][T15921] hsr_slave_1: entered allmulticast mode [ 1060.940466][T15241] Bluetooth: hci1: command 0x0406 tx timeout [ 1060.978046][ T2982] hsr_slave_0: left promiscuous mode [ 1061.003019][ T2982] hsr_slave_1: left promiscuous mode [ 1061.009366][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.210803][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.738252][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 1064.747222][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2170'. [ 1064.892006][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 1067.701708][T15996] overlayfs: failed to resolve './file1/file0': -2 [ 1069.459865][T15798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.514700][T15798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.544439][T15798] bridge_slave_0: entered allmulticast mode [ 1069.575827][T15798] bridge_slave_0: entered promiscuous mode [ 1069.647767][T15798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.682037][T15798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.689737][T15798] bridge_slave_1: entered allmulticast mode [ 1069.753254][T15798] bridge_slave_1: entered promiscuous mode [ 1070.018539][T16017] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1071.947139][T15798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.023917][T15798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.083592][T16021] tipc: Enabling of bearer rejected, failed to enable media [ 1073.318658][T15798] team0: Port device team_slave_0 added [ 1073.439557][T15798] team0: Port device team_slave_1 added [ 1074.106107][T15798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.106131][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.106165][T15798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.139215][T15798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.139239][T15798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.139274][T15798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.424205][T15798] hsr_slave_0: entered promiscuous mode [ 1074.428592][T15798] hsr_slave_1: entered promiscuous mode [ 1074.443404][T15798] debugfs: 'hsr0' already exists in 'hsr' [ 1074.443428][T15798] Cannot create hsr debugfs directory [ 1074.520344][ T9781] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1074.812529][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2191'. [ 1074.953843][ T9781] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1074.991490][ T9781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.045866][ T9781] usb 9-1: Product: syz [ 1075.050065][ T9781] usb 9-1: Manufacturer: syz [ 1075.106229][ T9781] usb 9-1: SerialNumber: syz [ 1075.168556][ T9781] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1075.772040][T11658] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1076.025345][T16061] 9pnet_virtio: no channels available for device syz [ 1076.475496][T14928] usb 9-1: USB disconnect, device number 20 [ 1076.853585][T11658] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1076.920792][T11658] ath9k_htc: Failed to initialize the device [ 1076.991709][T14928] usb 9-1: ath9k_htc: USB layer deinitialized [ 1078.642432][T16106] tipc: Enabling of bearer rejected, failed to enable media [ 1079.402968][T16127] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.452601][T16127] binder: 16126:16127 ioctl 4018620d 200000000100 returned -16 [ 1079.840864][T16131] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.942961][T15798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1079.973520][T16131] binder: 16126:16131 ioctl 4018620d 2000000002c0 returned -16 [ 1080.050160][T15798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1080.107857][T15798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1080.170121][T15798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1080.732683][T15798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.804245][T15798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.932693][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.939991][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.120874][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.128038][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.967418][T16161] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1082.850557][ T5921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1083.091935][T15798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.172302][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1083.200300][ T5921] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1083.251355][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1083.310390][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1083.370285][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1083.451647][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1083.491015][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1083.502107][T15798] veth0_vlan: entered promiscuous mode [ 1083.527121][ T5921] usb 2-1: Product: syz [ 1083.544393][ T5921] usb 2-1: Manufacturer: syz [ 1083.571344][T15798] veth1_vlan: entered promiscuous mode [ 1083.603135][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 1083.632703][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 1083.677643][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1083.720642][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol [ 1083.746288][T15798] veth0_macvtap: entered promiscuous mode [ 1083.781890][T15798] veth1_macvtap: entered promiscuous mode [ 1084.909245][ T9243] usb 2-1: USB disconnect, device number 10 [ 1084.962628][T15798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.031945][T15798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.146784][ T9197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.188532][ T9197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.229832][ T9197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.294926][ T9197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.326330][T16197] tipc: Enabling of bearer rejected, failed to enable media [ 1085.728615][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.785739][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.042049][ T6453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.087311][ T6453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.335715][ T6841] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1087.822382][ T6841] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1087.869052][ T6841] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1088.124568][ T6841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1088.172209][ T6841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1088.199866][ T6841] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1088.230383][ T6841] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1088.270670][ T6841] usb 4-1: Product: syz [ 1088.350310][ T6841] usb 4-1: Manufacturer: syz [ 1088.367178][ T6841] cdc_wdm 4-1:1.0: skipping garbage [ 1088.388819][ T6841] cdc_wdm 4-1:1.0: skipping garbage [ 1088.409169][ T6841] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1088.589688][ T6841] usb 4-1: USB disconnect, device number 7 [ 1088.951789][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2220'. [ 1095.617941][T16282] loop5: detected capacity change from 0 to 8 [ 1096.124403][T16286] tipc: Enabling of bearer rejected, failed to enable media [ 1097.557205][ T5921] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1097.783941][ T5921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1097.861976][ T5921] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1097.884498][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1097.940326][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1097.983388][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1098.014221][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1098.045242][ T5921] usb 4-1: Product: syz [ 1098.049442][ T5921] usb 4-1: Manufacturer: syz [ 1098.086378][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 1098.108931][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 1098.124566][ T5921] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1098.288256][ T5921] usb 4-1: USB disconnect, device number 8 [ 1101.206129][T16353] loop5: detected capacity change from 0 to 2048 [ 1101.244010][T16358] loop3: detected capacity change from 0 to 8 [ 1101.567758][T16353] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1101.580782][T16360] fuse: Bad value for 'fd' [ 1101.661845][T16353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1107.450353][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2262'. [ 1107.710392][ T9243] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1108.085446][ T9243] usb 9-1: Using ep0 maxpacket: 8 [ 1108.102416][ T9243] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.120465][ T9243] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1108.215613][T16430] 9pnet_virtio: no channels available for device syz [ 1109.140416][ T9243] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.805433][ T9243] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1109.904588][ T9243] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.036668][ T9243] hub 9-1:1.0: bad descriptor, ignoring hub [ 1110.078004][ T9243] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1110.329204][ T9243] cdc_wdm 9-1:1.0: skipping garbage [ 1110.350341][ T9243] cdc_wdm 9-1:1.0: skipping garbage [ 1111.291437][ T9243] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1111.395036][T15241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1111.490457][T15241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1111.557114][T15241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1111.605003][T15241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1111.727430][T15241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1112.358307][ T6172] usb 9-1: USB disconnect, device number 21 [ 1113.984762][T10609] Bluetooth: hci3: command tx timeout [ 1115.723672][ T7188] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.909103][T16439] chnl_net:caif_netlink_parms(): no params data found [ 1116.050371][T10609] Bluetooth: hci3: command tx timeout [ 1116.240550][T16490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1116.247140][T16490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1116.735148][ T7188] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.741639][T16490] vhci_hcd vhci_hcd.0: Device attached [ 1117.161723][T16495] vhci_hcd: connection closed [ 1117.175287][ T5954] usb 40-1: SetAddress Request (2) to port 0 [ 1117.186852][ T6453] vhci_hcd: stop threads [ 1117.194842][ T6453] vhci_hcd: release socket [ 1117.222427][ T6453] vhci_hcd: disconnect device [ 1117.229617][ T5954] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1117.300377][ T5954] usb 40-1: enqueue for inactive port 0 [ 1117.594428][T16505] loop8: detected capacity change from 0 to 2048 [ 1117.629916][T16505] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1117.673245][T16505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1117.711277][ T5954] usb usb40-port1: attempt power cycle [ 1117.842105][ T7188] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.130703][T10609] Bluetooth: hci3: command tx timeout [ 1118.311543][ T5954] usb usb40-port1: unable to enumerate USB device [ 1118.437985][ T7188] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.779533][T16439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.860182][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.867838][T16439] bridge_slave_0: entered allmulticast mode [ 1119.122062][T16439] bridge_slave_0: entered promiscuous mode [ 1119.201650][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.259883][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.293066][T16439] bridge_slave_1: entered allmulticast mode [ 1119.359113][T16439] bridge_slave_1: entered promiscuous mode [ 1120.214375][T10609] Bluetooth: hci3: command tx timeout [ 1120.392604][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.399633][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.186029][T16439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.295918][T16439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.910412][ T8825] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1122.157469][T16439] team0: Port device team_slave_0 added [ 1122.197677][T16439] team0: Port device team_slave_1 added [ 1122.252176][ T7188] gretap0: left allmulticast mode [ 1122.282141][ T8825] usb 5-1: config 0 has no interfaces? [ 1122.287488][T16560] netlink: 'syz.3.2296': attribute type 4 has an invalid length. [ 1122.312486][ T7188] gretap0: left promiscuous mode [ 1122.317646][ T7188] bridge0: port 3(gretap0) entered disabled state [ 1122.329291][ T8825] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1122.346962][T16561] netlink: 'syz.3.2296': attribute type 4 has an invalid length. [ 1122.400373][ T8825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.408413][ T8825] usb 5-1: Product: syz [ 1122.469998][ T8825] usb 5-1: Manufacturer: syz [ 1122.481769][ T7188] bridge_slave_1: left allmulticast mode [ 1122.487435][ T7188] bridge_slave_1: left promiscuous mode [ 1122.498994][ T8825] usb 5-1: SerialNumber: syz [ 1122.522606][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.538882][ T8825] usb 5-1: config 0 descriptor?? [ 1122.594750][ T7188] bridge_slave_0: left allmulticast mode [ 1122.616243][ T7188] bridge_slave_0: left promiscuous mode [ 1122.639850][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.478897][ T7188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.575079][ T7188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.612760][ T7188] bond0 (unregistering): Released all slaves [ 1125.651093][T16591] loop5: detected capacity change from 0 to 512 [ 1125.712499][T16591] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2302: inode has both inline data and extents flags [ 1125.835507][T16591] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2302: couldn't read orphan inode 15 (err -117) [ 1125.902099][T16591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.948434][T16591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1125.965697][T16591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1125.984977][ T7188] tipc: Left network mode [ 1126.000453][ T5896] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1126.079508][T10362] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.503797][ T5896] usb 9-1: Using ep0 maxpacket: 16 [ 1126.516962][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1126.529675][ T5896] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1126.539799][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.548157][ T5896] usb 9-1: Product: syz [ 1126.552685][ T5896] usb 9-1: Manufacturer: syz [ 1126.558411][ T5896] usb 9-1: SerialNumber: syz [ 1126.566517][ T5896] usb 9-1: config 0 descriptor?? [ 1126.601165][ T5896] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1126.650316][ T5896] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1126.722803][T16439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.729797][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.850432][T16439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.932618][T16439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.960833][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.050656][T16439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.302953][ T5896] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1127.953960][ T5896] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1128.518922][ T5896] em28xx 9-1:0.0: board has no eeprom [ 1128.763776][T16617] loop5: detected capacity change from 0 to 8 [ 1128.850603][ T5896] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1129.150518][ T5896] em28xx 9-1:0.0: dvb set to bulk mode. [ 1129.158667][ T6172] em28xx 9-1:0.0: Binding DVB extension [ 1129.231001][ T5896] usb 9-1: USB disconnect, device number 22 [ 1129.259965][T16439] hsr_slave_0: entered promiscuous mode [ 1129.309658][T16439] hsr_slave_1: entered promiscuous mode [ 1129.310584][ T5896] em28xx 9-1:0.0: Disconnecting em28xx [ 1129.345733][T16439] debugfs: 'hsr0' already exists in 'hsr' [ 1129.377159][T16439] Cannot create hsr debugfs directory [ 1129.578353][ T8825] libceph: connect (1)[c::]:6789 error -101 [ 1129.631042][ T7188] hsr_slave_0: left promiscuous mode [ 1129.644741][ T6172] em28xx 9-1:0.0: Registering input extension [ 1129.655804][ T8825] libceph: mon0 (1)[c::]:6789 connect error [ 1129.687044][ T7188] hsr_slave_1: left promiscuous mode [ 1129.700552][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.729350][ T5896] em28xx 9-1:0.0: Closing input extension [ 1129.735778][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.762784][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.786376][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.898366][ T7188] veth1_macvtap: left promiscuous mode [ 1129.900916][ T5896] em28xx 9-1:0.0: Freeing device [ 1129.921754][ T7188] veth0_macvtap: left promiscuous mode [ 1129.950994][ T7188] veth1_vlan: left promiscuous mode [ 1129.990582][ T6172] libceph: connect (1)[c::]:6789 error -101 [ 1129.991298][ T7188] veth0_vlan: left promiscuous mode [ 1129.996676][ T6172] libceph: mon0 (1)[c::]:6789 connect error [ 1130.236352][T16624] ceph: No mds server is up or the cluster is laggy [ 1130.637786][T16636] loop5: detected capacity change from 0 to 512 [ 1130.743809][T16636] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2315: inode has both inline data and extents flags [ 1130.901607][T16636] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2315: couldn't read orphan inode 15 (err -117) [ 1130.978624][T16636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.138364][T16636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1131.161035][T16636] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1132.283603][T10362] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.118816][ T7188] team0 (unregistering): Port device team_slave_1 removed [ 1135.267744][ T7188] team0 (unregistering): Port device team_slave_0 removed [ 1138.334673][T15241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1138.354391][T15241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1138.370018][T15241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1138.459566][T15241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1138.480184][T15241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1138.970314][ T9243] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1139.180394][ T9243] usb 4-1: Using ep0 maxpacket: 8 [ 1139.207649][ T9243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.267492][ T9243] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1139.310372][ T9243] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.320172][ T9243] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1140.290042][ T5954] usb 5-1: USB disconnect, device number 29 [ 1140.370547][ T9243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.478081][ T9243] hub 4-1:1.0: bad descriptor, ignoring hub [ 1140.530427][T15241] Bluetooth: hci4: command tx timeout [ 1140.589233][ T9243] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1140.610326][ T9243] cdc_wdm 4-1:1.0: skipping garbage [ 1140.615582][ T9243] cdc_wdm 4-1:1.0: skipping garbage [ 1140.640522][ T9243] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1140.869236][ T7188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.011889][ T5954] usb 4-1: USB disconnect, device number 9 [ 1141.193845][ T7188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.357421][ T7188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.570151][ T7188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.872424][T16439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1141.985946][T16738] 9pnet_virtio: no channels available for device syz [ 1142.601735][T16439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1142.612084][T15241] Bluetooth: hci4: command tx timeout [ 1143.030997][T16439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1144.229498][T16439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1144.492369][ T5954] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1144.657130][T16697] chnl_net:caif_netlink_parms(): no params data found [ 1144.673768][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1144.690618][T15241] Bluetooth: hci4: command tx timeout [ 1144.696110][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.696149][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.696194][ T5954] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1144.696223][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.699178][ T5954] usb 4-1: config 0 descriptor?? [ 1144.912476][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 1145.046073][ T7188] gretap0: left allmulticast mode [ 1145.070469][ T7188] gretap0: left promiscuous mode [ 1145.121252][ T7188] bridge0: port 3(gretap0) entered disabled state [ 1145.208097][ T7188] bridge_slave_1: left allmulticast mode [ 1145.223365][ T7188] bridge_slave_1: left promiscuous mode [ 1145.252936][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.298693][ T7188] bridge_slave_0: left allmulticast mode [ 1145.310658][ T5954] kye 0003:0458:5016.0008: control desc unexpectedly large [ 1145.319447][ T7188] bridge_slave_0: left promiscuous mode [ 1145.335573][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.353042][ T5954] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0008/input/input16 [ 1145.535866][ T5954] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0008/input/input17 [ 1145.640865][ T5954] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1146.494895][ C0] kye 0003:0458:5016.0008: usb_submit_urb(ctrl) failed: -1 [ 1146.785332][T15241] Bluetooth: hci4: command tx timeout [ 1147.987900][T11658] usb 4-1: USB disconnect, device number 10 [ 1148.715993][ T7188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.805319][T16809] loop3: detected capacity change from 0 to 2048 [ 1148.818075][ T7188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.860987][ T7188] bond0 (unregistering): Released all slaves [ 1149.020585][T16809] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1149.188173][T16809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1149.849764][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'. [ 1150.215609][ T7188] bond1 (unregistering): Released all slaves [ 1150.351366][T16819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1150.484690][T16820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1150.522286][T16820] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1150.563053][T16820] bond1: (slave vti0): Error -95 calling set_mac_address [ 1150.643925][ T7188] tipc: Left network mode [ 1150.833137][T16697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.844722][T16697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.855675][T16697] bridge_slave_0: entered allmulticast mode [ 1150.870357][T16697] bridge_slave_0: entered promiscuous mode [ 1151.677458][T16697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.877591][T16697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.885101][T16697] bridge_slave_1: entered allmulticast mode [ 1151.903133][T16697] bridge_slave_1: entered promiscuous mode [ 1151.983148][T16439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.016335][T16439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.076188][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.083422][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.113234][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.120426][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.261544][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 1153.381352][T16851] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1153.524908][T16858] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1153.567588][ T30] audit: type=1326 audit(1764745797.989:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc58f749 code=0x7ffc0000 [ 1153.697338][ T30] audit: type=1326 audit(1764745797.989:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfc58f749 code=0x7ffc0000 [ 1153.735872][T16851] binder: 16849:16851 ioctl 40046629 200000000200 returned -22 [ 1153.984925][T16842] pim6reg: entered allmulticast mode [ 1154.001118][T16842] pim6reg: left allmulticast mode [ 1154.130539][T16697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.287764][T16697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.461160][ T7188] hsr_slave_0: left promiscuous mode [ 1154.483531][ T7188] hsr_slave_1: left promiscuous mode [ 1154.513404][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.540967][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.575104][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.615788][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.649075][ T7188] veth1_macvtap: left promiscuous mode [ 1154.681185][ T7188] veth0_macvtap: left promiscuous mode [ 1154.702820][ T7188] veth1_vlan: left promiscuous mode [ 1154.708155][ T7188] veth0_vlan: left promiscuous mode [ 1154.985843][T16858] syz.1.2368 (16858): drop_caches: 2 [ 1161.822755][T16912] hub 1-0:1.0: USB hub found [ 1161.830906][T16912] hub 1-0:1.0: 1 port detected [ 1162.916008][ T7188] team0 (unregistering): Port device team_slave_1 removed [ 1163.129239][ T7188] team0 (unregistering): Port device team_slave_0 removed [ 1164.349970][T16921] overlayfs: failed to resolve './file1/file0': -2 [ 1165.285160][T16697] team0: Port device team_slave_0 added [ 1166.305926][T16697] team0: Port device team_slave_1 added [ 1166.398990][T16932] loop8: detected capacity change from 0 to 8 [ 1166.920103][T16697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.951004][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.092987][T16697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.189521][T16697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.228028][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.460482][T16697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.498960][T16957] program syz.3.2390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1167.518725][ T8825] IPVS: starting estimator thread 0... [ 1167.751779][T16958] IPVS: using max 26 ests per chain, 62400 per kthread [ 1168.437891][T10609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1168.455392][T10609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1168.469152][T10609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1168.477872][T10609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1168.513001][T10609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1168.908359][ T7188] IPVS: stop unused estimator thread 0... [ 1169.147858][T16697] hsr_slave_0: entered promiscuous mode [ 1169.182053][T16697] hsr_slave_1: entered promiscuous mode [ 1170.740390][T10609] Bluetooth: hci0: command tx timeout [ 1172.770616][T15241] Bluetooth: hci0: command tx timeout [ 1173.711185][T16959] chnl_net:caif_netlink_parms(): no params data found [ 1174.222414][ T7188] bridge_slave_1: left allmulticast mode [ 1174.238610][ T7188] bridge_slave_1: left promiscuous mode [ 1174.248994][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.328542][ T7188] bridge_slave_0: left allmulticast mode [ 1174.360901][ T7188] bridge_slave_0: left promiscuous mode [ 1174.366682][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.856157][T15241] Bluetooth: hci0: command tx timeout [ 1176.375298][T17031] i2c i2c-0: Invalid block write size 37 [ 1176.930357][T15241] Bluetooth: hci0: command tx timeout [ 1178.367327][ T7188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.379874][ T7188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.391898][ T7188] bond0 (unregistering): Released all slaves [ 1178.823718][T16959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.851400][T16959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.859885][T16959] bridge_slave_0: entered allmulticast mode [ 1178.887929][T16959] bridge_slave_0: entered promiscuous mode [ 1178.977812][T17022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1178.993437][T17022] team0: Port device batadv1 added [ 1179.031916][T16959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.072083][T16959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.095123][T16959] bridge_slave_1: entered allmulticast mode [ 1179.411860][T16959] bridge_slave_1: entered promiscuous mode [ 1179.548680][ T7188] hsr_slave_0: left promiscuous mode [ 1179.565399][ T7188] hsr_slave_1: left promiscuous mode [ 1179.573270][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.586732][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.741102][T17053] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1179.747677][T17053] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1179.910491][T17053] vhci_hcd vhci_hcd.0: Device attached [ 1180.220515][T11658] usb 44-1: SetAddress Request (6) to port 0 [ 1180.256590][T11658] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1180.267971][T17066] vhci_hcd: connection closed [ 1180.293625][T16365] vhci_hcd: stop threads [ 1180.333288][T16365] vhci_hcd: release socket [ 1180.344406][T16365] vhci_hcd: disconnect device [ 1180.922451][ T7188] team0 (unregistering): Port device team_slave_1 removed [ 1181.103451][ T7188] team0 (unregistering): Port device team_slave_0 removed [ 1181.733879][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.741580][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.583150][T17090] i2c i2c-0: Invalid block write size 37 [ 1185.169065][T17058] syzkaller0: entered promiscuous mode [ 1185.169088][T17058] syzkaller0: entered allmulticast mode [ 1185.444684][T11658] usb 44-1: device descriptor read/8, error -110 [ 1185.666615][T16959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.730500][T16959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.851818][T11658] usb usb44-port1: attempt power cycle [ 1185.926059][T16697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1186.061342][T16697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1186.081361][T16959] team0: Port device team_slave_0 added [ 1186.094719][T16959] team0: Port device team_slave_1 added [ 1186.115504][T16697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1186.144531][T16697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1186.489079][T11658] usb usb44-port1: unable to enumerate USB device [ 