last executing test programs: 10m7.680484696s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x54480439, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'a', ' *:* ', 'rw\x00'}, 0x9) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x20000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r3, 0x6700000000000000) 10m7.370678787s ago: executing program 1 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x73622a85, 0xb, 0x7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1c}, @flat=@binder={0x66646185, 0x10a, 0x200010002}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 10m7.191533445s ago: executing program 1 (id=6): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x3fff}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x4a32, &(0x7f00000000c0)={0x0, 0x78a9, 0x8, 0x0, 0x87}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(0x4) 10m6.842144279s ago: executing program 1 (id=7): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 10m6.051419769s ago: executing program 1 (id=11): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x540b, &(0x7f0000000140)) 10m4.409302905s ago: executing program 1 (id=28): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @empty, @void, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x0, 0x6, "d16fe7", 0x8, 0x3a, 0x1, @empty, @private2, {[], @echo_reply={0x81, 0x0, 0x0, 0x4, 0x188}}}}}}}, 0x0) 10m3.85729781s ago: executing program 32 (id=28): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @empty, @void, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x0, 0x6, "d16fe7", 0x8, 0x3a, 0x1, @empty, @private2, {[], @echo_reply={0x81, 0x0, 0x0, 0x4, 0x188}}}}}}}, 0x0) 8m5.305813534s ago: executing program 4 (id=1060): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)) 8m5.053694649s ago: executing program 4 (id=1064): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setuid(0xee00) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$sock_linger(r2, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) 8m4.84512228s ago: executing program 4 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 8m3.847661161s ago: executing program 4 (id=1076): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r2 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2009e8dbe108598948faffd54a07c21d875397bdb22d0008b420a1819e0123bab36a84bb840661ac00000080f7fffffffffffdff00170000001b00", "90be8bf4bd00000000000000000000000000001000"}}) 8m3.402314356s ago: executing program 4 (id=1084): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='ip6tnl0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 8m3.041679182s ago: executing program 4 (id=1087): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) 8m2.400374387s ago: executing program 33 (id=1087): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) 7m9.891704642s ago: executing program 0 (id=1406): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x98af02) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000180)=0xffff) 7m9.41313143s ago: executing program 0 (id=1411): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0xf5, 0x3fff}) 7m9.272501315s ago: executing program 0 (id=1414): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x7adab3cb125c37a1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40405}, 0x20) 7m9.01857864s ago: executing program 0 (id=1417): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180), 0x48) close(0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x378, 0x0, 0x0, 0x7, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000ffff0000000200", "b7326736181c20820700000000000000000000000000f0ffffffefbf4e4300", [0x4, 0x3]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) write$P9_RREAD(r0, &(0x7f00000006c0)={0xb, 0x75, 0x2}, 0xb) 7m7.445393588s ago: executing program 0 (id=1428): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)='p'}) 7m5.267733898s ago: executing program 0 (id=1437): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) 7m4.415053674s ago: executing program 34 (id=1437): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) 2m36.823533595s ago: executing program 3 (id=2744): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 2m36.387745929s ago: executing program 3 (id=2747): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000040)='stat\x00') 2m35.88541242s ago: executing program 3 (id=2751): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmmsg$inet6(r3, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)='_\"ix', 0x4}], 0x1, &(0x7f0000000880)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2, 0x4, 0xb638fcbd7d2b2b19, 0x5, 0x0, [@mcast2, @rand_addr=' \x01\x00']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}], 0x58}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m34.48633218s ago: executing program 3 (id=2753): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmmsg$inet6(r5, &(0x7f0000000b00), 0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@local, 0x23, r7}) 2m34.226295576s ago: executing program 3 (id=2755): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 2m34.021884627s ago: executing program 3 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x6a040000) 2m18.112164873s ago: executing program 35 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x6a040000) 18.146567329s ago: executing program 2 (id=2986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmsg$SOCK_DESTROY(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)=ANY=[], 0xc3ec}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) 16.966292848s ago: executing program 2 (id=2989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 12.901007216s ago: executing program 5 (id=2995): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ptrace(0x10, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, 0x0, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @device_b, @device_b, @from_mac}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 12.899570325s ago: executing program 7 (id=2996): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$unix(r4, &(0x7f0000011500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c085}}], 0x1, 0x40015) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) 11.398660966s ago: executing program 7 (id=2997): syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x1, 0x215, &(0x7f0000000080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') read$watch_queue(r3, &(0x7f0000019140)=""/185, 0xb9) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xe16de50aeeefbf67}) rseq(0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x20000000) 11.002424596s ago: executing program 6 (id=2998): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe", 0x16) read$char_usb(r0, &(0x7f00000003c0)=""/241, 0xf1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e1f, 0x2, @local, 0x1}, 0x1c) 10.995806636s ago: executing program 5 (id=2999): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_PARAM={{0x79}, 0xce}}}, 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000000), 0x3200841, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=local=relativg:']) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\t\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x8040) 10.994783487s ago: executing program 2 (id=3000): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x2000) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, 0x0, 0x0) 10.158019371s ago: executing program 7 (id=3001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x458002, 0x55) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, 0x0, 0x701, 0x70bd2c, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x52}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 10.155306601s ago: executing program 2 (id=3002): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 9.573418999s ago: executing program 5 (id=3004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) r6 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r6, 0x0, 0x1b1600, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 9.345062082s ago: executing program 2 (id=3005): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = syz_clone(0x1102100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) 8.138739383s ago: executing program 7 (id=3006): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX=r3]) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000040)={0xa, 0x6, 0x6ae, 0x5db2dae9, 'syz1\x00', 0x3}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=ANY=[@ANYBLOB="380100001000010000000000fedbdf25ac1e0101000000000000000000000000e000000200002000000000000000", @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000142b00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000400000000000010000000000000000000000000000000000400000000000000000000000000000008000000000000000000000000000000000000000000000000000000020001060000000000000000480003006c7a6a6800"/240], 0x138}}, 0x0) 8.098000117s ago: executing program 2 (id=3007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000400, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000080)=""/47, 0x2f) getdents64(r5, 0xfffffffffffffffe, 0x43) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5ad15c15, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x0, 0x0, 0x4, 0xb, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @map_fd={0x18, 0x3, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.019131095s ago: executing program 5 (id=3008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) setns(0xffffffffffffffff, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) setpgid(r0, r0) clock_gettime(0x8, 0x0) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r3, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4) inotify_rm_watch(0xffffffffffffffff, r4) r5 = timerfd_create(0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d61656b416d6f64653d3078303030300910303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997628704268c93600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESOCT], 0xfe, 0x677, &(0x7f0000000c00)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001f80)=""/4092, 0x100) timerfd_settime(r5, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 6.782788989s ago: executing program 6 (id=3009): openat$audio1(0xffffffffffffff9c, 0x0, 0x181e02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24008880) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0x1, 0x0, {0x0, 0x3}, {0x841, 0x400}, @ramp={0x81, 0x93, {0x4, 0x7ff, 0x4, 0x4}}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000900)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x672, 0x200) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000240)=ANY=[@ANYBLOB="f6442a8bf5deda070aaef590c52c3c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='tmpfs\x00', 0x2300cb4, 0x0) r3 = mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x9, 0x0) mq_getsetattr(r3, 0x0, 0xfffffffffffffffe) 6.735874334s ago: executing program 7 (id=3010): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0xbb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') mkdirat(r5, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_80211_inject_frame(0x0, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) 6.725238735s ago: executing program 5 (id=3011): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000010902"], 0x0) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x2) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x40187013, &(0x7f0000000040)) 5.4793256s ago: executing program 6 (id=3012): r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0x9e, &(0x7f0000010140)="$eJzs16GKQkEABdC7L+xu27WIzWzxH/wUsxYxKYJ/4CfaDQa7OMJ7AyLYBIOeEwbuXAam3vKXVtkmZTRYHMrNcrWeTefdGd5Sk+QnyW+SYa/Lx0nXfdV+f9rk/9Hj792LfwsAADyjyfg+X0q9ONcV2IZ+OxLqTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4JNcAAAD//0AHJDI=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) writev(r6, &(0x7f0000000180), 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 4.48095086s ago: executing program 6 (id=3013): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 4.476774631s ago: executing program 7 (id=3014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.021463197s ago: executing program 6 (id=3015): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000e80)=""/4072, 0xfe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4c800) syz_usb_connect(0x0, 0x5b, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 149.048505ms ago: executing program 5 (id=3016): r0 = syz_open_dev$video4linux(0x0, 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$sg(0x0, 0x0, 0x20000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x3, 0x75) ioctl$UI_DEV_DESTROY(r3, 0x5502) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2d, 'cpu'}]}, 0x5) ioctl$TCFLSH(r5, 0x80047437, 0x10004000000006) 0s ago: executing program 6 (id=3017): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000300)='./file0/file0\x00', 0x2001, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): fig 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.769685][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.779500][ T5790] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 171.823339][ T5790] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 171.860761][ T5790] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 171.890134][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.954968][ T5790] usb 3-1: config 0 descriptor?? [ 172.289933][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 172.307931][ T5790] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 172.383173][ T5790] usb 3-1: USB disconnect, device number 6 [ 172.457969][ T5790] usblp0: removed [ 173.329768][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.016493][ T7875] syzkaller0: entered promiscuous mode [ 174.040020][ T7875] syzkaller0: entered allmulticast mode [ 174.309961][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 174.357603][ T7884] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 174.369859][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.410238][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.042328][ T7910] loop2: detected capacity change from 0 to 512 [ 176.063772][ T7910] EXT4-fs: Ignoring removed orlov option [ 176.097201][ T7910] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 176.149719][ T7910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 176.249653][ T7910] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.703: corrupted in-inode xattr: e_value size too large [ 176.307581][ T7910] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.703: couldn't read orphan inode 15 (err -117) [ 176.361053][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.460212][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.584605][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.490055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.529736][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.725423][ T7955] netlink: 'syz.0.721': attribute type 4 has an invalid length. [ 178.736508][ T7955] netlink: 17 bytes leftover after parsing attributes in process `syz.0.721'. [ 179.569722][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.572447][ T7967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.841250][ T7967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.992069][ T7967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.115463][ T7967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.357388][ T7967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.403689][ T7967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.454832][ T7967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.486381][ T7967] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.515087][ T7993] netlink: 2 bytes leftover after parsing attributes in process `syz.3.737'. [ 180.620033][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.732713][ T7996] program syz.2.