last executing test programs: 31m39.333190259s ago: executing program 32 (id=111): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 27m38.251607289s ago: executing program 33 (id=781): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 26m7.230530345s ago: executing program 34 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xa, 0x71f100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x28) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 25m38.201296394s ago: executing program 35 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9ff5010018"], &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 22m28.54193812s ago: executing program 36 (id=1414): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c1eb37479342c7600725007f31d2853cd6435366b2bd8a4"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 15m15.828824242s ago: executing program 37 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) rename(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0123:abcd:a67:ef', 0x10) 14m2.113368499s ago: executing program 38 (id=2539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 10m5.37156044s ago: executing program 7 (id=3343): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000002240)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x40, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x1, {0x0, 0x0, 0x7}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x1, 0x405}}}, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0], 0x1) personality(0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) 10m1.425032967s ago: executing program 7 (id=3356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@generic={0x4, 0xa, "72354c174002b4b9"}]}}}}}}}, 0x0) 10m1.149344693s ago: executing program 3 (id=3359): unshare(0x6a020200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff2dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c912020041190300280012800b000100697036746e6c00001800028014000200000000000000000000000000e6"], 0x48}, 0x1, 0x0, 0x0, 0x448c0}, 0x4c054) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @private1, 0x80004}, 0x1c) write(r1, 0x0, 0x0) 10m0.984184629s ago: executing program 7 (id=3360): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 9m59.85889114s ago: executing program 3 (id=3366): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 9m56.97518736s ago: executing program 7 (id=3373): r0 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2063, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x3, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 9m55.728267532s ago: executing program 7 (id=3379): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) tkill(r1, 0x12) 9m55.352725315s ago: executing program 3 (id=3380): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) lseek(r0, 0x0, 0x0) 9m54.457075139s ago: executing program 3 (id=3384): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c000200657468746f6f6c"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresgid(0xee00, 0xee01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000880)="6d0000001400116109004beafd0d8c560a84476080ff7612082e32b6e006f635a3641b0fe9e6e85c5e00004e20590000a2bc5603ca00", 0x36}, {&(0x7f0000000900)="e6ed585f03ab7ac75c72950460c1f54725bad79eed8968baed6f89a1d94386cd079d5771ac8ecdb367de8ae71969c8a6ede0e8bd802c71be70d1842f2d20653de9424c5042f47c005dbecac36b4282753a2a68c1e3336622022827871e8b5b883f57d9f2acb3b84b562bbd53f29aeacc2472a751439fff78ec95f10c9e524b63fdc2dc6528a628a38cb0c953c6adde4210584627b70987fbc2b08a732db7ae8d18ee3f3e277a5f7afea240a77c38523d74bbaffea4cf9afd9caa03addd80618fe9fe27ccad195f914f2af1faa63b521e6f64e0", 0xd3}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="c53f54b78ed8e671bd02970466d0c3fd6e8fb7d365d3558f20b3a1275b958aa124b391712181ebb6e386c64ad98631bb075150ac8984b0033d8a202066943bdd78a7554a1423c9ffe6f899b9735333a35c018bf11a96993f46aa876c8d4a27cef806183945e2bb2c493414209cd911496fac6aababa656485bb95cd9b714ce74f4e48425abc5d8179b643902341143aa42e55da79067276af00242566c9f1500fd82d3d0e9e1ba3ac7f1e8db9d6e09dd3da24067dc5c51f8682df70d3f12934cdbf49891", 0xc4}], 0x4) shutdown(r2, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000240)={0x3, 0x8001}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000340)="b9ff0300600d220962f0480d0600fb9e14f0", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x10000, 0x4) 9m53.66050174s ago: executing program 3 (id=3386): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)='^r', 0x2}], 0x2}}], 0x1, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000180)={0xa}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={r5, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 9m52.6360048s ago: executing program 7 (id=3389): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, 0x0) r0 = inotify_init() move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m51.91007584s ago: executing program 3 (id=3391): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x2af1, 0x1c080, 0xa, 0x20f}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m37.175565152s ago: executing program 39 (id=3389): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, 0x0) r0 = inotify_init() move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m36.663597908s ago: executing program 40 (id=3391): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x2af1, 0x1c080, 0xa, 0x20f}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m59.131914324s ago: executing program 9 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) close(0x3) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x3e, r1}, 0x5) 5m58.744746779s ago: executing program 9 (id=4167): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_evm(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x0) 5m58.182969471s ago: executing program 9 (id=4171): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 5m54.740098124s ago: executing program 9 (id=4184): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 5m53.121548984s ago: executing program 9 (id=4189): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x2, 0x1007, 0x176}) 5m51.203145408s ago: executing program 9 (id=4191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000100000000fbdbdf250e00000008e603000800000a0c000180080009007200000800050080000000"], 0x30}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m35.291250446s ago: executing program 41 (id=4191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000100000000fbdbdf250e00000008e603000800000a0c000180080009007200000800050080000000"], 0x30}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m24.232674909s ago: executing program 1 (id=4274): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x4, 0x3, 0x54c, 0x5c4, 0x1, 0x0, "05010905"}}, 0x11c) read(r0, &(0x7f00000002c0), 0x100) read(r0, &(0x7f0000000300), 0x100) read(r0, &(0x7f0000000340), 0x100) write(r0, &(0x7f0000000380)="0a0000000100000001000000", 0xc) mkdir(&(0x7f00000003c0)='sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, &(0x7f00000004c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='sys/bus/hid/drivers/playstation/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='0003:054C:05C4.0001\x00', 0x14) write(r1, &(0x7f0000000580)='0003:054C:05C4.0002\x00', 0x14) write(r1, &(0x7f00000005c0)='0003:054C:05C4.0003\x00', 0x14) write(r1, &(0x7f0000000600)='0003:054C:05C4.0004\x00', 0x14) 5m23.825666115s ago: executing program 1 (id=4279): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008140)="68c5ac4472cf4c55a95a4033efea47aaa2166bc5bf26041d530b7a8093f52a799ed64f7d388329e03a7263761a603ac78dc4f00e76854b0bf547b01d6e4b755c86cbd1f79f2b52aa37b394b12c8adadea9f0303e786c4f5d1a003d0dd2105d7f913c8b0b37db87660db041e3ef02e74014e152bec1a59404691f8d5536f907db385e0c10b26f5e4b1cb3649b4851fd9497b8a5a46d92ae939db388e9dd4221d56445365516ba4afbaf71f0a1f283af35f6bf0335d4ee45d206eb7d27b9c1b57700cea4b6df1b78b32cc210ce8f9cbd51c6061f5020b25140978d87feeb8fcfebd36bfa26edb914734c8d62cc770ccd47e39e83d37d61e1e40c8dd5c57595c1a1b676b47e61c57e044b80a2115571bfa525911abea7c4dd544f144a54edcffad16f0c4f97a24103cdda4985c5b2f24121e093bd6dea99e8e82285219bf32e7f31cfa72c619e439d9b30963baae00cfa75c343dec4ded492e2be126e8a4a028a4bd8a31c816082689bf4f24a1bb992fcbc6021820e64dc0c5b49700b939032cd0850e99fcd18987f49ddcba704f696c620e134d4952668e0b26f3e38b50eee1b9cc4040a73ac78478fa14f02288fe6703875c0e2588d120cce70e239c0d625c2dff76eebadf2e4abf3b48b14592be27efe6901a7b9a3e368afe0bc9eacc385df9fc50d8d511cd3563546c3e3eac6888282dc18aa0dd5ca8f6c9fa553329a824fc926357bee26103a7d6f6f97aaf40a74f9895a32572cad2f847d3a43dd46e56366bef0ac50075fa0dd4ca9112cb2d1f5ff104d07e045e0f52d501fdfb4d8b5b25ddda0d50a9dd227ea44f65aa187e42ef04f81c03ef7b98d87c6aa528a23aa03633b6f8851932a293c3cff455d7492ad2d624468dba864a0bca66e73dd10e30c9b92af9ebb918dbc47cdade725f4cbfa5bcd41f7165363a375918de916506cf34debb32c73c07912186604f0643fe9cdc48df54382dffbd6618fde5cd539ed66017501cb19341578197eb1c628c2bd66d6c0492dac5287e8151341e04b5233bdb75c76115929012e85624457e6fdc01a76586ab1fae4ca66f3e8cfadc12de75de7c7136ec1c81fc63fdd904646b549b745882a6a4fdc6be24069ed96506ba98175c72d111173a4605b468e09d27a03372a6ddd41cd0258a0376bd4a7fdbb81bcc96b0a74f5995a5441bbb3eb56c0a5fc95fc6174526c7eb733781abccf374886e5660300220475bdd90868bba8fbe24f28f4562d2f16717e78508754332d6f631d3ab1db0a1dab327a062c3425d05205ec2e501d88557976dfccef49da5374fcca03faa2965af1fed40bcc38c9224ae2b690ca770a48535bd12ad48e3b67ca34a568aa77a4054796ca54d9fa166735aac622f70f30f54170c28a8945575a90c6b6c060174544d2d0c6e0ba45d7e119539fec300b38c20ab49ec49bf966d5195dde7b62dd5d732b590743ebf83ca79e20d3a7a96cfcd3d5ed362116501d6c7829aeb373d75c34885f97cc7d46c232eaa8eb766fe7b4f5dc544018e53acd585aa3fc37fa2f5da0598de6fb4fbe6e853e0399e1161849bf28c7f3e70fe586d90f6e23ca784f9a62a6fb26a30fc4b0daab410f40985b2ccf33fa3b134c46018d5f490e19a1a6358fb64fca2262b40605226f736a419120eb12d9839ae5e00dda82b0e38d035aba5b7c64bad62690d0be82644c4bc3389a50e778c57f5d565c7325ae1d26191b0b35718f98d0703203cd15f797e9d0851f08a5043d38c7b70afa73d03d76c1b3a0beb2883e7071ae392255eb93f8b7766aa8e8476154cad09543d5663f5218a4ccb1d5221aa2b5ff384fa2deebd3bee5bd59498de9e69fc0312a0e9f95d473c3a0114cef6be8e83f13dad24feaf8e0202ae31d9d72d8adc898f5efa2056188c911b62362b78570cb388d72d0fb66e9f51327074c76b6a811ec56e325cbad4fd7e1688567a5832e559bcf9054f74e35c72c0645e76414395f305a5c20093d51aaced12f8f41c91c1fc105c48ab6eb5a6ea98d2feeba9fca5f6f87c1ecda7ede362a7b3f549437863ca0b3d718ac440156c63913b0dcd593f6c7194467cb4f4ce53c100dc0802e3a05523fc34ea3745449317db3eadf1f24a35f7230323148c4daa3cb3b200a696dec875dff60ff8d934a081a3492542db94c02ae1e1fee8e9b4ed05ba7bd522e8d93f3e0258cf709ca23ec1f0da74cee30f06703844746954a63eb05f013e1c3e0b52867d4d4c28ce4a3b8e1810f7af52d3f9aa4a1890f4b102664fcb3e47e2d1e84aab2498f8e356dc08c1b6bc126527ed6a052eb514c5e4447683f810f9061aee5b88a76b6cc75194babb655bc89bbd44bc114f93f086a2591fcb566dcb3e25afc921b0347977824069fab2670a72604e9771ba8c0c1b11bb70f021a16e90a5e38e4ad8b5bcdf09728f55342333ba41d0c15af22fbe225949bb86d353954ec9943d1735b54a764ab78b4700b49d3cc753c93b288d167441b89d8e8cc7e0c42d32ba882e2a49d72dae5c6b6a4bfbaef4a7ac70a0de2ee03e74da5857fef687bbe890a84136b6ab1c6359eb7d46d3cb085e907188e43b21024d6585eaea577bd2134bd7cfa1b31171b6a6c91092e4ca87bebb09c37114a834084616b69c07feca46761ef8f3581c7c17bce4d43153848feb4c87f1888e1a7da3972613d8564db52b7254331d6250b4402a0b2cc6bf52f21df0fc62a0b8b4038b95df7a6c1a472fbe8269463e337e98b4f751953d9b560abf3f281bd08a8204236bdc30dddf518f23d77eaeca327aba62fdf164f91cd921b4a8fc8d357081cc878907bbbe7b669fab8dca504194918ecc0a2fe549a4d8d4cca9e2d946491f90e7a4ae4004c12f0eb3641573c3ebdc2b2c51608d6861dd7a143b36a6ebc237ca80460050a39f6402cea2d9e22ba27ef59ae86b8365bc4fb7286a34febdebbb7960346ac78549b77b5d828cb6731b7065956530b488ec59c6181a6eeaf2b64f6f1be35a7b11498b9950248affd379fddce489f96fdbeed3838a616800e7dc31c1592d7760a9643c6dcf195ed0b1092accac7597f088a7495cbb9baaa8b786b6f6e2f0791c5ae2ed6e54a47e49bed986fe4f09bdf0620b6d2b1968cc71d732f470fef4c29fdd106d3e456a53b104c3e16e1ce512885342f74ee9390633c39026cf20f6e6125dff27b78d4d5057e9fcc2168732ee53744a38bb5bccdd5e40c846eaae97508da077ca88adee6a1752cddb600ae257054a87317da6352ea18fef0d97ac2c7311fc0917b1086f03ec63cadbaa49e58a23845dd134d419a4f9905dfbb8b111bbbf28a485e3f43f9fea4934266304b7451f54b2110b3488ab09ccf76d290323e1f8a55d098c70a0489934c9e3edbb874da666b04e2335c0d5692eb3a862b74cd1e856539acc2432b29eb792f8a52b44aabe44646c8afe30a2431be20b68323250825804796c98936b4c6bc8f86dadac011bf1157a9c195e67ef6e571d8f4465b049f860d5b3a13851cfd9f3bf0c2de3d8f3e361a0587acd6bdc4f2f4184f53308eaeea10812b14d6c1396144466e92c13bcc1b0f145b889b00110ae004dbc56ad5a7dcb69e74db5030b91cf60fbe1f02c8e18f68289b7c60a4a91e4c1fecbd72334e4ac06554524e3f8e40a9970859d817c2ec53adc69f4ec496ce597532341a1389efafd8cc29e79e69e31dcc7b2d106f5540189429dd718e63368c51e07a2f759d083c0c47f5a0c6ef5a912998a73b14a6a82c72dc7a747345b6c946433cbe7e135dac30cc61fb2f10bada9434b12c037a4961ab3265931707a630c68e9860c2007fbdfca0d8af7256e8c57a0dd72f6e97ea1da8177077e5e02ab281450f82712557caecac0a45e4b695c33f2194dc58c38dbe45015193949ac1bc50839955472681fcf7f61d9ae2ce569fbfe0a9d33819237fdc3be6be6139a5d1b275752487e9fbf1f55ea26c36eda979c4f576a471f55eaf683401a36ea4e86405ff0a49009ae8634d7e40b771f1e7342dee3ee6f8677dbeaff8e4b58a7890ac9ba677bbfef7b568cb819ba5cd6362efc1e8611a51582d7b649499ffcbabed51c7b5f135ea77d2e9a2730f7ee6ba40ed8c0006eb841d101f16709ae0b9c5e0330beb60d95bd538233cf8cdb93aaff3716de59bdff6c4f170fa7166b19535f07566a64f6d1f8dc2a8a0ef2c6437aa4a0d601102e9550e219071452b894b41ccbb55ad4bf7b9c36783e5b21bf90a327e688e39b9e9e9dd2939fe49b960d8cff11beeb3eeb261befc3981892c7a7f0dc94b0e05ce45398e6c4aacda0141cba0ef0d23e206b1f8b960b94865719b841dc92cab8d3686e39841a4b28b4521621c5e826e0a507b44f703b9ea7bba1da00ddfd926e33c9a8737b5edeafa54fe7b64e50084801ecd94e277ffeac3cfa6eeecbdd61a2e68b2881907c9c3531d9cb6d74467cb875336c12e0fcbf040e4cab8e8a1fc10e7b7ba177adffa841ed3b327040660da4a723939cfde767368beda6ef96e773c65c4779b4828e5eadb479150090869a4a2ffaf69e674c93d2359051a7852bcf193b6bfc360a657d17e60bbc76d379ceddb4077875e4a2ed867e5f278a6d2f553fce9609e61efd95f60278e3fc1fbc5accaf738fd468a5a056045e97192aa8550a0e0f22dab20a86ce61c4382263e8fd9a7659145b84c69eb848a7397b466691afa117448e2d709d0b8dd567bafd04a71bb0fa8ac3a632e51bdd129d7f7df9da302e6a93ed1b648bb3b0f4eb761ca305dc03883c10933ace4079437ccd203a5e02d5457e6b761543ad18230e093bd704c9052ef9c830afc2866bf54896051085c412bc52c20de7700f1e3526ea14ca7fb1a30b854ffdd2c79c5d644a50e39344f18306aa0b78e8d6e581d4953fea60a1db321c26f51b0f467868014f5b2f9c95205bd51079662d95dd62224b108ca1a71e2c9a036954948cae0fc4675085ac39cf4c7c495987d619e73479fb758dadee1b3d64435d6852bd22c19623d323369aa48aaeefdefb784cc6c12da1e6107102ba00dff80f054c197994b53eecc339fa0dc91bb9f6649beae160dd5b46370bb1765f1cb38b065bcbbebb2e889fa185f842ba4f886d67362770b1da9f9c813ce5092b548683a0a37d1e7b58e5b81add8352c0572122d54df87e54960d8bbdf2787e7df4c114770a9b9ab6c064ea9bf69fd82173687dd28bd876d872271e7e3c013adbc6fbc30d9c8f3ba0e84604e7b738a38b5b8ef09ecc826cec351a88a0fbdb46de5c44d18b678503efe0c3510d5c1398565a9db761a7448852237ec3919c451a53c7f801661521942a0db0d5304da01299ce01a1590ce669d94244b7c69340e0f2d0094730ef1ca5c4db59926d01644a52b728c5ebc6f071abd696b469cd70ca9f713d572b8f4a825722c53711df8a4e15fd1602647253ff75412c12569217ae1531819ea9422259308867c8759c4b800c58f2c278ac51ce37af1aa85bfc42a7b64a23e103079c2bdf58e3ba34d636e3085e2f489e3771eee2b38b59a1186809bbd4b2b5e963f641158e0153e25f921995b272fe85041629702e7b61ff331240c2ac370eb0b797a58975f19508486c2fa57fa41737894040208c6e62a7ed933c3bb76c123b6d1cfbb058f24ac2fefeb09c4cc7cae6df049d26edea0f38021528c75022ce57342da08d9ab983e4276057c6a699f5e8e6243fd950e7d59fa00f532e2f1e0f8420a933ce2393385b0b84d3e7aceb722007d49e7a5a1b43f30edc966679bc33c5323f5882eb31c6410eedcc9fafea9374b16cacb4a24351d8b8fdb6d829567aa6f12063c3eca1a1be9061541a6e9