1186.845741][T16959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.940406][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.059048][T16959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.116780][T16959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.154387][T16959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.228501][T16959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.305237][T17129] i2c i2c-0: Invalid block write size 37 [ 1189.101678][T16959] hsr_slave_0: entered promiscuous mode [ 1189.119357][T16959] hsr_slave_1: entered promiscuous mode [ 1189.131493][T16959] debugfs: 'hsr0' already exists in 'hsr' [ 1189.148951][T16959] Cannot create hsr debugfs directory [ 1189.385452][T17151] syzkaller0: entered promiscuous mode [ 1189.404540][T17151] syzkaller0: entered allmulticast mode [ 1189.626089][T16697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.076392][T16697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.193503][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.200720][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.269282][T16697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1191.283535][T16697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1191.306803][T17167] i2c i2c-0: Invalid block write size 37 [ 1191.335058][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.342329][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.530005][T16959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1194.629560][T16959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1194.759772][T16959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1194.841724][T16959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1195.288162][T17208] i2c i2c-0: Invalid block write size 37 [ 1195.329466][T17209] syzkaller0: entered promiscuous mode [ 1195.351073][T17209] syzkaller0: entered allmulticast mode [ 1195.460715][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2458'. [ 1195.506011][T16959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.766616][T16697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.483084][T16959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.534020][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.541257][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.596820][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.604059][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.548984][ T30] audit: type=1326 audit(1764745841.979:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1197.593963][T17244] 9pnet_virtio: no channels available for device syz [ 1197.690316][ T30] audit: type=1326 audit(1764745841.979:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1197.847238][ T30] audit: type=1326 audit(1764745842.029:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1197.869626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.084867][ T30] audit: type=1326 audit(1764745842.029:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.245883][ T30] audit: type=1326 audit(1764745842.029:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.268263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.446461][ T30] audit: type=1326 audit(1764745842.029:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.468839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.503792][T16959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.575671][ T30] audit: type=1326 audit(1764745842.059:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.683163][ T30] audit: type=1326 audit(1764745842.059:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.808811][ T30] audit: type=1326 audit(1764745842.059:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.919042][T16959] veth0_vlan: entered promiscuous mode [ 1198.935036][ T30] audit: type=1326 audit(1764745842.059:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17241 comm="syz.5.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1198.970108][T16959] veth1_vlan: entered promiscuous mode [ 1199.505829][T17274] 9pnet_virtio: no channels available for device syz [ 1199.514493][T10609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1199.534354][T10609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1199.563955][T10609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1199.573417][T10609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1199.584243][T10609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1200.337657][T17279] veth1_to_batadv: entered promiscuous mode [ 1200.350562][T17279] macsec1: entered promiscuous mode [ 1201.536068][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 1201.629472][T16959] veth0_macvtap: entered promiscuous mode [ 1201.657694][T15241] Bluetooth: hci3: command tx timeout [ 1201.728809][T16959] veth1_macvtap: entered promiscuous mode [ 1203.326900][T16959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.508047][T16959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.683369][T16365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.733063][T15241] Bluetooth: hci3: command tx timeout [ 1203.770283][T16365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.852577][T16365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.958929][T16278] bridge_slave_1: left allmulticast mode [ 1203.998404][T16278] bridge_slave_1: left promiscuous mode [ 1204.047023][T16278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.114034][T16278] bridge_slave_0: left allmulticast mode [ 1204.156452][T16278] bridge_slave_0: left promiscuous mode [ 1204.190460][T16278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.810732][T15241] Bluetooth: hci3: command tx timeout [ 1208.107508][T15241] Bluetooth: hci3: command tx timeout [ 1212.608970][T16278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.631768][T16278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.648069][T16278] bond0 (unregistering): Released all slaves [ 1212.726007][T16365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.615717][T16278] hsr_slave_0: left promiscuous mode [ 1214.671209][T16278] hsr_slave_1: left promiscuous mode [ 1214.695654][T16278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.724282][T16278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.109072][T16278] team0 (unregistering): Port device team_slave_1 removed [ 1218.242373][T16278] team0 (unregistering): Port device team_slave_0 removed [ 1219.591488][T17460] 9pnet_virtio: no channels available for device syz [ 1220.442831][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.478951][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.507800][T17271] chnl_net:caif_netlink_parms(): no params data found [ 1220.788006][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.803998][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.074189][T17477] binder: 17475:17477 ioctl 0 200000000040 returned -22 [ 1221.089787][T17477] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2508'. [ 1222.073396][T17481] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.085445][T17481] binder: 17480:17481 ioctl 4018620d 200000000040 returned -16 [ 1222.097505][T17271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.114104][T17271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.295163][T17271] bridge_slave_0: entered allmulticast mode [ 1222.304266][T17271] bridge_slave_0: entered promiscuous mode [ 1222.315346][T17271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.322603][T17271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.338384][T17271] bridge_slave_1: entered allmulticast mode [ 1222.349924][T17271] bridge_slave_1: entered promiscuous mode [ 1222.545587][T17496] netlink: 'syz.0.2257': attribute type 10 has an invalid length. [ 