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.659766][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.689714][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.575250][ T8025] loop4: detected capacity change from 0 to 40427 [ 183.646302][ T8025] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 183.697424][ T8025] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 183.729784][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.807634][ T8025] F2FS-fs (loop4): invalid crc value [ 183.875391][ T8025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.096528][ T8025] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 184.104351][ T8025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.256708][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 184.297225][ T8059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.348479][ T8059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.368324][ T8059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.387118][ T8059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.769737][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.912374][ T8064] loop0: detected capacity change from 0 to 512 [ 184.931377][ T8064] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.951682][ T8064] EXT4-fs: inline encryption not supported [ 184.957615][ T8064] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.982363][ T8064] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.998685][ T8064] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.041196][ T8064] EXT4-fs (loop0): 1 truncate cleaned up [ 185.048420][ T8064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.535536][ T8064] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 185.661729][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.809736][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.594341][ T8115] loop2: detected capacity change from 0 to 4096 [ 186.630671][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.849780][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.862321][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.504343][ T8118] loop0: detected capacity change from 0 to 40427 [ 187.526523][ T8118] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 187.587975][ T8118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 187.633833][ T8118] F2FS-fs (loop0): invalid crc value [ 187.701266][ T8118] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.885367][ T8118] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 187.889749][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.910242][ T8118] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.008270][ T8143] loop2: detected capacity change from 0 to 1024 [ 188.071479][ T8145] binder: 8144:8145 ioctl c0306201 2000000001c0 returned -14 [ 188.250020][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 188.250036][ T28] audit: type=1804 audit(1763413008.723:84): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.782" name="/newroot/183/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=15 res=1 errno=0 [ 188.310492][ T8118] syz.0.782: attempt to access beyond end of device [ 188.310492][ T8118] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.372289][ T8118] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 188.929729][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.969738][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.719238][ T8183] loop0: detected capacity change from 0 to 1024 [ 190.743746][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 190.761061][ T8183] EXT4-fs: Ignoring removed orlov option [ 190.856114][ T8183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.957709][ T28] audit: type=1800 audit(1763413011.433:85): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.807" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 191.009860][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.056893][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.519337][ T8195] input: syz1 as /devices/virtual/input/input10 [ 192.049754][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.089806][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.369724][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 193.392336][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.407771][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.425166][ T8229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.444388][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.515623][ T8230] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 193.524601][ T8230] netlink: 17 bytes leftover after parsing attributes in process `syz.0.824'. [ 193.705851][ T8238] loop0: detected capacity change from 0 to 256 [ 193.770676][ T8238] syz.0.828: attempt to access beyond end of device [ 193.770676][ T8238] loop0: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 194.129787][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.292597][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 194.341027][ T8257] process 'syz.4.835' launched './file0' with NULL argv: empty string added [ 194.541878][ T8263] loop4: detected capacity change from 0 to 1024 [ 194.694287][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.703185][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.759500][ T8256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.826380][ T8256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.847533][ T8256] bond0 (unregistering): Released all slaves [ 194.880045][ T8259] netlink: 72 bytes leftover after parsing attributes in process `syz.3.837'. [ 195.006055][ T8268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.037518][ T8268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.042480][ T8274] overlayfs: failed to resolve './file0/file0': -2 [ 195.169930][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 195.273441][ T8268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.289711][ T8268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.307992][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 195.392325][ T8282] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 195.406837][ T8282] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 195.408220][ T8268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.434618][ T8268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.614486][ T8268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.640888][ T8268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.801558][ T8292] netlink: 92 bytes leftover after parsing attributes in process `syz.2.852'. [ 195.912667][ T8268] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.941181][ T8268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.988357][ T8268] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.007724][ T8268] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.038786][ T8268] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.048726][ T8268] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.072078][ T8268] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.081906][ T8268] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.157128][ T8302] loop0: detected capacity change from 0 to 512 [ 196.209820][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 196.253983][ T8302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.311695][ T8302] ext4 filesystem being mounted at /198/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.461092][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.540613][ T8319] binder: 8318:8319 ioctl c0306201 2000000001c0 returned -14 [ 196.841656][ T8329] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 196.850582][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.868'. [ 196.932379][ T8329] team0: Port device geneve0 added [ 197.016953][ T8333] loop0: detected capacity change from 0 to 2048 [ 197.067963][ T8333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.194667][ T8333] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.870: Invalid inode table block 8137801 in block_group 0 [ 197.244194][ T8333] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.870: Invalid inode table block 8137801 in block_group 0 [ 197.259856][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 197.307648][ T8333] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 197.333207][ T8333] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #15: comm syz.0.870: mark_inode_dirty error [ 197.372374][ T8333] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.870: Invalid inode table block 8137801 in block_group 0 [ 197.541238][ T11] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm kworker/u4:0: Invalid inode table block 8137801 in block_group 0 [ 197.578674][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.830662][ T8361] loop4: detected capacity change from 0 to 256 [ 197.877698][ T8361] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.942467][ T28] audit: type=1800 audit(1763413018.423:86): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.881" name="file1" dev="loop4" ino=1048607 res=0 errno=0 [ 197.950058][ T8361] FAT-fs (loop4): error, corrupted file size (i_pos 196, 4096) [ 198.021430][ T8361] FAT-fs (loop4): Filesystem has been set read-only [ 198.075518][ T8368] binder: 8367:8368 ioctl 4018620d 0 returned -22 [ 198.289782][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 198.785558][ T28] audit: type=1326 audit(1763413019.263:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 198.831020][ T28] audit: type=1326 audit(1763413019.303:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 198.876742][ T28] audit: type=1326 audit(1763413019.303:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 198.908183][ T28] audit: type=1326 audit(1763413019.313:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 198.951129][ T28] audit: type=1326 audit(1763413019.313:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 198.986034][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.988814][ T28] audit: type=1326 audit(1763413019.313:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 199.089384][ T28] audit: type=1326 audit(1763413019.313:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 199.154025][ T28] audit: type=1326 audit(1763413019.313:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 199.221195][ T28] audit: type=1326 audit(1763413019.313:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.3.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f082c38f6c9 code=0x7ffc0000 [ 199.280237][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 199.293296][ T5839] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 199.314899][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.329724][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 199.329795][ T5839] usb 1-1: Product: syz [ 199.361740][ T5839] usb 1-1: Manufacturer: syz [ 199.367670][ T5839] usb 1-1: SerialNumber: syz [ 199.384684][ T5839] usb 1-1: config 0 descriptor?? [ 199.547648][ T8403] loop2: detected capacity change from 0 to 256 [ 199.571825][ T8403] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.636446][ T8403] FAT-fs (loop2): error, corrupted file size (i_pos 196, 4096) [ 199.669175][ T8403] FAT-fs (loop2): Filesystem has been set read-only [ 199.812730][ T5839] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 199.849484][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.891740][ T5839] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 199.909831][ T5839] usb 1-1: media controller created [ 199.953698][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.027501][ T8381] Cannot find add_set index 0 as target [ 200.183744][ T8418] loop2: detected capacity change from 0 to 128 [ 200.369719][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.533907][ T5839] zl10353_read_register: readreg error (reg=127, ret==0) [ 200.550568][ T5839] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 200.572215][ T5839] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 200.595205][ T5839] usb 1-1: USB disconnect, device number 8 [ 200.689917][ T5839] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 200.916923][ T8433] binder: 8432:8433 ioctl c0306201 0 returned -14 [ 200.931162][ T8433] binder: 8432:8433 ioctl 4018620d 0 returned -22 [ 201.220231][ T5839] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.409876][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 201.422264][ T5839] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 201.439673][ T5839] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 201.470193][ T5839] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 201.479521][ T5839] usb 3-1: config 220 has no interface number 1 [ 201.486373][ T5839] usb 3-1: config 220 interface 0 has no altsetting 0 [ 201.488092][ T8449] binder: 8448:8449 ioctl c0306201 200000000100 returned -14 [ 201.514883][ T5839] usb 3-1: config 220 interface 76 has no altsetting 0 [ 201.534860][ T5839] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 201.544925][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.569695][ T5839] usb 3-1: Product: syz [ 201.573953][ T5839] usb 3-1: Manufacturer: syz [ 201.591431][ T5839] usb 3-1: SerialNumber: syz [ 202.010476][ T5839] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 202.016936][ T5839] usb 3-1: No valid video chain found. [ 202.048526][ T5839] usb 3-1: USB disconnect, device number 7 [ 202.279984][ T5790] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 202.449738][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 202.472906][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.491436][ T5790] usb 1-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 202.512966][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.536893][ T5790] usb 1-1: config 0 descriptor?? [ 202.544163][ T8463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.790833][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.823488][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.854626][ T5790] usbhid 1-1:0.0: can't add hid device: -71 [ 202.862740][ T8485] loop2: detected capacity change from 0 to 512 [ 202.872736][ T5790] usbhid: probe of 1-1:0.0 failed with error -71 [ 202.873360][ T8485] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.909169][ T5790] usb 1-1: USB disconnect, device number 9 [ 202.911052][ T8485] EXT4-fs: inline encryption not supported [ 202.922157][ T8485] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.940626][ T8485] EXT4-fs (loop2): Test dummy encryption mode enabled [ 202.984536][ T8485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.040397][ T8485] EXT4-fs (loop2): 1 truncate cleaned up [ 203.047568][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.103871][ T8492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 203.289373][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.434012][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 203.489713][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 203.814347][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 204.148608][ T8522] loop4: detected capacity change from 0 to 512 [ 204.174883][ T8522] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.196944][ T8522] EXT4-fs: inline encryption not supported [ 204.255662][ T8522] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.333328][ T8522] EXT4-fs (loop4): Test dummy encryption mode enabled [ 204.361331][ T8522] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.401346][ T8522] EXT4-fs (loop4): 1 truncate cleaned up [ 204.420163][ T8522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.529723][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.635736][ T5970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.813413][ T8541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.959'. [ 204.896372][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 205.217796][ T8560] loop0: detected capacity change from 0 to 512 [ 205.235617][ T8560] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.257688][ T8560] EXT4-fs: inline encryption not supported [ 205.276335][ T8560] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.293335][ T8560] EXT4-fs (loop0): Test dummy encryption mode enabled [ 205.310720][ T8560] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.352770][ T8560] EXT4-fs (loop0): 1 truncate cleaned up [ 205.387746][ T8560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.569706][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 205.591139][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.609738][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.649720][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.732238][ T8602] binder: 8601:8602 ioctl c0306201 0 returned -14 [ 208.047741][ T8612] loop2: detected capacity change from 0 to 128 [ 208.689745][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 208.895911][ T6206] kworker/u4:18: attempt to access beyond end of device [ 208.895911][ T6206] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 209.739719][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 210.769727][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 211.620089][ T5790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.706452][ T8686] netlink: 'syz.4.1022': attribute type 3 has an invalid length. [ 211.730812][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 211.809711][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 211.847727][ T5790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.868239][ T5790] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 211.887276][ T5790] usb 3-1: can't read configurations, error -71 [ 212.330109][ T5563] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.713478][ T5563] usb 1-1: Using ep0 maxpacket: 16 [ 212.721003][ T5563] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 212.729418][ T5563] usb 1-1: config 0 has no interface number 0 [ 212.736948][ T5563] usb 1-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 212.753575][ T5563] usb 1-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 212.849727][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 212.865388][ T5563] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 212.995650][ T5563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.141958][ T5563] usb 1-1: Product: syz [ 213.182222][ T8728] netlink: 'syz.3.1040': attribute type 13 has an invalid length. [ 213.229495][ T5563] usb 1-1: Manufacturer: syz [ 213.279526][ T5563] usb 1-1: SerialNumber: syz [ 213.410436][ T5563] usb 1-1: config 0 descriptor?? [ 213.433754][ T8701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.463768][ T8701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.735935][ T8701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.772811][ T8701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.830014][ T5563] net1080 1-1:0.147 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, f2:35:8b:d9:90:27 [ 213.889718][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 214.087753][ T5563] usb 1-1: USB disconnect, device number 10 [ 214.103851][ T5563] net1080 1-1:0.147 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 214.433580][ T8758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.779676][ T5790] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.929710][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 214.997248][ T5790] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 215.309512][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.356211][ T5790] usb 3-1: Product: syz [ 215.685523][ T5790] usb 3-1: Manufacturer: syz [ 215.736577][ T5790] usb 3-1: SerialNumber: syz [ 215.842589][ T8790] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1060' sets config #0 [ 215.969717][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 216.099393][ T5790] rtl8150 3-1:1.0: couldn't reset the device [ 216.117883][ T5790] rtl8150: probe of 3-1:1.0 failed with error -5 [ 216.140052][ T5790] usb 3-1: USB disconnect, device number 10 [ 216.308897][ T8804] bridge_slave_0: left allmulticast mode [ 216.346223][ T8804] bridge_slave_0: left promiscuous mode [ 216.362668][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.396506][ T8804] bridge_slave_1: left allmulticast mode [ 216.421135][ T8804] bridge_slave_1: left promiscuous mode [ 216.428352][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.451609][ T8804] bond0: (slave bond_slave_0): Releasing backup interface [ 216.496466][ T8804] bond0: (slave bond_slave_1): Releasing backup interface [ 216.606710][ T8804] team0: Port device team_slave_0 removed [ 216.635854][ T8804] team0: Port device team_slave_1 removed [ 216.714912][ T8804] bond1: (slave ip6gretap1): Releasing active interface [ 216.815237][ T8811] team0: Mode changed to "loadbalance" [ 216.906802][ T8815] vlan0: entered promiscuous mode [ 217.002863][ T8815] team0: Port device vlan0 added [ 217.009831][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 217.043698][ T8834] tipc: Enabling of bearer rejected, failed to enable media [ 217.311463][ T8840] loop4: detected capacity change from 0 to 512 [ 217.401162][ T8840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.455610][ T8840] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.648763][ T5970] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 217.683393][ T5970] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 217.849181][ T8216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.049814][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 218.126972][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.159275][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.268903][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.328245][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.458063][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.499845][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.617340][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.629778][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.032423][ T11] tipc: Disabling bearer [ 219.046693][ T11] tipc: Left network mode [ 219.207593][ T8889] loop0: detected capacity change from 0 to 512 [ 219.339298][ T8889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.429899][ T8889] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.511766][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.524761][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.536442][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.545440][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.554062][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.564211][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.601218][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.636458][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.646749][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.711858][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.720719][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.729973][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.896742][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.908735][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 219.946010][ T8903] bridge_slave_1: left allmulticast mode [ 219.958778][ T8903] bridge_slave_1: left promiscuous mode [ 219.995211][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.027970][ T8903] bridge_slave_0: left allmulticast mode [ 220.050018][ T8903] bridge_slave_0: left promiscuous mode [ 220.155318][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.857730][ T8913] binder: 8912:8913 ioctl c0306201 200000000100 returned -14 [ 221.809958][ T5105] Bluetooth: hci1: command tx timeout [ 221.816611][ T5839] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.889440][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 222.016332][ T5839] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 222.031127][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.049963][ T5839] usb 1-1: Product: syz [ 222.054218][ T5839] usb 1-1: Manufacturer: syz [ 222.058860][ T5839] usb 1-1: SerialNumber: syz [ 222.372583][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.393104][ T5839] rtl8150 1-1:1.0: couldn't reset the device [ 222.403840][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.410037][ T5839] rtl8150: probe of 1-1:1.0 failed with error -5 [ 222.421318][ T8895] bridge_slave_0: entered allmulticast mode [ 222.439105][ T8895] bridge_slave_0: entered promiscuous mode [ 222.445519][ T5839] usb 1-1: USB disconnect, device number 11 [ 222.468936][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.492260][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.519839][ T8895] bridge_slave_1: entered allmulticast mode [ 222.534480][ T8895] bridge_slave_1: entered promiscuous mode [ 222.595845][ T11] hsr_slave_0: left promiscuous mode [ 222.632918][ T11] hsr_slave_1: left promiscuous mode [ 222.702631][ T11] veth1_macvtap: left promiscuous mode [ 222.708270][ T11] veth0_macvtap: left promiscuous mode [ 222.716003][ T11] veth1_vlan: left promiscuous mode [ 223.181718][ T8976] netlink: 'syz.0.1115': attribute type 3 has an invalid length. [ 223.217592][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 223.437567][ T8985] loop2: detected capacity change from 0 to 1024 [ 223.453698][ T8985] EXT4-fs: Ignoring removed bh option [ 223.459465][ T8985] EXT4-fs: inline encryption not supported [ 223.517360][ T8985] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.613804][ T8985] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1116: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 223.633973][ T8985] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1116: Bad quota inode: 3, type: 0 [ 223.650969][ T8985] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 223.668041][ T8985] EXT4-fs (loop2): mount failed [ 223.900032][ T5105] Bluetooth: hci1: command tx timeout [ 225.179557][ C1] sched: RT throttling activated [ 225.969245][ T11] bond1 (unregistering): Released all slaves [ 225.976194][ T5105] Bluetooth: hci1: command tx timeout [ 226.304215][ T11] team0 (unregistering): Port device vlan0 removed [ 227.352142][ T11] bond0 (unregistering): Released all slaves [ 227.533941][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.583522][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.678665][ T8895] team0: Port device team_slave_0 added [ 227.723278][ T8895] team0: Port device team_slave_1 added [ 227.859372][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.874263][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.901661][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.917714][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.948808][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.019688][ T8895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.049691][ T5105] Bluetooth: hci1: command tx timeout [ 228.146989][ T8895] hsr_slave_0: entered promiscuous mode [ 228.171920][ T8895] hsr_slave_1: entered promiscuous mode [ 228.184213][ T9005] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1123'. [ 228.368903][ T11] IPVS: stop unused estimator thread 0... [ 228.965855][ T8895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.003340][ T8895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.060737][ T8895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.100572][ T8895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.430131][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.498141][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.572675][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.579959][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.609753][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.616969][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.961543][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 230.301963][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.806532][ T8895] veth0_vlan: entered promiscuous mode [ 231.892857][ T8895] veth1_vlan: entered promiscuous mode [ 232.105721][ T8895] veth0_macvtap: entered promiscuous mode [ 232.138642][ T8895] veth1_macvtap: entered promiscuous mode [ 232.163615][ T9122] loop0: detected capacity change from 0 to 128 [ 232.236920][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.250986][ T9123] loop2: detected capacity change from 0 to 1024 [ 232.271705][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.284782][ T9123] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 232.318546][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.345726][ T9123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.375067][ T8895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.499419][ T8895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.688594][ T8895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.854253][ T9123] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.1156: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 233.007212][ T8895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.106202][ T8895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.206149][ T8895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.255729][ T9123] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1784: Corrupt filesystem [ 233.322241][ T8895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.539199][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.764942][ T6192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.785320][ T6192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.865546][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.899694][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.581184][ T9158] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1165'. [ 234.747295][ T9170] capability: warning: `syz.3.1162' uses 32-bit capabilities (legacy support in use) [ 235.847848][ T9202] bond_slave_1: entered promiscuous mode [ 235.881542][ T9202] bond_slave_1: left promiscuous mode [ 235.950729][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 236.250349][ T5831] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 236.395062][ T9205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.459178][ T9205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.474433][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.496956][ T5831] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.500502][ T9205] bond0 (unregistering): Released all slaves [ 236.519263][ T5831] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.547542][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.587363][ T5831] usb 3-1: config 0 descriptor?? [ 238.375017][ T5790] usb 3-1: USB disconnect, device number 11 [ 238.472921][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 240.414910][ T9279] loop0: detected capacity change from 0 to 1024 [ 240.453841][ T9279] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 240.556389][ T9279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.714585][ T9279] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.1197: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 240.774616][ T9279] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1784: Corrupt filesystem [ 240.931579][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.790891][ T9322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.289209][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 244.449418][ T9380] bond_slave_0: entered promiscuous mode [ 244.455844][ T9380] bond_slave_1: entered promiscuous mode [ 244.459767][ T5839] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 244.485598][ T9380] vlan2: entered promiscuous mode [ 244.491005][ T9380] bond0: entered promiscuous mode [ 244.661812][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 244.673270][ T5839] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 244.689675][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.724496][ T5839] usb 3-1: config 0 descriptor?? [ 244.740560][ T9369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.071376][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.093949][ T5875] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 245.134629][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.395403][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 245.604039][ T5875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 245.969896][ T5875] usb 1-1: config 9 has an invalid interface number: 254 but max is 0 [ 245.970479][ T5839] usbhid 3-1:0.0: can't add hid device: -71 [ 245.984547][ T5839] usbhid: probe of 3-1:0.0 failed with error -71 [ 245.991237][ T5875] usb 1-1: config 9 has no interface number 0 [ 245.991278][ T5875] usb 1-1: config 9 interface 254 has no altsetting 0 [ 246.001129][ T5839] usb 3-1: USB disconnect, device number 12 [ 246.101063][ T5875] usb 1-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 246.129634][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.156502][ T5875] usb 1-1: Product: syz [ 246.191016][ T5875] usb 1-1: Manufacturer: syz [ 246.202374][ T5875] usb 1-1: SerialNumber: syz [ 246.334098][ T9403] input: syz0 as /devices/virtual/input/input12 [ 246.439381][ T5875] hso 1-1:9.254: Not our interface [ 246.455037][ T5875] usb 1-1: USB disconnect, device number 12 [ 247.436576][ T9432] loop0: detected capacity change from 0 to 2048 [ 247.505557][ T9432] Alternate GPT is invalid, using primary GPT. [ 247.520957][ T9432] loop0: p1 p2 p3 [ 247.649875][ T5839] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 247.884826][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 247.918137][ T5839] usb 6-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 247.936218][ T5801] udevd[5801]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 247.941473][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 247.958288][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 247.979995][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.001793][ T5839] usb 6-1: config 0 descriptor?? [ 248.031192][ T9429] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.149723][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.264423][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.273563][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.290567][ T5839] usbhid 6-1:0.0: can't add hid device: -71 [ 248.296819][ T5839] usbhid: probe of 6-1:0.0 failed with error -71 [ 248.307521][ T5839] usb 6-1: USB disconnect, device number 2 [ 248.341265][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.352730][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 248.361355][ T23] usb 1-1: can't read configurations, error -71 [ 248.560910][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 248.751210][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 248.762469][ T8] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 248.771942][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.780157][ T8] usb 3-1: Product: syz [ 248.784363][ T8] usb 3-1: Manufacturer: syz [ 248.788996][ T8] usb 3-1: SerialNumber: syz [ 248.797086][ T8] usb 3-1: config 0 descriptor?? [ 249.290384][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 249.325129][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.443707][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 249.505712][ T9454] Cannot find add_set index 0 as target [ 249.583244][ T8] usb 3-1: media controller created [ 250.076473][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.399273][ T9464] loop5: detected capacity change from 0 to 32768 [ 250.444500][ T9464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1252 (9464) [ 250.541937][ T9464] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.562405][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 250.580177][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 250.596732][ T9464] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 250.606496][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 250.619708][ T9464] BTRFS info (device loop5): setting nodatacow, compression disabled [ 250.648368][ T9464] BTRFS info (device loop5): enabling auto defrag [ 250.658741][ T8] usb 3-1: USB disconnect, device number 13 [ 250.673329][ T9464] BTRFS info (device loop5): max_inline at 83 [ 250.696895][ T9464] BTRFS info (device loop5): using free space tree [ 250.752317][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 250.990343][ T9464] BTRFS info (device loop5): auto enabling async discard [ 251.789644][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.037910][ T8] usb 6-1: config index 0 descriptor too short (expected 65490, got 72) [ 252.073277][ T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.092015][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.108596][ T8] usb 6-1: Product: syz [ 252.115262][ T8] usb 6-1: Manufacturer: syz [ 252.125355][ T8] usb 6-1: SerialNumber: syz [ 252.136698][ T2973] BTRFS info (device loop5): cannot satisfy tickets, dumping space info [ 252.145999][ T2973] BTRFS info (device loop5): space_info DATA+METADATA has 61440 free, is full [ 252.155011][ T2973] BTRFS info (device loop5): space_info total=11534336, used=9912320, pinned=0, reserved=0, may_use=1560576, readonly=0 zone_unusable=0 [ 252.156799][ T8] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.169030][ T2973] BTRFS info (device loop5): failing ticket with 98304 bytes [ 252.177507][ T9464] BTRFS info (device loop5): space_info DATA+METADATA has 61440 free, is full [ 252.194664][ T9464] BTRFS info (device loop5): space_info total=11534336, used=9912320, pinned=0, reserved=0, may_use=1560576, readonly=0 zone_unusable=0 [ 252.209198][ T9464] BTRFS info (device loop5): global_block_rsv: size 1441792 reserved 1441792 [ 252.218980][ T9464] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 252.226814][ T9464] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 252.234670][ T9464] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 [ 252.242709][ T9464] BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0 [ 252.297120][ T5890] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.469297][ T23] usb 6-1: USB disconnect, device number 3 [ 252.792250][ T8895] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.269458][ T5958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 14 /dev/loop5 scanned by udevd (5958) [ 253.418178][ T5890] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 254.337965][ T5890] ath9k_htc: Failed to initialize the device [ 254.439902][ T9566] netlink: 'syz.2.1279': attribute type 13 has an invalid length. [ 254.561729][ T23] usb 6-1: ath9k_htc: USB layer deinitialized [ 255.716441][ T9601] loop5: detected capacity change from 0 to 8 [ 255.771269][ T9601] cramfs: empty filesystem [ 255.800968][ T5958] udevd[5958]: incorrect cramfs checksum on /dev/loop5 [ 256.061475][ T5958] udevd[5958]: incorrect cramfs checksum on /dev/loop5 [ 256.134256][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.152931][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.497125][ T9589] loop0: detected capacity change from 0 to 32768 [ 256.521988][ T9589] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 14 [ 256.729475][ T9622] binder: 9615:9622 ioctl 4018620d 0 returned -22 [ 257.674683][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1297'. [ 257.959709][ T5890] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 258.154264][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.176514][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.188339][ T9646] binder: 9645:9646 ioctl c0306201 2000000001c0 returned -14 [ 258.207847][ T5890] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.237801][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.256550][ T5890] usb 3-1: SerialNumber: syz [ 258.279946][ T5875] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 258.478779][ T5875] usb 1-1: config index 0 descriptor too short (expected 65490, got 72) [ 258.502443][ T5875] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.512871][ T5890] usb 3-1: 0:2 : does not exist [ 258.537255][ T5890] usb 3-1: unit 255 not found! [ 258.537315][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.554352][ T5890] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 258.589868][ T5875] usb 1-1: Product: syz [ 258.590398][ T5890] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5) [ 258.596390][ T5875] usb 1-1: Manufacturer: syz [ 258.634236][ T5875] usb 1-1: SerialNumber: syz [ 258.654290][ T5875] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.680978][ T5890] usb 3-1: USB disconnect, device number 14 [ 258.698523][ T23] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.179449][ T5890] usb 1-1: USB disconnect, device number 15 [ 260.497023][ T9705] netlink: 'syz.5.1318': attribute type 13 has an invalid length. [ 261.362171][ T23] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 261.373513][ T23] ath9k_htc: Failed to initialize the device [ 261.434354][ T5890] usb 1-1: ath9k_htc: USB layer deinitialized [ 262.078335][ T9730] binder: 9729:9730 ioctl 4018620d 0 returned -22 [ 263.545870][ T9787] loop0: detected capacity change from 0 to 512 [ 263.758224][ T9787] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1342: inode has both inline data and extents flags [ 264.108440][ T9787] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1342: couldn't read orphan inode 15 (err -117) [ 264.273021][ T9787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.395612][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.952104][ T9877] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 267.874337][ T9907] loop5: detected capacity change from 0 to 4096 [ 268.919928][ T9943] tipc: Started in network mode [ 268.931185][ T9943] tipc: Node identity 4, cluster identity 4711 [ 268.937454][ T9943] tipc: Node number set to 4 [ 269.263327][ T9949] loop2: detected capacity change from 0 to 512 [ 269.353228][ T9949] __quota_error: 12 callbacks suppressed [ 269.353250][ T9949] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 269.380926][ T9949] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 269.395618][ T9955] loop0: detected capacity change from 0 to 64 [ 269.419056][ T9949] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1391: Failed to acquire dquot type 1 [ 269.490229][ T9949] EXT4-fs (loop2): 1 truncate cleaned up [ 269.497510][ T9949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.511131][ T9949] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.151640][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.464079][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1399'. [ 271.135590][ T9985] loop2: detected capacity change from 0 to 128 [ 271.202269][ T9985] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.220167][ T9985] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.335295][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.625175][ T9998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1408'. [ 271.859983][T10002] tipc: Started in network mode [ 271.882113][T10002] tipc: Node identity 4, cluster identity 4711 [ 271.888366][T10002] tipc: Node number set to 4 [ 272.102032][T10012] loop0: detected capacity change from 0 to 128 [ 272.175665][T10012] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.239415][T10012] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.509729][T10012] loop0: detected capacity change from 128 to 1 [ 272.562891][T10012] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Out of memory [ 272.564357][T10012] syz.0.1417: attempt to access beyond end of device [ 