b0964b32956d33c0df56663a788e44fb66b2535df13645b824ddef690cd46a6291f595fce6d59814f043b479037c3005d2484a7a1069411a05e939b16311565cb1741d455671e70c4485fa3c5e136494d894a40c2c147f8be1ce7e775cc904b09ae44d8384970290282c1fd5197842c0354caa4a7cba9164479303b4053936cea416023db6191bdd4b03d3b7d6ca55d613ec58279bb6d9bd875f5c7ea469c2fcdf54a2fbb0622a4a927bfe5523c2ec27997827811c5281f55df9cc8538abead1fbcdc068d8568e8bc4424365253202c7e76d9a51bb48f4dbb289016a732f0f4211ddb09ba818bf1bec3628619319497a150b8a65586aa757773af88db9784e9dabf778d5b09b608a468350f71543423a5cbf88158fe223cce6af6dabdfa400d15a22225a77afa0b0fec0b4fb1304e73fd44aea3e215902eb850e3c585a624e902c1a6e8972657b023f6e0ab493b7297047469643d95ff763949d4ab33d24a391bb625ac1efa7062911a192a8f3c06b43c1ca5d10417a263e3475908e069e5a374918c3c938a8f246fe581a834fc284612d3b55674e0ef9311c70fcf55032f284be632dbabe9e9d90dc7b91808acf2d33e7ebce1c5347c1449b1701c14f7abd2e9a120d2b8325186820dcd60049f421acf4b19e8f24dee6b237f4322e6eeafe7f75545ee4242a2794ce32ab53f7e8313b2784208ba382c357592eac2edefe82e8d9a36dcd63ed7925b0723aeec09b692f95ee010b1292d5930ff73c9d359011f95c5d3cd1fd3584d80c179c3611473fc40dad4518e2a662bd150eaf90c50e0391762061b40a6b7d3709119d18c6dcf8b53a9b2d74c5b130961e297420f539a0da0792792cb00c1fd6bafad8c24181200a430fbf4bf7355f2a06000a9f7c5d23fd3857c644e5d98e1681e8ee930b36a42d809393d4337ac2f72f380a7d94a61f36d54a80acd8361b3eb716ad5b09b5c6cb1963705acf3e2a7f5e5af3ed4a8f80c717356f52b456d7e970baed1b39923af27a455d8ae6148a5ffb2390d8397fc3c6c2f7ee54a840bc31b60bac09f9c4c0126bce7bfa9afee7aff42bb14fbcb9e51190ca7fd1edcdcc56d25784cff1cb251b6100248a1fe5e3d61e7df77399aa6d64fc5557da61a11e99d6525c61d03857f967f7aff81af11036610d811066208950a2be49ee30a2c14ff33d6f42aa0e89189c0086b91fb1c2f571029f57901579a4acb371dd0f263c761a6f208a643774fd9a8fa8080fd4d8058527a6b86742527b2c656937fb97e55debbafc1da4649df7472295e89de7c51324be4149f659c7d148ee1d063aaf7d02653aec9d34be17667c6c8d590bcf9ab0dc01c9ea80ad46822d73245f02d6673b20f102e7aeb5d241917545b0cdda940c5f0149f3b994c9830b3e0e9632d85b89b816a7e09abde0f001185e3d63a271d8a2b201fd3beb487f7599893a98388ec32b85ac3b1ee9eccdfd5ee7d318ae11686ed418d34aaef9c02e6e2ca8b0384d03b2f17d4168bb5762159ae47bb84854568e0881ca4ccfb7cd4dc5dcd4224185df690d6078f9975cb1d5c249ec71f3fa1b7ea06c4d412cf662bc0acee9a798d67367acf05ff2f9440e92aebe8370e4ba4c6e560d561a7531d05bd761a53d93ace41c225eb7ffa6076028727d4cdd5e54fa6c9a4bc12ca7f51418a9d79f531a1ece25c2d60826ef0e026c7662e3b86a459c2bda5be2d7d5991ef9f5983d652aa654abb4c40b6ca0b78991edbf1c9461016e3c2b917f45d1b30b9958b92a895bf116f54e95542a5ec249179f124210f5d08ac1c2943c87baf3b63a82c437737fe028ee4f0e0bb202b662e2e6f45978c2b8ec1e1e73f6cb9eb104026cb19b2af09882235bef526584a173068bf812bd3a98492743c9b6c02b811a5904ef8dbb74790a613a117a8f0de1239bc9bf76d20af0790b1a5c1c32dea9ed7b559437ba3d4acd7302705d1867485863e195eece8b6ff5f05f1f890a5f5e4063e9881f258f7e909fcab8de8f726e99c70acf7b974ec90df19e32c5d889f7a91f7261adef9fad4838dbddf5d0b5c092159e63f651160f90d1c419671da093bab5de537209f4e15f0c4c64bf1a4bd233aea1fda7123e2f2b7c516d2b4ebf1be4effb25bbb47abfed29384935e3e2c9fb2e2f4056114e6e15d536978badf22f0a3834a64cf18ef735c5ae60c9fb9e207023c7dbcf060d2fbc2ab7398eb9f885e4d60745f62fe0fed8dd200622ac9de04279471c7e76befcf7846c4fa9e62f08adb115212beb18c4505fcf246474a11b8332b84152302d4c1bbc63384d66d88d57bd250458af60cd1cffb7567b061faba64b6229ace6cca6b8a18bd5ba0c112776c6908945261b8f22e66da0884461c173db4864416879e50d99209505ad473fbc5ea4def2bd1d2d321b52172c5d343acc6c695fd2a1e9ba2ce8a5291e22c6187c9de3880a8f2889773cc1240b6062ae26697462c457c4404fb619a37f354b1b2d0b0f473b3bbe224c4edb086cd2551f44566d47021909752b8775f975dcd8f6e1a405cf9371301d94d7ab3fbe7bbbf59b809b175eb7362a22102090379e94bd1a65bc0541f9ad62da71efc3a52e718216d29524da58314f3a046f9f4bf35fa87a9b3371a6d967d5f24619c17a07a8781f4dc4573220bba38513f40bab1e68575505f6efb5d211553b6acb6fea501c3a6f3db27e7c1a674deb3a72ae211ab824ad12fdfe539d7e4fc91491dd3b3fae852d02bfa24780bf65b766b02461b3c67b1b78cbd620b5e1834647ab9b24128f6bdb861e1ab1fcae97394c786f4a0a0621b62200a01910ebb62d2e580341866b1e7b5e32d25695fe1d7ad65c4b2e6bbfa3120ff1948753d655e0196ef732f1a4e4e338db8bdf8a04cc14eb81a0e0f6c9fe3fb6b71b36a1c751ae07656bc92a9c6a0b8007fb20aa81c0ee58f0135d5e0e76ab7ad40d21539896366f75e0aa8370c86bbc6363177f29d8df2bde1a116449557211f750d855171e78724da4832ebd5ad6a9db8983f4487caa28dea46e6c36b2b154f31148c017f1683374bd064a3fd87b1de0c6f6c301cd80f2a45928e3d501117783a8ad5d19402b0c41945abefbfa9df42f7b74129a76d336633bc46a475b374223eb8e5f440fc5868a149902cf49aed4ba1e074d02fd40aa80f901fc9fe628008a76ca11caca96f0a2f3756ab5ad6d194bad87e6b6a458b904130f53aee1e50be878f972252004e877e490902d337e5b7432fc0138e3ee00af73a57a3160438717cd49fcb836e76603adfd1530966aa81589bc205bf33a5330848d90421907ef08118a4833f8fcaf7cfc73bf0d34e01fdc9965e594e74c5012f415f59e9ed37b039f9fd6a27627ba334bed66848eabdf59fa6ae1cb42a5ed6cc2805b249ffedc786ffbb312dc5456689c202a62d2334c6b52c87eeb3a0189c4ab5c9b08593e372321bfa326db3f6fb54a879966ecd4a69b5e00deac54449aac8c88ba667595d066d555dbe78cbdecf7dd436ce367a8fb9a560b4902ca23b9923632015a254ea4c470f018a33d670b196a4a1e370f24da7e0791325fb605099fc40e2d8e63bf6a179f4a063580b8ea973f52bed8dce4a5ae2ff9b8d7dc87b40cd898560c49ab4a3295e8dd857f2b9a9bd38634e50ce762a2c8c9f793f1835fd54db70437e7b86b492f9aa8d689229357720af9afbe773ac15fa78966aecf59fbab6833622044d2b463ed3b3a7401bb4845e5bada82d7ae06e229a3a2b661a85b1441b665c44463fb909b3233794a0b5836ed1dc6301f06d899197c7400354569c5fb2ea10d4c08598da5601522a976696e2ecd637315a19b3ba0e97c05071d8ac7aed1eed8fecbf774b317fc24c6923e2fba45153d1e715aeaca9d5891b59b91664a791f94bb9b0de217233a6bfe9777998171dad5422f6bbb33f1e624300c64414e1f1f4887a8832c64ab728ac2469df9820a282b58efe68cb1e57d08b61b255ba99a190f1f07903c8e3ec89d6211c8a5db67a0ba1e656839e3eadac62aab949cd0251b0e0d71d96dda94c229e126534bb76db1a4010418d115504c2e4226a767c5b8da95ca5fb3bad2ccaa6a96463d8b3b9566e17bb905b064261e2974b02eedbf161a1e0aee7c4fdfe1da891d64565929724dd06d5aedb8b0f7266ecd7a8fe6c73037ce1f281762e14d7571b0b242dd850863812d29a2be7239486273bc6a7f64cd6b37ee19413a11435fa4c03a69772d335f9ab857c662557f5aa2123354bf8bdfe5131997e1569edc7aade81e38b191ac4c53e027edd561025d3cf4c343d33489cb180c66502b5f59cd2593e656ecdbb40cf4ef2206830b10ffb7256fd326b4e97fbefcbec53c6798723af5aef968c78c02c20bb95d9c869109eb56f448fba7358cee5fe2d55852862842d14415debb083540e98c786a9f394ac83280ea617945d0710f18a363d74bd00518d965fa259e94be3b788eac72aaa9311ea21ed5e147df112bae4eed8eeaa649c41084b422a5230281adb7464772d25ee9f2b20d5e605a063bb78a87608680480224ec99df76eeae08e087bfec48fb44caab5daa10e728a853e18c8ffaadad491dbb0150393f5043e6f5fb6addb3f9c14c1c4fab2e93f8a4feb3e8619489f8a4ad6b6a42dd510f0519f130fad212ddb0f251e333e032b9995b39b49336762507b35e3172a098fde0baa7a1f114dc5fd4431dad05bdc98c0ac0e797ba9b0835c649639f8e6cc9279e3057a98fdac02a28d5861443e2e720bd5e189b74bfc0fc0883cd8ec96d810bcf1dca9e094a39aa584e368663fedb50bde86db9dd1511c40d0ed07a6d6ca2712861f6a55549545386203e340f943eaeb4c6ccb51deb3b470b43e748fa3d8101fd7793e831d869b0d0f558ad54da3eb430735a1a91da099cb4843c3e6a7b0f055b0a5388a0d8adb5c36ea98bb152ba0cb90ebb9b5a8c97b2918b0837984076c9a4615991f1b618d622f94ca9c166545e5b316344db4bb73d1625a375781e7b6365feeb6b9859bbf8c51f3d523172141f2e2d3154124848838e62342f683b44b4e7c2fef827cd7fd999c41edd95400cd0ecf9fbe1b33474801f0fad95db381c6445628649ec39f6ab48f99e232a6d51dd403611ad476c546d13460e38a5ef2f3a00e44ceefc771dfdf0cbc6a0c253389a17356ef5fd63175e3e3ea52361180acf40e0eff1c4ee15c9e97ce2f62e56eb606ee726320cedbb8e48341aa6fc9b9600b96d24683caef4269d008be2f02fc97060e04dec3ab800ab82140a36685d107f9dbdecc4bacb24d1cf346f9eb7b04c811474aeb75feba8b2ce9cd4a3b050e77947329d680e0435c8d034aadd19df1f88f552af461fdb5c629a337d00cc668a56df09e8a98c4d1e162709d8b1d3d878819e1c8973cc1fda03faea0bd732a861c3280fb5f1415a448d4e3abfdf3f5064ec08c84f8ef3d47ac8f654c56e17d5914fb6e1f566bf672e35cd3c5e58c36e31c162f84ae7de76329b59b364e0017c7d56f732660c80594a045f64294118d8a9c8963a99df25739d25b04ffc39415a501854bfd7600adac2eba25cecaae12ba5158f2777a98ccd24db124d1c7163f87d8a91c60000000000000000495d89e4bc545ed2089928fdaafcaa6b8e544f713a988e2b7e5636736259fab99a6e3443adcd670a76cadacc8f31e0a0afdc0a592175e20b190300b33e2fd30cd1e338eefe9b4014e7bb53494b410bb77da41b9be11c00893be01f888c2d57f3e1d2db0a1abbca39247a8396ead29a6447422ce3", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x40000000000000, 