1223.702741][T17271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.886468][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2520'. [ 1223.927102][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1223.927125][ T30] audit: type=1326 audit(1764745868.359:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12638f749 code=0x7ffc0000 [ 1223.955888][T17271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.801529][ T30] audit: type=1326 audit(1764745868.399:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12638f749 code=0x7ffc0000 [ 1225.080450][T17271] team0: Port device team_slave_0 added [ 1225.750876][ T30] audit: type=1326 audit(1764745870.179:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17512 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1225.779864][T17271] team0: Port device team_slave_1 added [ 1225.831562][ T30] audit: type=1326 audit(1764745870.189:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17512 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40818f749 code=0x7ffc0000 [ 1225.885944][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 1226.058998][T17271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.078719][T17271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.591099][T17271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.649402][T17271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.683115][T17271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.830343][T17271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.207971][T17271] hsr_slave_0: entered promiscuous mode [ 1229.236536][T17271] hsr_slave_1: entered promiscuous mode [ 1231.885282][T17584] program syz.0.2534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1232.332729][T17593] i2c i2c-0: Invalid block write size 34 [ 1234.611483][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 1234.651002][T17271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1234.723543][T17271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1234.787932][T17271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1235.473558][T17271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1236.670292][T17521] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1237.480285][T17521] usb 1-1: Using ep0 maxpacket: 8 [ 1237.525804][T17521] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.570934][T17521] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1237.629178][T17521] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.705491][T17521] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1237.778678][T17521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.830913][T17521] hub 1-1:1.0: bad descriptor, ignoring hub [ 1237.873241][T17521] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1237.883612][T17271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.902090][T17521] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1237.960351][T17500] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1237.993892][T17271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.057276][T16365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.064495][T16365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.112301][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.119564][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.130580][T17500] usb 2-1: Using ep0 maxpacket: 8 [ 1238.141353][T17500] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1238.200252][T17500] usb 2-1: config 0 has no interface number 0 [ 1238.221922][T17500] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1238.280351][T17500] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1238.332919][T17500] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1238.364115][T17500] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1238.380584][ T9243] usb 1-1: USB disconnect, device number 7 [ 1238.446313][T17500] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1238.469261][T17500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.531455][T17500] usb 2-1: config 0 descriptor?? [ 1238.556064][T17500] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1239.812400][ T5921] usb 2-1: USB disconnect, device number 11 [ 1239.812552][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1239.932171][ T5921] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1241.087959][T17685] loop8: detected capacity change from 0 to 8 [ 1241.199033][T17271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.182461][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.199004][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.695831][T17271] veth0_vlan: entered promiscuous mode [ 1246.852993][T17271] veth1_vlan: entered promiscuous mode [ 1247.133918][T17271] veth0_macvtap: entered promiscuous mode [ 1247.243796][T17271] veth1_macvtap: entered promiscuous mode [ 1247.493813][T17271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.611942][T17271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.613131][ T3539] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.622827][ T3539] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.610138][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1354.617161][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17655/1:b..l P17737/1:b..l P6005/1:b..l [ 1354.628527][ C0] rcu: (detected by 0, t=10502 jiffies, g=107545, q=710 ncpus=2) [ 1354.636327][ C0] task:kworker/0:8 state:R running task stack:22576 pid:6005 tgid:6005 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1354.653104][ C0] Workqueue: events_power_efficient gc_worker [ 1354.659209][ C0] Call Trace: [ 1354.662475][ C0] [ 1354.665398][ C0] __schedule+0x14bc/0x5000 [ 1354.669898][ C0] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1354.675262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.680892][ C0] ? wg_packet_decrypt_worker+0xca4/0xd40 [ 1354.686610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.692249][ C0] ? __pfx___schedule+0x10/0x10 [ 1354.697090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.702731][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1354.707700][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1354.712982][ C0] preempt_schedule_irq+0xb5/0x150 [ 1354.718087][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1354.723811][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.729442][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1354.735248][ C0] irqentry_exit+0x5d8/0x660 [ 1354.739847][ C0] ? rcu_is_watching+0x15/0xb0 [ 1354.744642][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1354.750093][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 1354.756956][ C0] Code: f8 4d 85 e4 75 16 e8 01 d0 4e f8 eb 15 e8 fa cf 4e f8 e8 35 44 d4 01 4d 85 e4 74 ea e8 eb cf 4e f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 1354.776578][ C0] RSP: 0018:ffffc9000474f820 EFLAGS: 00000293 [ 1354.782643][ C0] RAX: ffffffff89723d85 RBX: 0000000000000000 RCX: ffff88802e4edb80 [ 1354.790693][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1354.798656][ C0] RBP: ffffc9000474f8d0 R08: ffffffff8f802677 R09: 1ffffffff1f004ce [ 1354.806625][ C0] R10: dffffc0000000000 R11: fffffbfff1f004cf R12: 0000000000000200 [ 1354.814601][ C0] R13: ffff88807f6e9a18 R14: 1ffff920008e9f04 R15: dffffc0000000000 [ 1354.822588][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1354.828899][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1354.835514][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.841156][ C0] gc_worker+0x308/0x1380 [ 1354.845491][ C0] ? gc_worker+0x264/0x1380 [ 1354.849996][ C0] ? __pfx_gc_worker+0x10/0x10 [ 