272.564357][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.564668][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.564694][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.564712][T10012] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #12: comm syz.0.1417: mark_inode_dirty error [ 272.564784][T10012] syz.0.1417: attempt to access beyond end of device [ 272.564784][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.564810][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.564829][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.565467][T10012] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Out of memory [ 272.565676][T10012] syz.0.1417: attempt to access beyond end of device [ 272.565676][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.565703][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.565723][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.565739][T10012] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #12: comm syz.0.1417: mark_inode_dirty error [ 272.565806][T10012] syz.0.1417: attempt to access beyond end of device [ 272.565806][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.565830][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.565850][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.566752][T10012] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.1417: Error while async write back metadata [ 272.567179][T10012] syz.0.1417: attempt to access beyond end of device [ 272.567179][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.567207][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.567228][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.567248][T10012] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.1417: Error while async write back metadata [ 272.567305][T10012] syz.0.1417: attempt to access beyond end of device [ 272.567305][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.567331][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.567350][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.567514][T10012] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Out of memory [ 272.567567][T10012] syz.0.1417: attempt to access beyond end of device [ 272.567567][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.567592][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.567612][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.567628][T10012] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.1417: mark_inode_dirty error [ 272.567685][T10012] syz.0.1417: attempt to access beyond end of device [ 272.567685][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.567710][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.567728][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.567883][T10012] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.1417: Error while async write back metadata [ 272.567942][T10012] syz.0.1417: attempt to access beyond end of device [ 272.567942][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.567968][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 272.567987][T10012] EXT4-fs (loop0): I/O error while writing superblock [ 272.568004][T10012] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.1417: Error while async write back metadata [ 272.568059][T10012] syz.0.1417: attempt to access beyond end of device [ 272.568059][T10012] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 272.568084][T10012] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 273.184523][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1423'. [ 273.556374][ T5802] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 275.511670][T10054] netlink: 'syz.5.1432': attribute type 1 has an invalid length. [ 276.365811][T10054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.411662][T10059] bond1: entered allmulticast mode [ 276.444353][T10064] bond1: (slave ip6gretap1): making interface the new active one [ 276.452457][T10064] ip6gretap1: entered allmulticast mode [ 276.462767][T10064] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 276.712112][T10078] input: syz0 as /devices/virtual/input/input13 [ 277.144936][T10093] loop5: detected capacity change from 0 to 2048 [ 277.176181][T10093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.385748][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.402631][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.412764][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.433760][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.441916][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.449501][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.913597][T10122] tipc: Enabling of bearer rejected, failed to enable media [ 277.938747][T10102] chnl_net:caif_netlink_parms(): no params data found [ 278.218742][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.230639][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.238044][T10102] bridge_slave_0: entered allmulticast mode [ 278.252262][T10102] bridge_slave_0: entered promiscuous mode [ 278.265612][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.277196][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.287481][T10102] bridge_slave_1: entered allmulticast mode [ 278.322149][T10102] bridge_slave_1: entered promiscuous mode [ 278.433843][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.670217][ T5105] Bluetooth: hci3: command tx timeout [ 279.716360][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.875858][T10102] team0: Port device team_slave_0 added [ 279.935820][T10102] team0: Port device team_slave_1 added [ 280.035777][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.045915][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.073093][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.088083][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.095610][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.128218][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.258373][T10102] hsr_slave_0: entered promiscuous mode [ 280.320163][T10102] hsr_slave_1: entered promiscuous mode [ 280.354639][T10102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.357202][T10151] loop5: detected capacity change from 0 to 1024 [ 280.381198][T10102] Cannot create hsr debugfs directory [ 280.570114][T10151] hfsplus: failed to load extents file [ 281.083415][T10154] overlayfs: failed to clone lowerpath [ 281.366410][T10102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.378335][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1470'. [ 281.378384][T10102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.403312][T10102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.419480][T10102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.440419][ T5949] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 281.564351][T10102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.615191][T10102] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.631298][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 281.645202][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.652524][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.659130][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.673669][ T5949] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 281.698396][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.712504][ T5949] usb 3-1: config 0 descriptor?? [ 281.728426][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.735728][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.760273][ T5105] Bluetooth: hci3: command tx timeout [ 281.928206][ T5949] usbhid 3-1:0.0: can't add hid device: -71 [ 281.928863][ T2943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.939703][ T5949] usbhid: probe of 3-1:0.0 failed with error -71 [ 281.980962][ T5949] usb 3-1: USB disconnect, device number 15 [ 282.119952][ T2943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.145384][T10102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.206770][ T2943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.365041][ T2943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.626630][T10102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.634813][ T2943] tipc: Left network mode [ 283.713132][T10205] loop5: detected capacity change from 0 to 1024 [ 283.834132][ T5105] Bluetooth: hci3: command tx timeout [ 283.980102][ T8895] hfsplus: bad catalog entry type [ 284.085412][ T8895] hfsplus: xattr search failed [ 284.138644][ T8895] hfsplus: xattr search failed [ 284.185028][ T8895] hfsplus: xattr search failed [ 284.600289][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 284.673988][T10102] veth0_vlan: entered promiscuous mode [ 284.745397][T10102] veth1_vlan: entered promiscuous mode [ 284.789328][ T5831] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 284.815172][ T5890] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.824653][ T5890] usb 6-1: config 0 has no interface number 0 [ 284.834257][T10102] veth0_macvtap: entered promiscuous mode [ 284.850059][ T5890] usb 6-1: config 0 interface 184 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 284.906280][ T5831] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.919658][ T5890] usb 6-1: config 0 interface 184 has no altsetting 0 [ 284.936934][ T5890] usb 6-1: New USB device found, idVendor=1b3d, idProduct=4701, bcdDevice=53.f1 [ 284.960113][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.988527][T10102] veth1_macvtap: entered promiscuous mode [ 284.988664][ T5890] usb 6-1: Product: syz [ 285.019169][ T5890] usb 6-1: Manufacturer: syz [ 285.029310][ T5890] usb 6-1: SerialNumber: syz [ 285.070975][ T5890] usb 6-1: config 0 descriptor?? [ 285.306051][ T5890] ftdi_sio 6-1:0.184: FTDI USB Serial Device converter detected [ 285.326945][ T5890] ftdi_sio ttyUSB0: unknown device type: 0x53f1 [ 285.384934][ T5890] usb 6-1: USB disconnect, device number 4 [ 285.401465][ T5890] ftdi_sio 6-1:0.184: device disconnected [ 285.455542][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.490214][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.503212][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.517393][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.530175][T10102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.569056][T10250] netlink: 'syz.3.1494': attribute type 21 has an invalid length. [ 285.588303][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.602570][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.622868][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.635062][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.649881][T10102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.744860][T10102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.761166][T10102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.772396][T10102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.784906][T10102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.871401][ T2943] hsr_slave_0: left promiscuous mode [ 285.887019][ T2943] hsr_slave_1: left promiscuous mode [ 285.893778][ T5105] Bluetooth: hci3: command tx timeout [ 285.948152][ T2943] veth1_macvtap: left promiscuous mode [ 285.959428][ T2943] veth0_macvtap: left promiscuous mode [ 285.965826][ T2943] veth1_vlan: left promiscuous mode [ 285.974856][ T2943] veth0_vlan: left promiscuous mode [ 286.374886][T10267] loop2: detected capacity change from 0 to 128 [ 286.603007][T10270] loop5: detected capacity change from 0 to 1024 [ 286.831371][T10270] bio_check_eod: 9 callbacks suppressed [ 286.831389][T10270] syz.5.1502: attempt to access beyond end of device [ 286.831389][T10270] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 286.857122][T10270] buffer_io_error: 9 callbacks suppressed [ 286.857138][T10270] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 286.884596][T10270] hfsplus: unable to mark blocks free: error -5 [ 286.894946][T10270] hfsplus: can't free extent [ 286.901172][T10274] syz.5.1502: attempt to access beyond end of device [ 286.901172][T10274] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 286.919430][T10274] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 286.929116][T10274] hfsplus: unable to mark blocks free: error -5 [ 286.936005][T10274] hfsplus: can't free extent [ 287.308479][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 287.381809][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 288.444648][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.478721][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.561555][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1506'. [ 288.747357][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.784666][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.305438][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1513'. [ 290.322106][T10346] loop6: detected capacity change from 0 to 1024 [ 290.416104][T10346] hfsplus: failed to load extents file [ 291.589716][T10392] binder: 10391:10392 ioctl c0306201 0 returned -14 [ 292.583316][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 292.736744][T10441] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1550'. [ 292.809734][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 292.835757][ T5875] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 292.851869][ T5875] usb 7-1: config 0 has no interface number 0 [ 292.875872][ T5875] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 292.925006][ T5875] usb 7-1: config 0 interface 41 has no altsetting 0 [ 292.954524][ T5875] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 292.974186][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.003349][ T5875] usb 7-1: Product: syz [ 293.015612][ T5875] usb 7-1: Manufacturer: syz [ 293.026295][ T5875] usb 7-1: SerialNumber: syz [ 293.043073][ T5875] usb 7-1: config 0 descriptor?? [ 293.049028][T10422] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 293.082884][ T5875] CoreChips: probe of 7-1:0.41 failed with error -22 [ 293.329341][ T5875] usb 7-1: USB disconnect, device number 2 [ 294.033252][T10477] loop5: detected capacity change from 0 to 128 [ 294.083337][T10477] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 294.388919][ T49] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 294.632732][T10492] trusted_key: syz.5.1566 sent an empty control message without MSG_MORE. [ 295.777267][T10538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 295.980370][ T5839] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 296.172638][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.205153][ T5839] usb 3-1: config 0 has no interfaces? [ 296.227443][ T5839] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 296.243410][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.260114][ T5839] usb 3-1: Product: syz [ 296.268953][ T5839] usb 3-1: Manufacturer: syz [ 296.275820][ T5839] usb 3-1: SerialNumber: syz [ 296.298970][ T5839] usb 