0x0, 0x4, 0x0, 0x7572, {0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0xffffffff, 0x6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x3, 0x4, 0x200001, 0x0, 0x0, 0x10001, {0x0, 0x3, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0xffffffffffffffff, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m21.56865962s ago: executing program 1 (id=4285): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 5m19.599628732s ago: executing program 1 (id=4291): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) 5m18.753819848s ago: executing program 1 (id=4296): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) 5m16.102589895s ago: executing program 1 (id=4302): unshare(0x6a020200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff2dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c912020041190300280012800b000100697036746e6c000018000280140002000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x448c0}, 0x4c054) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4048880, &(0x7f0000000080)={0xa, 0x4e23, 0xfffff6a7, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @private1, 0x80004}, 0x1c) write(r1, 0x0, 0x0) 5m0.479087739s ago: executing program 42 (id=4302): unshare(0x6a020200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff2dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c912020041190300280012800b000100697036746e6c000018000280140002000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x448c0}, 0x4c054) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4048880, &(0x7f0000000080)={0xa, 0x4e23, 0xfffff6a7, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @private1, 0x80004}, 0x1c) write(r1, 0x0, 0x0) 2m23.374706558s ago: executing program 4 (id=4776): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x2c02) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe(&(0x7f0000000440)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) inotify_init() socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 2m21.0082785s ago: executing program 4 (id=4784): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x6, 0x5, 0x2c0, 0x1, 0xfff, '\x00', 0x0, r0, 0x3e, 0x2, 0x4, 0xc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) 2m16.856800458s ago: executing program 4 (id=4788): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2m14.5663181s ago: executing program 0 (id=4795): syz_emit_vhci(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) personality(0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 2m13.06424004s ago: executing program 0 (id=4798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x880) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140), 0x8) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 2m13.063988991s ago: executing program 2 (id=4799): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m11.218286699s ago: executing program 2 (id=4804): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f00000001c0), 0x0}) 2m10.909234532s ago: executing program 0 (id=4805): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) fanotify_init(0x0, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m10.780092054s ago: executing program 4 (id=4806): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 2m10.01085974s ago: executing program 4 (id=4808): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c880) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m9.958997892s ago: executing program 0 (id=4809): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e060525"], 0x9) 2m8.428337268s ago: executing program 4 (id=4811): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 2m7.700425718s ago: executing program 0 (id=4813): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x20, 0x258, 0x300, 0x320, 0x32, 0x1, 0x18, 0x0, {0x0, 0xfffffffd}, {0x0, 0xfeca, 0xffffffff}, {}, {0x0, 0x400000}, 0x0, 0x0, 0x3044, 0xfffffffd, 0x0, 0x7ff, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4}) 2m7.445310319s ago: executing program 2 (id=4814): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8954) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 2m5.424716936s ago: executing program 0 (id=4818): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2m5.158997718s ago: executing program 2 (id=4819): syz_emit_ethernet(0xfc0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 2m4.694336268s ago: executing program 2 (id=4822): r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x1) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd=r2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.260383807s ago: executing program 2 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r4, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m50.773425101s ago: executing program 43 (id=4811): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 1m49.739916895s ago: executing program 44 (id=4818): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1m46.72246455s ago: executing program 45 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r4, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 25.626712891s ago: executing program 6 (id=4942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10010}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x1c, r8, 0x1, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 17.984086491s ago: executing program 6 (id=4946): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 17.208048203s ago: executing program 6 (id=4950): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 12.928808582s ago: executing program 6 (id=4952): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(0xffffffffffffffff, 0xc008644e, &(0x7f0000000180)={0xa}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'vlan1\x00'}}, 0x1e) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b000100697076"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 10.013055151s ago: executing program 5 (id=4955): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 6.452559144s ago: executing program 6 (id=4956): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={0x0, 0x0}) 6.299068992s ago: executing program 5 (id=4957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.928176134s ago: executing program 8 (id=4958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x40}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) 5.764468799s ago: executing program 5 (id=4959): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x28141, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000001c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000000300)="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", 0xffc, 0xbac}) 5.635174492s ago: executing program 8 (id=4960): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f00000001c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) writev(r1, &(0x7f0000001580), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(0x0, 0x80000000, 0xd) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x80000000, 0x8002) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2a, &(0x7f0000000040)=0xce, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.47996061s ago: executing program 5 (id=4961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x1a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048004}, 0xc085) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0xc) 5.213003048s ago: executing program 8 (id=4962): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 5.029518111s ago: executing program 6 (id=4963): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0', 0xa) 4.884532437s ago: executing program 5 (id=4964): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c6c4be5b563a9330a8f66bbcfee882e27f71cf35a00cff3ee0fe7b8a395121bc353a7e2e32b001067150e1", @ANYRES32=r1], 0x9d) epoll_create1(0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) 4.799903357s ago: executing program 8 (id=4965): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) ioprio_get$pid(0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$USBDEVFS_REAPURB(r4, 0x4004550d, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.687294479s ago: executing program 5 (id=4966): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 369.104893ms ago: executing program 8 (id=4967): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0}) 0s ago: executing program 8 (id=4968): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xc, 0x2, [{0x0, 0x6, "00479c0f"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecf59de99 code=0x7ffc0000 [ 1491.020744][ T30] audit: type=1326 audit(1785773749.538:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19890 comm="syz.0.