1354.854755][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.860386][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1354.865576][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1354.871295][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1354.877018][ C0] process_scheduled_works+0xad1/0x1770 [ 1354.882589][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1354.888583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.894308][ C0] worker_thread+0x8a0/0xda0 [ 1354.898889][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1354.905212][ C0] ? __kthread_parkme+0x7b/0x200 [ 1354.910154][ C0] kthread+0x711/0x8a0 [ 1354.914240][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1354.919342][ C0] ? __pfx_kthread+0x10/0x10 [ 1354.923934][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.929565][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1354.934754][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.940377][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1354.945566][ C0] ? __pfx_kthread+0x10/0x10 [ 1354.950154][ C0] ret_from_fork+0x599/0xb30 [ 1354.954758][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1354.959881][ C0] ? __switch_to_asm+0x39/0x70 [ 1354.964648][ C0] ? __switch_to_asm+0x33/0x70 [ 1354.969409][ C0] ? __pfx_kthread+0x10/0x10 [ 1354.974000][ C0] ret_from_fork_asm+0x1a/0x30 [ 1354.978775][ C0] [ 1354.981779][ C0] task:sed state:R running task stack:24408 pid:17737 tgid:17737 ppid:17736 task_flags:0x40000c flags:0x00080000 [ 1354.995260][ C0] Call Trace: [ 1354.998523][ C0] [ 1355.001441][ C0] __schedule+0x14bc/0x5000 [ 1355.005941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.011825][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1355.016760][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.022389][ C0] ? rcu_is_watching+0x15/0xb0 [ 1355.027156][ C0] ? __pfx___schedule+0x10/0x10 [ 1355.032010][ C0] ? preempt_schedule+0xae/0xc0 [ 1355.036853][ C0] preempt_schedule_common+0x83/0xd0 [ 1355.042130][ C0] preempt_schedule+0xae/0xc0 [ 1355.046795][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1355.052179][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.057814][ C0] preempt_schedule_thunk+0x16/0x30 [ 1355.063023][ C0] _raw_spin_unlock+0x3f/0x50 [ 1355.067695][ C0] unmap_page_range+0x3a7f/0x4370 [ 1355.072716][ C0] ? finish_task_switch+0x23d/0x940 [ 1355.077930][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.083571][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1355.088958][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.094584][ C0] ? mas_find+0xb0e/0xd30 [ 1355.098906][ C0] ? unmap_vmas+0x144/0x580 [ 1355.103433][ C0] unmap_vmas+0x399/0x580 [ 1355.107756][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.113383][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1355.118247][ C0] exit_mmap+0x23b/0xb20 [ 1355.122477][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1355.127671][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1355.132428][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1355.138077][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1355.142762][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1355.147950][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.153576][ C0] __mmput+0x118/0x430 [ 1355.157645][ C0] exit_mm+0x1da/0x2c0 [ 1355.161711][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1355.166290][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1355.171745][ C0] do_exit+0x658/0x2310 [ 1355.175900][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1355.181221][ C0] ? __pfx_do_exit+0x10/0x10 [ 1355.185808][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.191432][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.196616][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.202239][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1355.207474][ C0] do_group_exit+0x21c/0x2d0 [ 1355.212068][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1355.217093][ C0] x64_sys_call+0x2210/0x2210 [ 1355.221801][ C0] do_syscall_64+0xfa/0xf80 [ 1355.226299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.232357][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.237984][ C0] ? exc_page_fault+0xab/0x100 [ 1355.242742][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.248625][ C0] RIP: 0033:0x7ff1913cc6c5 [ 1355.253051][ C0] RSP: 002b:00007ffe1be8fb08 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1355.261456][ C0] RAX: ffffffffffffffda RBX: 00007ff1914cdfe8 RCX: 00007ff1913cc6c5 [ 1355.269507][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1355.277468][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1355.285427][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1355.293385][ C0] R13: 0000000000000000 R14: 00007ff1914cc680 R15: 00007ff1914ce000 [ 1355.301381][ C0] [ 1355.304387][ C0] task:syz.8.2552 state:R running task stack:25344 pid:17655 tgid:17654 ppid:13486 task_flags:0x40054c flags:0x00080001 [ 1355.317875][ C0] Call Trace: [ 1355.321143][ C0] [ 1355.324062][ C0] __schedule+0x14bc/0x5000 [ 1355.328580][ C0] ? __pfx___schedule+0x10/0x10 [ 1355.333426][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1355.338360][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1355.343638][ C0] preempt_schedule_irq+0xb5/0x150 [ 1355.348741][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1355.354454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.360074][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1355.365884][ C0] irqentry_exit+0x5d8/0x660 [ 1355.370473][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1355.376878][ C0] RIP: 0010:unwind_next_frame+0x131f/0x2390 [ 1355.382758][ C0] Code: 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 <48> 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 e9 [ 1355.402355][ C0] RSP: 0018:ffffc9000b156d58 EFLAGS: 00000287 [ 1355.408418][ C0] RAX: ffffffff822feea8 RBX: ffffffff8fa13970 RCX: ffffffff8fa13974 [ 1355.416819][ C0] RDX: ffffffff8fa13970 RSI: ffffffff9020adba RDI: ffffffff8bbfbfa0 [ 1355.424791][ C0] RBP: ffffffff8fa13970 R08: 0000000000000001 R09: ffffffff8df42000 [ 1355.432759][ C0] R10: dffffc0000000000 R11: ffffffff81ad12f0 R12: ffffffff822fef94 [ 1355.440738][ C0] R13: ffffffff8fa13970 R14: ffffc9000b156e28 R15: ffffffff8fa13970 [ 1355.448707][ C0] ? save_stack+0xf4/0x1f0 [ 1355.453119][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.459272][ C0] ? save_stack+0x8/0x1f0 [ 1355.463602][ C0] ? unwind_next_frame+0xd4/0x2390 [ 1355.468713][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1355.473819][ C0] ? save_stack+0xf5/0x1f0 [ 1355.478232][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.484380][ C0] arch_stack_walk+0x11c/0x150 [ 1355.489141][ C0] ? save_stack+0xf5/0x1f0 [ 1355.493549][ C0] stack_trace_save+0x9c/0xe0 [ 1355.498221][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1355.503591][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1355.508617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.514241][ C0] save_stack+0xf5/0x1f0 [ 1355.518478][ C0] ? __pfx_save_stack+0x10/0x10 [ 1355.523328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.528994][ C0] ? page_ext_put+0x97/0xc0 [ 1355.533495][ C0] __reset_page_owner+0x71/0x1f0 [ 1355.538430][ C0] free_unref_folios+0xdb3/0x14f0 [ 1355.543808][ C0] ? __page_cache_release+0x8a6/0xbb0 [ 1355.549179][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 1355.555346][ C0] folios_put_refs+0x584/0x670 [ 1355.560140][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1355.565453][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.571089][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 1355.577417][ C0] shmem_undo_range+0x49e/0x1490 [ 