3-1: config 0 descriptor?? [ 297.605688][ T5875] usb 3-1: USB disconnect, device number 16 [ 298.008812][T10573] binder: 10572:10573 unknown command 1074553620 [ 298.028065][T10573] binder: 10572:10573 ioctl c0306201 200000000940 returned -22 [ 301.742815][T10607] loop6: detected capacity change from 0 to 256 [ 301.997785][T10599] syz.2.1600 (10599): drop_caches: 2 [ 302.133069][T10616] binder: Bad value for 'max' [ 303.246055][T10641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1613'. [ 303.425744][T10599] syz.2.1600 (10599): drop_caches: 2 [ 305.390850][T10709] binder: 10707:10709 ioctl 4018620d 0 returned -22 [ 305.729935][ T5875] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 306.109632][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 306.118329][ T5875] usb 7-1: unable to get BOS descriptor or descriptor too short [ 306.132046][ T5875] usb 7-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 306.142942][ T5875] usb 7-1: config 12 interface 0 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 306.218392][T10729] xt_connbytes: Forcing CT accounting to be enabled [ 306.225691][T10729] Cannot find set identified by id 0 to match [ 306.872417][ T5875] usb 7-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.887038][ T5875] usb 7-1: config 12 interface 0 has no altsetting 0 [ 306.897411][ T5875] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 306.919649][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.936034][ T5875] usb 7-1: Product: syz [ 306.948280][ T5875] usb 7-1: Manufacturer: syz [ 306.955029][ T5875] usb 7-1: SerialNumber: syz [ 307.220357][ T5875] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 307.250610][ T5875] usb 7-1: selecting invalid altsetting 0 [ 307.360818][ T5875] snd-usb-audio: probe of 7-1:12.0 failed with error -2 [ 307.383949][ T5875] usb 7-1: USB disconnect, device number 3 [ 307.471981][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.380835][T10791] syz_tun (unregistering): left allmulticast mode [ 309.553500][T10799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1662'. [ 310.022632][T10768] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 310.044012][T10811] overlayfs: failed to clone upperpath [ 310.311770][T10819] overlayfs: failed to clone upperpath [ 310.453989][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1670'. [ 315.101904][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 315.396015][T10895] loop6: detected capacity change from 0 to 2048 [ 315.479296][T10895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.912926][T10914] overlayfs: failed to clone upperpath [ 315.982170][T10918] 9pnet_fd: Insufficient options for proto=fd [ 316.153468][T10919] syzkaller0: entered promiscuous mode [ 316.159044][T10919] syzkaller0: entered allmulticast mode [ 316.538652][T10934] xt_nfacct: accounting object `syz1' does not exist [ 317.578010][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.595223][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.885901][T10979] overlayfs: failed to clone upperpath [ 319.127419][T10981] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1709'. [ 323.110692][T11014] netlink: 'syz.3.1717': attribute type 298 has an invalid length. [ 326.972948][T11070] batman_adv: batadv0: Adding interface: dummy0 [ 327.029270][T11070] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.153018][T11070] batman_adv: batadv0: Interface activated: dummy0 [ 327.168906][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 327.212000][T11084] batadv0: mtu less than device minimum [ 327.233103][T11089] fuse: Bad value for 'fd' [ 327.254432][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.267981][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.280650][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.293209][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.305829][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.318594][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.331403][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.344074][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.356741][T11084] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.404504][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 327.651829][T11097] binder: Bad value for 'max' [ 328.274772][T11112] bond0: entered allmulticast mode [ 328.294080][ T28] audit: type=1326 audit(1763413148.763:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.369663][ T28] audit: type=1326 audit(1763413148.763:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.442358][ T28] audit: type=1326 audit(1763413148.773:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.514227][ T28] audit: type=1326 audit(1763413148.773:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.575375][ T28] audit: type=1326 audit(1763413148.773:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.626065][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1749'. [ 328.674768][ T28] audit: type=1326 audit(1763413148.773:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.741148][ T28] audit: type=1326 audit(1763413148.773:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.794387][ T28] audit: type=1326 audit(1763413148.773:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 328.858689][ T28] audit: type=1326 audit(1763413148.813:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.6.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f06f018f6c9 code=0x7ffc0000 [ 329.684990][T11159] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1759'. [ 329.714238][T11156] loop5: detected capacity change from 0 to 128 [ 332.478800][T11185] overlayfs: failed to clone upperpath [ 333.035061][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1770'. [ 338.531850][T11269] netlink: 'syz.2.1797': attribute type 4 has an invalid length. [ 339.409185][T11284] netlink: 'syz.6.1800': attribute type 298 has an invalid length. [ 344.230501][T11344] netlink: 'syz.3.1819': attribute type 4 has an invalid length. [ 352.471621][T11440] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1856'. [ 352.540682][T11439] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1855'. [ 354.465735][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1868'. [ 357.220777][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 357.641562][T11523] overlayfs: failed to clone upperpath [ 358.867477][T11540] batadv_slave_1: entered promiscuous mode [ 358.910668][T11539] batadv_slave_1: left promiscuous mode [ 364.510154][T11628] overlayfs: failed to clone upperpath [ 366.037411][T11654] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1937'. [ 366.867017][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1940'. [ 368.308337][T11680] overlayfs: missing 'workdir' [ 369.508391][T11702] veth0: entered promiscuous mode [ 369.526927][T11700] veth0: left promiscuous mode [ 374.090961][T11797] wg2: Caught tx_queue_len zero misconfig [ 376.184009][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2008'. [ 376.387716][T11865] overlayfs: failed to clone upperpath [ 377.359430][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 378.504272][T11909] netlink: 'syz.5.2029': attribute type 6 has an invalid length. [ 379.130829][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.137330][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.469713][T11951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2041'. [ 380.501332][T11951] ip6tnl0: entered promiscuous mode [ 380.554868][T11951] ip6tnl0: entered allmulticast mode [ 383.276555][T12002] syz.3.2063 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 385.595620][T12064] overlayfs: failed to clone lowerpath [ 385.608086][T12064] overlayfs: failed to clone lowerpath [ 386.137356][T12083] xt_hashlimit: overflow, try lower: 17592186044416/9 [ 387.411245][T12087] netlink: 'syz.3.2098': attribute type 6 has an invalid length. [ 388.633708][T12112] 9pnet_fd: Insufficient options for proto=fd [ 389.244727][T12121] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2110'. [ 390.106248][T12135] TCP: TCP_TX_DELAY enabled [ 399.918543][T12303] veth0: entered promiscuous mode [ 399.930253][T12301] veth0: left promiscuous mode [ 403.101456][T12352] netlink: 'syz.6.2194': attribute type 8 has an invalid length. [ 407.233975][T12408] fuse: Bad value for 'fd' [ 407.633116][T12438] overlayfs: failed to clone upperpath [ 407.882839][T12447] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2231'. [ 407.912786][T12447] unsupported nlmsg_type 40 [ 407.930976][T12449] netlink: 'syz.6.2232': attribute type 10 has an invalid length. [ 407.988658][T12449] net_ratelimit: 10 callbacks suppressed [ 407.988679][T12449] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 408.019729][T12449] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 408.069699][T12449] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 408.111959][T12449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.118850][T12449] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 408.176367][T12449] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 408.206883][T12453] dvmrp8: entered allmulticast mode [ 408.250220][ T5890] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 408.656434][T12477] overlayfs: failed to clone upperpath [ 410.314237][T12499] netlink: 'syz.2.2247': attribute type 11 has an invalid length. [ 412.765604][ T28] audit: type=1326 audit(1763413233.243:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 412.884478][ T28] audit: type=1326 audit(1763413233.273:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.009705][T12513] netlink: 'syz.3.2252': attribute type 8 has an invalid length. [ 413.041976][ T28] audit: type=1326 audit(1763413233.273:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.153409][ T28] audit: type=1326 audit(1763413233.273:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.236854][T12515] overlayfs: failed to resolve './file1/file0': -2 [ 413.275047][ T28] audit: type=1326 audit(1763413233.283:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.403427][ T28] audit: type=1326 audit(1763413233.283:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.510479][ T28] audit: type=1326 audit(1763413233.283:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.629659][ T28] audit: type=1326 audit(1763413233.293:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.740806][T12526] overlayfs: failed to clone upperpath [ 413.763506][ T28] audit: type=1326 audit(1763413233.293:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.793609][ T28] audit: type=1326 audit(1763413233.293:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 413.954227][T12531] overlayfs: failed to clone upperpath [ 414.101104][T12533] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 416.376002][T12564] netlink: 'syz.5.2270': attribute type 11 has an invalid length. [ 417.089184][T12566] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2274'. [ 417.099028][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2274'. [ 417.108616][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2274'. [ 418.189172][T12582] overlayfs: failed to clone upperpath [ 419.799686][T12589] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2283'. [ 420.152298][T12633] overlayfs: failed to clone upperpath [ 422.399328][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2315'. [ 422.970333][T12679] lo: Caught tx_queue_len zero misconfig [ 422.976385][T12679] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 423.918374][T12694] overlayfs: failed to clone upperpath [ 428.602560][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2331'. [ 428.672905][T12733] bond0: entered promiscuous mode [ 429.063650][T12737] overlayfs: failed to clone upperpath [ 429.454437][T12751] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 431.552926][T12761] netlink: 'syz.2.2342': attribute type 4 has an invalid length. [ 431.644023][T12762] netlink: 'syz.2.2342': attribute type 4 has an invalid length. [ 432.062925][T12766] xt_SECMARK: invalid mode: 2 [ 432.980030][T12789] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2353'. [ 433.551039][T12802] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 436.170121][T12827] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 436.580264][T12842] tipc: Enabling of bearer rejected, failed to enable media [ 437.166143][T12863] lo: Caught tx_queue_len zero misconfig [ 437.331283][T12867] netlink: 'syz.3.2381': attribute type 4 has an invalid length. [ 437.350870][T12867] netlink: 'syz.3.2381': attribute type 4 has an invalid length. [ 437.889844][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 438.242125][T12886] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 440.457438][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.469576][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.838772][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f008400: rx timeout, send abort [ 444.029284][T12943] netlink: 'syz.6.2405': attribute type 4 has an invalid length. [ 444.247452][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 444.349354][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f008400: abort rx timeout. Force session deactivation [ 452.163546][T13036] Invalid ELF header type: 3 != 1 [ 453.418650][T13051] overlayfs: failed to clone upperpath [ 453.657932][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 453.657950][ T28] audit: type=1326 audit(1763413274.133:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.710355][ T28] audit: type=1326 audit(1763413274.133:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.735142][ T28] audit: type=1326 audit(1763413274.133:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.758521][ T28] audit: type=1326 audit(1763413274.133:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.781602][ T28] audit: type=1326 audit(1763413274.133:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.807030][ T28] audit: type=1326 audit(1763413274.133:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.830067][ T28] audit: type=1326 audit(1763413274.133:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.853204][ T28] audit: type=1326 audit(1763413274.133:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.882538][ T28] audit: type=1326 audit(1763413274.133:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.908952][ T28] audit: type=1326 audit(1763413274.133:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13064 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 453.964151][T13070] sit0: entered promiscuous mode [ 453.983954][T13070] netlink: 'syz.2.2446': attribute type 1 has an invalid length. [ 453.999980][T13070] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2446'. [ 456.064876][T13100] sit0: entered promiscuous mode [ 456.088605][T13100] netlink: 'syz.5.2458': attribute type 1 has an invalid length. [ 