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecf59de99 code=0x7ffc0000 [ 1491.039384][T19491] netdevsim netdevsim6 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.128330][ T30] audit: type=1326 audit(1785773749.558:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19890 comm="syz.0.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0ecf59de99 code=0x7ffc0000 [ 1491.166444][ T30] audit: type=1326 audit(1785773749.558:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19890 comm="syz.0.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecf59de99 code=0x7ffc0000 [ 1491.404660][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.690425][T19491] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.926735][T19928] loop9: detected capacity change from 0 to 256 [ 1493.142621][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.747192][T19501] netdevsim netdevsim4 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.950961][T19950] warning: `syz.9.3593' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1494.129303][ T6119] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.245845][T19501] netdevsim netdevsim4 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.443652][T19558] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.569349][T19964] fuse: Bad value for 'fd' [ 1494.588618][T12235] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.711169][ T6119] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.922521][ T13] bridge_slave_1: left allmulticast mode [ 1495.013152][ T13] bridge_slave_1: left promiscuous mode [ 1495.030600][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.450812][ T13] bridge_slave_0: left allmulticast mode [ 1495.464186][ T13] bridge_slave_0: left promiscuous mode [ 1495.473272][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.918378][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 1495.986869][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 1496.695849][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.786626][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.839324][ T13] bond0 (unregistering): Released all slaves [ 1496.899372][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1497.149076][T19501] netdevsim netdevsim4 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.163421][T20006] comedi comedi4: bad chanlist[0]=0x00100003 chan=3 range length=2 [ 1497.495463][T19501] netdevsim netdevsim4 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.947024][ T4939] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1498.753128][T20035] fuse: Unknown parameter 'grou00000000000000000000' [ 1499.235386][ T13] hsr_slave_0: left promiscuous mode [ 1499.266594][ T13] hsr_slave_1: left promiscuous mode [ 1499.278378][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.287637][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.330543][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.350668][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.426321][ T13] veth1_macvtap: left promiscuous mode [ 1499.436999][ T13] veth0_macvtap: left promiscuous mode [ 1499.453242][ T13] veth1_vlan: left promiscuous mode [ 1499.467732][ T13] veth0_vlan: left promiscuous mode [ 1500.224482][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1500.247305][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1500.739446][T19491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1500.813636][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1500.847564][T19491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1500.908681][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1500.928855][T20068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.947711][T20069] fuse: Bad value for 'fd' [ 1500.973574][T20068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.986447][T19491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1501.043362][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1501.071823][T19491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1501.105157][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1501.238113][T20077] fuse: fd is not a fuse device [ 1501.486302][T20088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1501.533798][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1501.533870][ T30] audit: type=1107 audit(1785773760.618:235): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1íÅÖ[‹ÚPoÔ [ 1501.533870][ T30] È/v,ÂöLö9‡ÕÖ2û€ÔMeX€7xW•Ï¨ÛáÄ fXKSRUÓrÂjæ[j‘ט¢ëí\¯È©¹(,èñëÅ%òÑþ¯¾9¶0ú•.:± õãÀ´sϨöÈ-I¤!>g&Ñ"©ç/ëÓä\Y=L3º{!Òƒ‚2›Ô¦pjÈüë>ü; ’üÛºí/×ðٴᵎõÙµ]Êaÿ× ×'v- ›”<€$‘Ø%¿Q£Øî5µõýlç¢ë½ÖeFr‡=óœ’/¡a®ÌË# [ 1501.533870][ T30] Ð’ôš…h†‘0ÜV°ä¤Z”2“' [ 1501.799291][T20071] lo speed is unknown, defaulting to 1000 [ 1501.961215][ T4939] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1501.980565][ T4939] Bluetooth: hci2: Injecting HCI hardware error event [ 1502.004491][ T4939] Bluetooth: hci2: hardware error 0x00 [ 1502.737951][T20100] loop9: detected capacity change from 0 to 7 [ 1502.773426][T20100] Dev loop9: unable to read RDB block 7 [ 1502.790657][T20100] loop9: AHDI p1 p2 p3 [ 1502.808208][T20100] loop9: partition table partially beyond EOD, truncated [ 1502.850214][T20100] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1502.859980][T19501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1502.877401][T20100] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1502.953295][T19501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1503.219257][T19501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1503.285389][T19501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1503.317887][T19501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1503.355995][T19501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1503.430878][T19501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1503.468579][T19501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1503.933477][T19491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.139118][T19491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.241946][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.249166][T10208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.339352][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.346594][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.505706][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1504.518809][T20096] loop0: detected capacity change from 0 to 32768 [ 1504.668089][T20132] fuse: Bad value for 'fd' [ 1504.760110][T20096] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1504.877060][T19501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.988272][T20096] XFS (loop0): Ending clean mount [ 1505.000452][ T4939] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1505.027521][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1505.062656][ T30] audit: type=1107 audit(1785773764.188:236): pid=20138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1íÅÖ[‹ÚPoÔ [ 1505.062656][ T30] È/v,ÂöLö9‡ÕÖ2û€ÔMeX€7xW•Ï¨ÛáÄ fXKSRUÓrÂjæ[j‘ט¢ëí\¯È©¹(,èñëÅ%òÑþ¯¾9¶0ú•.:± õãÀ´sϨöÈ-I¤!