1355.582363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.587988][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1355.593405][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.599029][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1355.604311][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 1355.609945][ C0] shmem_evict_inode+0x272/0xa70 [ 1355.614883][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.620691][ C0] ? inode_wait_for_writeback+0x14d/0x370 [ 1355.626609][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1355.632069][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1355.638150][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.643885][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.649514][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1355.654714][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1355.660175][ C0] evict+0x5f4/0xae0 [ 1355.664088][ C0] ? __pfx_evict+0x10/0x10 [ 1355.668493][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.674114][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1355.678951][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.684573][ C0] ? iput+0xcc6/0x1030 [ 1355.688658][ C0] __dentry_kill+0x209/0x660 [ 1355.693329][ C0] ? dput+0x37/0x2b0 [ 1355.697217][ C0] dput+0x19f/0x2b0 [ 1355.701035][ C0] __fput+0x68e/0xa70 [ 1355.705022][ C0] task_work_run+0x1d4/0x260 [ 1355.709606][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1355.714710][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1355.719912][ C0] do_exit+0x6c5/0x2310 [ 1355.724091][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.729716][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1355.734746][ C0] ? __pfx_do_exit+0x10/0x10 [ 1355.739359][ C0] do_group_exit+0x21c/0x2d0 [ 1355.743955][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.749586][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1355.754779][ C0] get_signal+0x1285/0x1340 [ 1355.759306][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 1355.764862][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.770522][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1355.776686][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1355.782150][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 1355.787435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.793070][ C0] ? rcu_is_watching+0x15/0xb0 [ 1355.797839][ C0] do_syscall_64+0x2e3/0xf80 [ 1355.802430][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.808484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.814111][ C0] ? exc_page_fault+0xab/0x100 [ 1355.818871][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.824760][ C0] RIP: 0033:0x7f9efed8f749 [ 1355.829163][ C0] RSP: 002b:00007f9effcbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1355.837568][ C0] RAX: 0000000000010106 RBX: 00007f9efefe5fa0 RCX: 00007f9efed8f749 [ 1355.845535][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1355.853499][ C0] RBP: 00007f9efee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1355.861482][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1355.869439][ C0] R13: 00007f9efefe6038 R14: 00007f9efefe5fa0 R15: 00007ffee5b2a2e8 [ 1355.877422][ C0] [ 1355.880436][ C0] rcu: rcu_preempt kthread starved for 10625 jiffies! g107545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1355.891885][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1355.901870][ C0] rcu: RCU grace-period kthread stack dump: [ 1355.907739][ C0] task:rcu_preempt state:R running task stack:26832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1355.921226][ C0] Call Trace: [ 1355.924493][ C0] [ 1355.927445][ C0] __schedule+0x14bc/0x5000 [ 1355.931964][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1355.937169][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.942811][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1355.948784][ C0] ? __pfx___schedule+0x10/0x10 [ 1355.953641][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.959271][ C0] ? schedule+0x91/0x360 [ 1355.963511][ C0] schedule+0x165/0x360 [ 1355.967664][ C0] schedule_timeout+0x12b/0x270 [ 1355.972522][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1355.977888][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1355.983853][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1355.989141][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.994782][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1356.000328][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1356.005178][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1356.010450][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1356.016330][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1356.021774][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1356.026966][ C0] ? finish_swait+0xcd/0x1f0 [ 1356.031559][ C0] rcu_gp_kthread+0x99/0x390 [ 1356.036140][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1356.041323][ C0] ? __kthread_parkme+0x7b/0x200 [ 1356.046264][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.051888][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1356.056914][ C0] kthread+0x711/0x8a0 [ 1356.060991][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1356.066178][ C0] ? __pfx_kthread+0x10/0x10 [ 1356.070778][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.076402][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1356.081589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.087214][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1356.092423][ C0] ? __pfx_kthread+0x10/0x10 [ 1356.097010][ C0] ret_from_fork+0x599/0xb30 [ 1356.101599][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.106803][ C0] ? __switch_to_asm+0x39/0x70 [ 1356.111555][ C0] ? __switch_to_asm+0x33/0x70 [ 1356.116314][ C0] ? __pfx_kthread+0x10/0x10 [ 1356.120896][ C0] ret_from_fork_asm+0x1a/0x30 [ 1356.125695][ C0] [ 1356.128702][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1356.135011][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1356.140211][ C1] NMI backtrace for cpu 1 [ 1356.140230][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1356.140254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.140268][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1356.140297][ C1] Code: be c3 c9 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 cd 21 00 f3 0f 1e fa fb f4 93 c3 c9 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1356.140317][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1356.140337][ C1] RAX: 4096c315ecfeb300 RBX: ffffffff8197247a RCX: 4096c315ecfeb300 [ 1356.140355][ C1] RDX: 0000000000000001 RSI: ffffffff8d768032 RDI: ffffffff8bbfc000 [ 1356.140372][ C1] RBP: ffffc90000197f10 R08: ffff8880b893361b R09: 1ffff110171266c3 [ 1356.140389][ C1] R10: dffffc0000000000 R11: ffffed10171266c4 R12: ffffffff8f802670 [ 1356.140407][ C1] R13: 1ffff110038d9b70 R14: 0000000000000001 R15: 0000000000000001 [ 1356.140425][ C1] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 1356.140444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.140460][ C1] CR2: 000020000034c030 CR3: 0000000025950000 CR4: 0000000000350ef0 [ 1356.140478][ C1] Call Trace: [ 1356.140489][ C1] [ 1356.140497][ C1] default_idle+0x13/0x20 [ 1356.140525][ C1] default_idle_call+0x73/0xb0 [ 1356.140555][ C1] do_idle+0x1ea/0x520 [ 1356.140579][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.140605][ C1] ? irqentry_exit+0x5ba/0x660 [ 1356.140633][ C1] ? __pfx_do_idle+0x10/0x10 [ 1356.140668][ C1] cpu_startup_entry+0x44/0x60 [ 1356.140692][ C1] start_secondary+0x101/0x110 [ 1356.140724][ C1] common_startup_64+0x13e/0x147 [ 1356.140763][ C1]