456.109605][T13100] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2458'. [ 458.422447][T13161] sit0: entered promiscuous mode [ 458.449034][T13161] netlink: 'syz.6.2481': attribute type 1 has an invalid length. [ 458.464030][T13161] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2481'. [ 458.661954][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 460.303374][T13197] sit0: entered promiscuous mode [ 460.308867][T13197] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 460.317433][T13197] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2495'. [ 464.246673][T13239] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2507'. [ 468.619823][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 478.934027][T13371] overlayfs: failed to clone upperpath [ 479.831468][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 479.831485][ T28] audit: type=1326 audit(1763413300.313:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.014889][ T28] audit: type=1326 audit(1763413300.313:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.326783][ T28] audit: type=1326 audit(1763413300.313:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.638040][ T28] audit: type=1326 audit(1763413300.343:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.661169][ T28] audit: type=1326 audit(1763413300.343:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.683865][ T28] audit: type=1326 audit(1763413300.343:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.766296][ T28] audit: type=1326 audit(1763413300.343:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 480.842590][ T28] audit: type=1326 audit(1763413300.343:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 481.068657][ T28] audit: type=1326 audit(1763413300.343:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 481.104555][ T28] audit: type=1326 audit(1763413300.353:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 482.313827][T13409] netlink: 'syz.3.2567': attribute type 4 has an invalid length. [ 482.373479][T13412] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2568'. [ 484.619152][T13443] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2578'. [ 492.797681][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 493.519090][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 493.519107][ T28] audit: type=1326 audit(1763413313.993:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.2601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06f018f6c9 code=0x0 [ 495.460921][ T28] audit: type=1326 audit(1763413315.943:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 495.690711][ T28] audit: type=1326 audit(1763413315.963:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.153084][ T28] audit: type=1326 audit(1763413318.633:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.245903][ T28] audit: type=1326 audit(1763413318.663:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.296080][ T28] audit: type=1326 audit(1763413318.723:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.359560][ T28] audit: type=1326 audit(1763413318.723:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21c778f703 code=0x7ffc0000 [ 498.411571][T13564] overlayfs: failed to clone upperpath [ 498.447827][ T28] audit: type=1326 audit(1763413318.723:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f21c778e17f code=0x7ffc0000 [ 498.517074][ T28] audit: type=1326 audit(1763413318.723:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f21c778f757 code=0x7ffc0000 [ 498.587384][ T28] audit: type=1326 audit(1763413318.723:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21c778df10 code=0x7ffc0000 [ 498.642672][ T28] audit: type=1326 audit(1763413318.723:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f21c778e32a code=0x7ffc0000 [ 498.700780][ T28] audit: type=1326 audit(1763413318.733:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.749551][ T28] audit: type=1326 audit(1763413318.733:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.799564][ T28] audit: type=1326 audit(1763413318.753:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.840196][ T28] audit: type=1326 audit(1763413318.753:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.904213][ T28] audit: type=1326 audit(1763413318.753:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 498.991221][ T28] audit: type=1326 audit(1763413318.753:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 499.068122][ T28] audit: type=1326 audit(1763413318.753:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 499.105311][ T28] audit: type=1326 audit(1763413318.753:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c778f6c9 code=0x7ffc0000 [ 501.895959][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.902597][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.610484][T13627] mmap: syz.6.2636 (13627) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 506.422179][T13647] overlayfs: failed to clone upperpath [ 507.292879][T13662] veth1_to_bond: entered allmulticast mode [ 507.302535][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'. [ 516.734139][T13698] overlayfs: failed to clone upperpath [ 527.111505][T13780] overlayfs: failed to clone upperpath [ 528.098903][T13785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.365733][T13805] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2689'. [ 531.098712][ T5790] IPVS: starting estimator thread 0... [ 531.219733][T13824] IPVS: using max 17 ests per chain, 40800 per kthread [ 532.483611][ T5890] IPVS: starting estimator thread 0... [ 532.609836][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 532.748170][T13857] IPVS: using max 16 ests per chain, 38400 per kthread [ 543.056977][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 543.056996][ T28] audit: type=1326 audit(1763413363.533:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.093764][ T28] audit: type=1326 audit(1763413363.543:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.131408][ T28] audit: type=1326 audit(1763413363.583:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.155640][ T28] audit: type=1326 audit(1763413363.583:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.308414][ T28] audit: type=1326 audit(1763413363.583:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.333562][ T28] audit: type=1326 audit(1763413363.603:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.357774][ T28] audit: type=1326 audit(1763413363.603:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.947350][ T28] audit: type=1326 audit(1763413363.603:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 543.987216][ T28] audit: type=1326 audit(1763413363.603:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 544.038721][ T28] audit: type=1326 audit(1763413363.603:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 548.426296][T14027] pim6reg: entered allmulticast mode [ 552.035938][T14046] overlayfs: failed to resolve './bus': -2 [ 553.219243][T14059] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2776'. [ 558.319319][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2773'. [ 560.949587][ T5105] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 563.508349][T14101] dvmrp1: entered allmulticast mode [ 563.732011][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.738639][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.117982][T14134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 567.145559][T14134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 567.176092][T14134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 567.264166][T14134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 567.280193][T14134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 567.287945][T14134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 567.858535][T14146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2787'. [ 569.329597][ T5105] Bluetooth: hci4: command tx timeout [ 570.548319][T14132] chnl_net:caif_netlink_parms(): no params data found [ 571.669544][ T5105] Bluetooth: hci4: command tx timeout [ 572.352461][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.369317][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.378318][T14132] bridge_slave_0: entered allmulticast mode [ 572.455581][T14220] PKCS7: Unknown OID: [4] 0.0 [ 572.460979][T14220] PKCS7: Only support pkcs7_signedData type [ 572.694108][T14132] bridge_slave_0: entered promiscuous mode [ 572.887526][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.925912][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.982086][T14132] bridge_slave_1: entered allmulticast mode [ 573.020951][T14132] bridge_slave_1: entered promiscuous mode [ 573.152540][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.463967][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.700849][T14229] No such timeout policy "syz1" [ 573.750284][T14134] Bluetooth: hci4: command tx timeout [ 573.772239][ T5105] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 574.289778][T14132] team0: Port device team_slave_0 added [ 574.340046][T14132] team0: Port device team_slave_1 added [ 574.579626][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.648320][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.679548][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.819964][T14132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.839517][ T5105] Bluetooth: hci4: command tx timeout [ 575.878646][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.999518][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.469720][T14132] hsr_slave_0: entered promiscuous mode [ 577.483300][T14132] hsr_slave_1: entered promiscuous mode [ 577.523316][T14132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.539544][T14132] Cannot create hsr debugfs directory [ 578.304434][T14132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 578.371810][T14267] PKCS7: Unknown OID: [4] 0.0 [ 578.376625][T14267] PKCS7: Only support pkcs7_signedData type [ 578.850487][T14132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 579.013282][T14132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 579.053695][T14132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 580.293734][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.451604][T14132] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.523028][T14290] overlayfs: failed to clone lowerpath [ 580.628154][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.635459][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.710463][T14295] /dev/nullb0: Can't lookup blockdev [ 581.211254][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.218509][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.180045][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2825'. [ 583.588164][T14317] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 583.999154][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.821004][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 584.821020][ T28] audit: type=1326 audit(1763413405.293:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.2.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.076756][ T28] audit: type=1326 audit(1763413405.293:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.2.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.101794][ T28] audit: type=1326 audit(1763413405.293:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.2.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.170403][ T28] audit: type=1326 audit(1763413405.293:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.410208][ T28] audit: type=1326 audit(1763413405.293:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.435812][ T5105] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 585.446997][ T28] audit: type=1326 audit(1763413405.303:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.473203][ T28] audit: type=1326 audit(1763413405.303:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.498536][ T28] audit: type=1326 audit(1763413405.303:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.523734][ T28] audit: type=1326 audit(1763413405.353:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 585.561257][ T28] audit: type=1326 audit(1763413405.353:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bfd8f6c9 code=0x7ffc0000 [ 587.536373][T14132] veth0_vlan: entered promiscuous mode [ 587.631280][T14132] veth1_vlan: entered promiscuous mode [ 587.782997][T14132] veth0_macvtap: entered promiscuous mode [ 587.837545][T14132] veth1_macvtap: entered promiscuous mode [ 588.140881][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.485376][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.719645][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.730225][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.740349][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.753009][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.775523][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.903209][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.961855][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.040628][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.125342][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.187324][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.198639][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.211245][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.223886][T14132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.233228][T14132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.248021][T14132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.374683][T14132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.251384][T14182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.263885][T14182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.386805][T14182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.420396][T14182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.272645][T14376] xt_TPROXY: Can be used only with -p tcp or -p udp [ 594.024180][T14382] input: syz0 as /devices/virtual/input/input16 [ 604.259951][T14469] netlink: 'syz.7.2857': attribute type 10 has an invalid length. [ 617.163613][T14546] ceph: No mds server is up or the cluster is laggy [ 617.553517][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 617.561546][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 620.433783][T14572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 622.480121][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2884'. [ 624.624663][T14594] loop7: detected capacity change from 0 to 512 [ 624.776858][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.783503][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.004090][T14594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.017336][T14594] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.089338][T14594] __quota_error: 