>g&Ñ"©ç/ëÓä\Y=L3º{!Òƒ‚2›Ô¦pjÈüë>ü; ’üÛºí/×ðٴᵎõÙµ]Êaÿ× ×'v- ›”<€$‘Ø%¿Q£Øî5µõýlç¢ë½ÖeFr‡=óœ’/¡a®ÌË# [ 1505.062656][ T30] Ð’ôš…h†‘0ÜV°ä¤Z”2“' [ 1505.143315][T20146] fuse: Unknown parameter 'group_i00000000000000000000' [ 1505.206415][T19501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.242748][T20096] XFS (loop0): Quotacheck needed: Please wait. [ 1505.280298][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.287510][ T3290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.146559][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.153799][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.052276][T20096] XFS (loop0): Quotacheck: Done. [ 1508.146047][T17857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1510.483058][T20190] fuse: Bad value for 'fd' [ 1510.858545][T20203] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3659'. [ 1510.892238][T20204] fuse: fd is not a fuse device [ 1510.900433][ T30] audit: type=1107 audit(1785773770.018:237): pid=20195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1íÅÖ[‹ÚPoÔ [ 1510.900433][ T30] È/v,ÂöLö9‡ÕÖ2û€ÔMeX€7xW•Ï¨ÛáÄ fXKSRUÓrÂjæ[j‘ט¢ëí\¯È©¹(,èñëÅ%òÑþ¯¾9¶0ú•.:± õãÀ´sϨöÈ-I¤!>g&Ñ"©ç/ëÓä\Y=L3º{!Òƒ‚2›Ô¦pjÈüë>ü; ’üÛºí/×ðٴᵎõÙµ]Êaÿ× ×'v- ›”<€$‘Ø%¿Q£Øî5µõýlç¢ë½ÖeFr‡=óœ’/¡a®ÌË# [ 1510.900433][ T30] Ð’ôš…h†‘0ÜV°ä¤Z”2“' [ 1511.576111][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1514.707606][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.781836][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.966279][T19491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.207733][T20231] lo speed is unknown, defaulting to 1000 [ 1515.389073][T19501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.944473][T20254] fuse: Invalid rootmode [ 1515.958289][T20243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1516.064501][T20256] fuse: fd is not a fuse device [ 1517.728298][T19491] veth0_vlan: entered promiscuous mode [ 1517.877459][T19491] veth1_vlan: entered promiscuous mode [ 1518.161885][T19491] veth0_macvtap: entered promiscuous mode [ 1518.226938][T19491] veth1_macvtap: entered promiscuous mode [ 1518.388904][T19491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.437216][T19491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.520962][ T47] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.544876][ T47] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.585102][ T47] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.606072][ T47] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.734916][T20303] fuse: fd is not a fuse device [ 1518.768648][T19501] veth0_vlan: entered promiscuous mode [ 1518.937023][T19501] veth1_vlan: entered promiscuous mode [ 1519.280974][T20310] fuse: fd is not a fuse device [ 1520.414348][T19501] veth0_macvtap: entered promiscuous mode [ 1520.466094][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.495873][T19501] veth1_macvtap: entered promiscuous mode [ 1520.517490][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.774097][T10208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.825819][T19501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.835231][T10208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.950480][T19501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.087887][T10208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.166190][T10208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.228240][T10208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.348165][T10208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.058058][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.236061][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.629067][T20360] fuse: Unknown parameter 'group_id00000000000000000000' [ 1523.172148][T20356] loop6: detected capacity change from 0 to 1764 [ 1523.351640][T20356] syz.6.3694: attempt to access beyond end of device [ 1523.351640][T20356] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1523.366439][T20356] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1523.444782][T20356] syz.6.3694: attempt to access beyond end of device [ 1523.444782][T20356] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1523.460290][T20356] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1523.758646][ T30] audit: type=1800 audit(1785773782.598:238): pid=20356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3694" name="file0" dev="loop6" ino=1923 res=0 errno=0 [ 1526.266326][ T9343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.274523][ T9343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.733292][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1526.749612][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1526.765201][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1526.780552][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1526.792177][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1527.108864][T20383] lo speed is unknown, defaulting to 1000 [ 1527.189750][T20374] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3700'. [ 1528.840812][ T5638] Bluetooth: hci4: command tx timeout [ 1529.490455][T18715] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1529.662806][T18715] usb 10-1: Using ep0 maxpacket: 8 [ 1529.687838][T18715] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1529.751157][T18715] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1529.815810][T18715] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1529.872142][T18715] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.940515][T18715] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1529.997522][T18715] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.504186][T18715] usb 10-1: GET_CAPABILITIES returned 0 [ 1530.629529][T18715] usbtmc 10-1:16.0: can't read capabilities [ 1530.846251][ T30] audit: type=1326 audit(1785773789.968:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20440 comm="syz.8.3714" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc34479de99 code=0x0 [ 1530.902621][T18715] usb 10-1: USB disconnect, device number 32 [ 1530.923450][ T5638] Bluetooth: hci4: command tx timeout [ 1531.127019][T12229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.185984][T20445] loop6: detected capacity change from 0 to 256 [ 1531.226310][T20445] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1531.284363][T20376] lo speed is unknown, defaulting to 1000 [ 1531.359709][ T30] audit: type=1800 audit(1785773790.478:240): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3715" name="file1" dev="loop6" ino=1048814 res=0 errno=0 [ 1531.454763][T12229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.591397][T20456] fuse: fd is not a fuse device [ 1532.178765][T12229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.382248][T20482] fuse: Bad value for 'rootmode' [ 1532.505790][T20484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3723'. [ 1532.627258][T20458] lo speed is unknown, defaulting to 1000 [ 1532.708476][T12229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.821145][T20490] binder: 20488:20490 ioctl c0306201 200000000080 returned -14 [ 1532.879623][T20490] binder: 20488:20490 ioctl c0306201 2000000003c0 returned -14 [ 1533.007436][ T5638] Bluetooth: hci4: command tx timeout [ 1535.122658][ T5638] Bluetooth: hci4: command tx timeout [ 1536.317738][T20510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.379889][T20510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.590191][T20519] fuse: fd is not a fuse device [ 1536.828865][ T57] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.961677][ T47] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.185585][ T12] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.261668][ T6119] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.432464][T12229] bridge_slave_1: left allmulticast mode [ 1537.464318][T12229] bridge_slave_1: left promiscuous mode [ 1537.513779][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.550921][T20541] fuse: Bad value for 'rootmode' [ 1537.588981][T12229] bridge_slave_0: left allmulticast mode [ 1537.860412][T12229] bridge_slave_0: left promiscuous mode [ 1537.868056][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.308912][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1539.798217][T20562] overlayfs: missing 'lowerdir' [ 1539.933280][T20564] overlayfs: failed to clone upperpath [ 1540.146653][T20560] loop9: detected capacity change from 0 to 1764 [ 1540.232643][T20560] syz.9.3740: attempt to access beyond end of device [ 1540.232643][T20560] loop9: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1540.247238][T20560] Buffer I/O error on dev loop9, logical block 1795162143, async page read [ 1540.412885][T20560] syz.9.3740: attempt to access beyond end of device [ 1540.412885][T20560] loop9: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1540.429727][T20560] Buffer I/O error on dev loop9, logical block 1795162143, async page read [ 1540.633327][ T30] audit: type=1800 audit(1785773799.568:241): pid=20560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3740" name="file0" dev="loop9" ino=1923 res=0 errno=0 [ 1543.785452][T20578] fuse: fd is not a fuse device [ 1544.334850][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.378971][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.381709][T20591] misc userio: No port type given on /dev/userio [ 1544.406222][T12229] bond0 (unregistering): Released all slaves [ 1545.006587][T20594] lo speed is unknown, defaulting to 1000 [ 1545.028570][T20606] fuse: fd is not a fuse device [ 1545.739662][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.784572][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.787877][T20618] loop0: detected capacity change from 0 to 32768 [ 1545.805209][T20376] bridge_slave_0: entered allmulticast mode [ 1545.808629][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.814461][T20376] bridge_slave_0: entered promiscuous mode [ 1545.832036][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.870804][T20618] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1545.930448][T12229] hsr_slave_0: left promiscuous mode [ 1546.027589][T20638] overlayfs: failed to clone lowerpath [ 1546.879861][T12229] hsr_slave_1: left promiscuous mode [ 1546.924166][T12229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.983262][T20618] XFS (loop0): Ending clean mount [ 1546.992397][T20618] XFS (loop0): Quotacheck needed: Please wait. [ 1547.009783][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.048771][T12229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1547.106533][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.266123][T20618] XFS (loop0): Quotacheck: Done. [ 1547.280848][T12229] veth1_macvtap: left promiscuous mode [ 1547.300052][T12229] veth0_macvtap: left promiscuous mode [ 1547.340466][T12229] veth1_vlan: left promiscuous mode [ 1547.370141][T12229] veth0_vlan: left promiscuous mode [ 1547.863470][ T30] audit: type=1800 audit(1785773806.988:242): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3754" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1548.905090][T12229] team0 (unregistering): Port device team_slave_1 removed [ 1549.007526][T12229] team0 (unregistering): Port device team_slave_0 removed [ 1549.643301][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.668314][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.696871][T20376] bridge_slave_1: entered allmulticast mode [ 1549.752246][T20376] bridge_slave_1: entered promiscuous mode [ 1550.123396][T20376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.197168][T20376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.365594][T17857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1550.439922][T20376] team0: Port device team_slave_0 added [ 1550.468629][T20376] team0: Port device team_slave_1 added [ 1550.697017][T20376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.726318][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.820194][T20376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.840559][T20376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.908269][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.924494][T20683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1550.990677][T20376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.246651][T20376] hsr_slave_0: entered promiscuous mode [ 1551.295995][T20376] hsr_slave_1: entered promiscuous mode [ 1551.327884][T20376] debugfs: 'hsr0' already exists in 'hsr' [ 1551.358779][T20376] Cannot create hsr debugfs directory [ 1551.618113][T20696] fuse: fd is not a fuse device [ 1552.992110][T20702] lo speed is unknown, defaulting to 1000 [ 1553.032584][ T4939] Bluetooth: hci0: command 0x0406 tx timeout [ 1555.254388][T20734] lo speed is unknown, defaulting to 1000 [ 1555.265365][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3777'. [ 1555.710566][T20746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1555.765097][ T30] audit: type=1107 audit(1785773814.858:243): pid=20741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1íÅÖ[‹ÚPoÔ [ 1555.765097][ T30] È/v,ÂöLö9‡ÕÖ2û€ÔMeX€7xW•Ï¨ÛáÄ fXKSRUÓrÂjæ[j‘ט¢ëí\¯È©¹(,èñëÅ%òÑþ¯¾9¶0ú•.:± õãÀ´sϨöÈ-I¤!>g&Ñ"©ç/ëÓä\Y=L3º{!Òƒ‚2›Ô¦pjÈüë>ü; ’üÛºí/×ðٴᵎõÙµ]Êaÿ× ×'v- ›”<€$‘Ø%¿Q£Øî5µõýlç¢ë½ÖeFr‡=óœ’/¡a®ÌË# [ 1555.765097][ T30] Ð’ôš…h†‘0ÜV°ä¤Z”2“' [ 1556.465639][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.474614][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.515244][T20376] netdevsim netdevsim4 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.852969][T20753] fuse: Bad value for 'fd' [ 1559.035587][T20376] netdevsim netdevsim4 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.086090][T20761] netlink: 'syz.6.3785': attribute type 1 has an invalid length. [ 1559.690155][T20376] netdevsim netdevsim4 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.891220][T20376] netdevsim netdevsim4 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.131857][T20785] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1561.295682][T20789] fuse: Unknown parameter 'user_i00000000000000000000' [ 1562.048194][T20802] afs: Bad value for 'source' [ 1562.083398][T20802] siw: device registration error -23 [ 1562.795996][T20805] fuse: Bad value for 'fd' [ 1563.205510][T20814] overlayfs: missing 'lowerdir' [ 1563.330815][T20821] overlayfs: failed to clone upperpath [ 1563.512713][T20376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1563.527040][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1563.535222][T20376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1564.274985][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1564.336051][T20376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1564.405576][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1564.465530][T20376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1564.682909][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1565.151293][T20851] fuse: Unknown parameter 'user_i00000000000000000000' [ 1565.380393][ T30] audit: type=1326 audit(1785773824.478:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.8.3786" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc34479de99 code=0x0 [ 1565.820959][T20861] netlink: 'syz.6.3810': attribute type 5 has an invalid length. [ 1565.946479][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3810'. [ 1566.309781][T20867] fuse: Unknown parameter '0x0000000000000003' [ 1566.321002][T20376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.517161][T20376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.587867][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.595106][T13142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.903899][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.911153][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.920752][T18715] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1567.931040][T20874] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3814'. [ 1568.227682][ T30] audit: type=1107 audit(1785773827.318:245): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1íÅÖ[‹ÚPoÔ [ 1568.227682][ T30] È/v,ÂöLö9‡ÕÖ2û€ÔMeX€7xW•Ï¨ÛáÄ fXKSRUÓrÂjæ[j‘ט¢ëí\¯È©¹(,èñëÅ%òÑþ¯¾9¶0ú•.:± õãÀ´sϨöÈ-I¤!