26 callbacks suppressed [ 625.095598][T14594] Quota error (device loop7): do_check_range: Getting block 83886080 out of range 0-5 [ 625.396494][T14132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.262471][T14620] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2893'. [ 632.229930][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2912'. [ 633.514586][T14679] xt_l2tp: missing protocol rule (udp|l2tpip) [ 633.839590][T14681] loop7: detected capacity change from 0 to 1024 [ 634.747692][ T6209] hfsplus: b-tree write err: -5, ino 4 [ 634.753410][ T5875] IPVS: starting estimator thread 0... [ 634.869607][T14693] IPVS: using max 17 ests per chain, 40800 per kthread [ 634.962754][T14687] tipc: Failed to obtain node identity [ 634.974124][T14687] tipc: Enabling of bearer rejected, failed to enable media [ 638.273237][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2915'. [ 640.923336][T14736] netlink: 'syz.7.2918': attribute type 10 has an invalid length. [ 640.931519][T14736] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2918'. [ 641.309586][T14736] batman_adv: batadv0: Adding interface: virt_wifi0 [ 641.317124][T14736] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.994192][T14736] batman_adv: batadv0: Interface activated: virt_wifi0 [ 646.763987][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2923'. [ 646.774760][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2923'. [ 649.997536][T14791] overlayfs: failed to clone upperpath [ 650.369914][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 651.863657][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 651.881025][T14800] ceph: No mds server is up or the cluster is laggy [ 651.889728][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 652.203182][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 652.209263][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 657.752565][T14842] loop7: detected capacity change from 0 to 2048 [ 657.781648][T14842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 659.415016][T14868] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 666.248246][ T5105] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 667.496877][T14921] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 669.831743][ T5105] Bluetooth: hci4: command 0x0406 tx timeout [ 673.481099][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2963'. [ 673.502360][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2963'. [ 675.934774][T14963] usb usb9: usbfs: process 14963 (syz.7.2970) did not claim interface 0 before use [ 679.609657][T14986] 9pnet_fd: Insufficient options for proto=fd [ 682.017240][T15000] (null): rxe_set_mtu: Set mtu to 4096 [ 682.028087][T15000] lo speed is unknown, defaulting to 1000 [ 682.041399][T15000] lo speed is unknown, defaulting to 1000 [ 682.052392][T15000] lo speed is unknown, defaulting to 1000 [ 682.290361][T15000] infiniband syz2: set active [ 682.295659][T15000] infiniband syz2: added lo [ 682.346702][T15000] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 682.356355][T15000] infiniband syz2: Couldn't open port 1 [ 682.403849][ T5831] lo speed is unknown, defaulting to 1000 [ 682.430048][T15000] RDS/IB: syz2: added [ 682.435164][T15000] smc: adding ib device syz2 with port count 1 [ 682.441859][T15000] smc: ib device syz2 port 1 has pnetid [ 682.464226][T15000] lo speed is unknown, defaulting to 1000 [ 682.483657][ T5563] lo speed is unknown, defaulting to 1000 [ 682.675773][T15000] lo speed is unknown, defaulting to 1000 [ 682.910338][T15000] lo speed is unknown, defaulting to 1000 [ 683.088642][T15000] lo speed is unknown, defaulting to 1000 [ 683.260305][T15000] lo speed is unknown, defaulting to 1000 [ 684.071323][T15027] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2988'. [ 684.263529][T15032] tipc: Started in network mode [ 684.268574][T15032] tipc: Node identity ba469b25e043, cluster identity 4711 [ 684.276476][T15032] tipc: Enabled bearer , priority 0 [ 685.101493][T15023] tipc: Disabling bearer [ 686.300308][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.306715][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.418315][T15062] overlayfs: overlapping lowerdir path [ 689.734789][T15071] loop7: detected capacity change from 0 to 16 [ 689.780939][T15071] erofs: (device loop7): mounted with root inode @ nid 36. [ 690.179639][T15080] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 690.227078][T15080] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 690.239874][T15080] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 690.252064][T15081] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 690.262898][T15081] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 690.274851][T15081] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 690.288913][T15081] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 690.300481][T15081] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 690.312099][T15081] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 690.323728][T15081] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 690.334575][T15081] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 690.345540][T15081] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 690.795568][ T28] audit: type=1326 audit(1763413511.273:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15073 comm="syz.6.2998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06f018f6c9 code=0x0 [ 693.426766][T14134] Bluetooth: hci4: command 0x0406 tx timeout [ 693.789130][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3006'. [ 695.117609][T15120] o2cb: This node has not been configured. [ 695.124422][T15120] o2cb: Cluster check failed. Fix errors before retrying. [ 695.131826][T15120] (syz.5.3011,15120,1):user_dlm_register:674 ERROR: status = -22 [ 695.139670][T15120] (syz.5.3011,15120,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 695.195846][T15115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.411211][T15143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.461893][T15158] siw: device registration error -23 [ 701.473488][T15158] smc: removing ib device syz2 [ 702.988827][T15158] ------------[ cut here ]------------ [ 702.994461][T15158] WARNING: CPU: 0 PID: 15158 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 703.005502][T15158] Modules linked in: [ 703.009496][T15158] CPU: 0 PID: 15158 Comm: syz.6.3017 Not tainted syzkaller #0 [ 703.017314][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 703.027897][T15158] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 703.033544][T15158] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 6e 1a fa 48 83 3b 00 75 07 e8 45 13 c3 f9 5b c3 e8 3e 13 c3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 703.053327][T15158] RSP: 0018:ffffc900045bf168 EFLAGS: 00010246 [ 703.059498][T15158] RAX: ffffffff87c27c52 RBX: ffff88806635d298 RCX: 0000000000080000 [ 703.067500][T15158] RDX: ffffc9001810c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 703.075973][T15158] RBP: 0000000000000002 R08: ffff88806635c743 R09: 1ffff1100cc6b8e8 [ 703.084014][T15158] R10: dffffc0000000000 R11: ffffed100cc6b8e9 R12: dffffc0000000000 [ 703.092083][T15158] R13: 1ffff920008b7e48 R14: ffffffff87c0c2f0 R15: dffffc0000000000 [ 703.100120][T15158] FS: 00007f06f10086c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 703.109078][T15158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.115845][T15158] CR2: 0000000000000000 CR3: 000000001e7be000 CR4: 00000000003506f0 [ 703.123904][T15158] Call Trace: [ 703.127198][T15158] [ 703.130196][T15158] rxe_dealloc+0x33/0x100 [ 703.134649][T15158] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 703.141496][T15158] ib_dealloc_device+0x4e/0x1f0 [ 703.146363][T15158] __ib_unregister_device+0x120/0x170 [ 703.151807][T15158] ib_unregister_device_and_put+0xb8/0xf0 [ 703.157540][T15158] nldev_dellink+0x2af/0x300 [ 703.162207][T15158] ? nldev_newlink+0x560/0x560 [ 703.167075][T15158] ? __lock_acquire+0x1334/0x7c80 [ 703.172616][T15158] ? apparmor_capable+0x137/0x1a0 [ 703.177664][T15158] ? bpf_lsm_capable+0x9/0x10 [ 703.182453][T15158] ? security_capable+0x89/0xb0 [ 703.187335][T15158] ? nldev_newlink+0x560/0x560 [ 703.192144][T15158] rdma_nl_rcv+0x6b9/0x9a0 [ 703.196584][T15158] ? rdma_nl_net_init+0x170/0x170 [ 703.201692][T15158] ? __lock_acquire+0x7c80/0x7c80 [ 703.206729][T15158] ? net_generic+0x1e/0x240 [ 703.211310][T15158] ? netlink_deliver_tap+0x2e/0x1b0 [ 703.216561][T15158] netlink_unicast+0x751/0x8d0 [ 703.221411][T15158] netlink_sendmsg+0x8c1/0xbe0 [ 703.226238][T15158] ? netlink_getsockopt+0x580/0x580 [ 703.231515][T15158] ? aa_sock_msg_perm+0x94/0x150 [ 703.236506][T15158] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 703.241868][T15158] ? security_socket_sendmsg+0x80/0xa0 [ 703.247361][T15158] ? netlink_getsockopt+0x580/0x580 [ 703.252704][T15158] ____sys_sendmsg+0x5bf/0x950 [ 703.257511][T15158] ? __asan_memset+0x22/0x40 [ 703.262196][T15158] ? __sys_sendmsg_sock+0x30/0x30 [ 703.267237][T15158] ? __import_iovec+0x5f2/0x860 [ 703.272158][T15158] ? import_iovec+0x73/0xa0 [ 703.277103][T15158] ___sys_sendmsg+0x220/0x290 [ 703.282140][T15158] ? __sys_sendmsg+0x270/0x270 [ 703.286960][T15158] __se_sys_sendmsg+0x1a5/0x270 [ 703.291894][T15158] ? __x64_sys_sendmsg+0x80/0x80 [ 703.296867][T15158] ? lockdep_hardirqs_on+0x98/0x150 [ 703.302138][T15158] do_syscall_64+0x55/0xb0 [ 703.306709][T15158] ? clear_bhb_loop+0x40/0x90 [ 703.311436][T15158] ? clear_bhb_loop+0x40/0x90 [ 703.316136][T15158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.322091][T15158] RIP: 0033:0x7f06f018f6c9 [ 703.326535][T15158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.346278][T15158] RSP: 002b:00007f06f1008038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.354766][T15158] RAX: ffffffffffffffda RBX: 00007f06f03e6180 RCX: 00007f06f018f6c9 [ 703.362808][T15158] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 703.370846][T15158] RBP: 00007f06f0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.379449][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.387448][T15158] R13: 00007f06f03e6218 R14: 00007f06f03e6180 R15: 00007fffd0557cc8 [ 703.395828][T15158] [ 703.398905][T15158] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 703.406184][T15158] CPU: 0 PID: 15158 Comm: syz.6.3017 Not tainted syzkaller #0 [ 703.413646][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 703.423718][T15158] Call Trace: [ 703.427014][T15158] [ 703.429975][T15158] dump_stack_lvl+0x16c/0x230 [ 703.434770][T15158] ? show_regs_print_info+0x20/0x20 [ 703.439985][T15158] ? load_image+0x3b0/0x3b0 [ 703.444506][T15158] panic+0x2c0/0x710 [ 703.448436][T15158] ? bpf_jit_dump+0xd0/0xd0 [ 703.452960][T15158] __warn+0x2e0/0x470 [ 703.456953][T15158] ? rxe_pool_cleanup+0x42/0x50 [ 703.461835][T15158] ? rxe_pool_cleanup+0x42/0x50 [ 703.466694][T15158] report_bug+0x2be/0x4f0 [ 703.471032][T15158] ? rxe_pool_cleanup+0x42/0x50 [ 703.475892][T15158] ? rxe_pool_cleanup+0x42/0x50 [ 703.480765][T15158] ? rxe_pool_cleanup+0x44/0x50 [ 703.485629][T15158] handle_bug+0xcf/0x120 [ 703.489901][T15158] exc_invalid_op+0x1a/0x50 [ 703.494418][T15158] asm_exc_invalid_op+0x1a/0x20 [ 703.499275][T15158] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 703.504755][T15158] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 6e 1a fa 48 83 3b 00 75 07 e8 45 13 c3 f9 5b c3 e8 3e 13 c3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 703.524385][T15158] RSP: 0018:ffffc900045bf168 EFLAGS: 00010246 [ 703.530467][T15158] RAX: ffffffff87c27c52 RBX: ffff88806635d298 RCX: 0000000000080000 [ 703.538444][T15158] RDX: ffffc9001810c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 703.546427][T15158] RBP: 0000000000000002 R08: ffff88806635c743 R09: 1ffff1100cc6b8e8 [ 703.554416][T15158] R10: dffffc0000000000 R11: ffffed100cc6b8e9 R12: dffffc0000000000 [ 703.562395][T15158] R13: 1ffff920008b7e48 R14: ffffffff87c0c2f0 R15: dffffc0000000000 [ 703.570417][T15158] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 703.577201][T15158] ? rxe_pool_cleanup+0x42/0x50 [ 703.582080][T15158] ? rxe_pool_cleanup+0x42/0x50 [ 703.586941][T15158] rxe_dealloc+0x33/0x100 [ 703.591279][T15158] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 703.598050][T15158] ib_dealloc_device+0x4e/0x1f0 [ 703.602910][T15158] __ib_unregister_device+0x120/0x170 [ 703.608296][T15158] ib_unregister_device_and_put+0xb8/0xf0 [ 703.614032][T15158] nldev_dellink+0x2af/0x300 [ 703.618653][T15158] ? nldev_newlink+0x560/0x560 [ 703.623449][T15158] ? __lock_acquire+0x1334/0x7c80 [ 703.628589][T15158] ? apparmor_capable+0x137/0x1a0 [ 703.633627][T15158] ? bpf_lsm_capable+0x9/0x10 [ 703.638321][T15158] ? security_capable+0x89/0xb0 [ 703.643273][T15158] ? nldev_newlink+0x560/0x560 [ 703.648049][T15158] rdma_nl_rcv+0x6b9/0x9a0 [ 703.652485][T15158] ? rdma_nl_net_init+0x170/0x170 [ 703.657535][T15158] ? __lock_acquire+0x7c80/0x7c80 [ 703.662564][T15158] ? net_generic+0x1e/0x240 [ 703.667079][T15158] ? netlink_deliver_tap+0x2e/0x1b0 [ 703.672290][T15158] netlink_unicast+0x751/0x8d0 [ 703.677096][T15158] netlink_sendmsg+0x8c1/0xbe0 [ 703.681879][T15158] ? netlink_getsockopt+0x580/0x580 [ 703.687098][T15158] ? aa_sock_msg_perm+0x94/0x150 [ 703.692052][T15158] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 703.697349][T15158] ? security_socket_sendmsg+0x80/0xa0 [ 703.702899][T15158] ? netlink_getsockopt+0x580/0x580 [ 703.708127][T15158] ____sys_sendmsg+0x5bf/0x950 [ 703.712922][T15158] ? __asan_memset+0x22/0x40 [ 703.717537][T15158] ? __sys_sendmsg_sock+0x30/0x30 [ 703.722576][T15158] ? __import_iovec+0x5f2/0x860 [ 703.727452][T15158] ? import_iovec+0x73/0xa0 [ 703.731974][T15158] ___sys_sendmsg+0x220/0x290 [ 703.736688][T15158] ? __sys_sendmsg+0x270/0x270 [ 703.741502][T15158] __se_sys_sendmsg+0x1a5/0x270 [ 703.746372][T15158] ? __x64_sys_sendmsg+0x80/0x80 [ 703.751341][T15158] ? lockdep_hardirqs_on+0x98/0x150 [ 703.756547][T15158] do_syscall_64+0x55/0xb0 [ 703.760970][T15158] ? clear_bhb_loop+0x40/0x90 [ 703.765651][T15158] ? clear_bhb_loop+0x40/0x90 [ 703.770342][T15158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.776239][T15158] RIP: 0033:0x7f06f018f6c9 [ 703.780657][T15158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.800279][T15158] RSP: 002b:00007f06f1008038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.808706][T15158] RAX: ffffffffffffffda RBX: 00007f06f03e6180 RCX: 00007f06f018f6c9 [ 703.816723][T15158] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 703.824712][T15158] RBP: 00007f06f0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.832811][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.840877][T15158] R13: 00007f06f03e6218 R14: 00007f06f03e6180 R15: 00007fffd0557cc8 [ 703.848904][T15158] [ 703.852199][T15158] Kernel Offset: disabled [ 703.856646][T15158] Rebooting in 86400 seconds..