>g&Ñ"©ç/ëÓä\Y=L3º{!Òƒ‚2›Ô¦pjÈüë>ü; ’üÛºí/×ðٴᵎõÙµ]Êaÿ× ×'v- ›”<€$‘Ø%¿Q£Øî5µõýlç¢ë½ÖeFr‡=óœ’/¡a®ÌË# [ 1568.227682][ T30] Ð’ôš…h†‘0ÜV°ä¤Z”2“' [ 1568.305218][T18715] usb 10-1: Using ep0 maxpacket: 8 [ 1568.456657][T18715] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1568.488888][T20879] overlayfs: missing 'lowerdir' [ 1568.520165][T18715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.575087][T18715] usb 10-1: Product: syz [ 1568.603654][T18715] usb 10-1: Manufacturer: syz [ 1568.632451][T18715] usb 10-1: SerialNumber: syz [ 1568.639395][T20881] overlayfs: failed to clone upperpath [ 1568.696816][T18715] usb 10-1: config 0 descriptor?? [ 1568.772728][T18715] usb 10-1: can't set config #0, error -71 [ 1568.805793][T18715] usb 10-1: USB disconnect, device number 33 [ 1569.450501][T20905] fuse: Unknown parameter 'user_i00000000000000000000' [ 1570.404387][T20914] overlayfs: failed to clone upperpath [ 1571.869252][T20924] CUSE: unknown device info "ÕNPv6˜àc¶,…£#S€yȬ(Ý8º"V @|øwï’2Ðì÷¿ÖwÉâpÏ;ž¸¨F‚Įƶًܾ$“± …Wþ•r'fø'vX6«r–6ÌÀmTˆ9#ˆiŸ—ù“7¨Ñ9pž õ;"Ú²°fŸ°bµÞ^ÖʳËå)‡*U" [ 1571.893647][T20924] CUSE: DEVNAME unspecified [ 1571.990922][T20932] fuse: Unknown parameter '0x0000000000000003' [ 1572.321099][T20939] fuse: fd is not a fuse device [ 1574.286057][T20954] overlayfs: failed to clone upperpath [ 1574.290051][T20376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.612202][T20960] fuse: Unknown parameter 'user_id00000000000000000000' [ 1578.613137][T20979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1578.690007][T20979] block device autoloading is deprecated and will be removed. [ 1578.787135][T20991] fuse: Unknown parameter '0x0000000000000003' [ 1580.137618][T20376] veth0_vlan: entered promiscuous mode [ 1580.247470][T20376] veth1_vlan: entered promiscuous mode [ 1580.518295][T20376] veth0_macvtap: entered promiscuous mode [ 1580.634301][T20376] veth1_macvtap: entered promiscuous mode [ 1580.798560][T20376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.879059][T20376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.894681][T21016] fuse: Unknown parameter 'user_id00000000000000000000' [ 1580.960774][T12233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.023151][T12233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.100204][T10208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.470130][T10208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.966514][T21038] afs: Bad value for 'source' [ 1581.999177][T21038] siw: device registration error -23 [ 1582.010652][T21037] fuse: Unknown parameter '0x0000000000000003' [ 1582.838884][T12234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.897899][T12234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.189972][T21053] overlayfs: failed to resolve './file0': -2 [ 1583.323866][T21056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.355219][T21056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.555516][T21062] fuse: Unknown parameter 'user_id00000000000000000000' [ 1583.841445][T12234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.892176][T12234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.052635][T21065] lo speed is unknown, defaulting to 1000 [ 1585.226055][T21083] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1585.267268][T21083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1585.281211][T21087] fuse: Unknown parameter '0x0000000000000003' [ 1587.588897][T21115] fuse: Bad value for 'fd' [ 1588.036763][T18074] libceph: connect (1)[c::]:6789 error -101 [ 1588.054480][T18074] libceph: mon0 (1)[c::]:6789 connect error [ 1588.074112][T21107] ceph: No mds server is up or the cluster is laggy [ 1588.089344][T18074] libceph: connect (1)[c::]:6789 error -101 [ 1588.132394][T18074] libceph: mon0 (1)[c::]:6789 connect error [ 1588.228971][T21122] loop4: detected capacity change from 0 to 256 [ 1588.305085][T21125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.327535][T21122] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1588.383692][T21125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.071095][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 1589.141113][ T30] audit: type=1800 audit(1785773847.270:246): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3881" name="file1" dev="loop4" ino=1048820 res=0 errno=0 [ 1589.561734][T21142] fuse: Unknown parameter '0x0000000000000003' [ 1592.741602][T21164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.749315][T21164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.758554][T21164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.764990][T21164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.772250][T21164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.778650][T21164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.785287][T21164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.791712][T21164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1592.798609][T21164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1592.805101][T21164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1593.072679][T21170] fuse: Bad value for 'fd' [ 1594.166115][T21196] fuse: Unknown parameter 'fd0x0000000000000003' [ 1596.102952][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 1596.143083][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 1596.393371][T21228] fuse: Bad value for 'fd' [ 1597.106971][T21244] fuse: Unknown parameter 'fd0x0000000000000003' [ 1600.064934][T21272] fuse: Unknown parameter '0x0000000000000004' [ 1600.373524][T21278] fuse: Unknown parameter 'use00000000000000000000' [ 1600.641695][T21289] fuse: fd is not a fuse device [ 1603.406889][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.529970][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.151934][T21302] fuse: fd is not a fuse device [ 1604.863074][T21332] loop9: detected capacity change from 0 to 256 [ 1604.912040][T21332] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1605.063567][ T30] audit: type=1800 audit(1785773863.190:247): pid=21332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3943" name="file1" dev="loop9" ino=1048821 res=0 errno=0 [ 1605.424373][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 1605.458362][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 1606.788425][T21354] loop6: detected capacity change from 0 to 1764 [ 1606.821682][T21354] syz.6.3948: attempt to access beyond end of device [ 1606.821682][T21354] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1606.836092][T21354] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1606.854439][T21354] syz.6.3948: attempt to access beyond end of device [ 1606.854439][T21354] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1606.868899][T21354] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1606.877968][ T30] audit: type=1800 audit(1785773865.000:248): pid=21354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3948" name="file0" dev="loop6" ino=1923 res=0 errno=0 [ 1607.204264][T21365] fuse: fd is not a fuse device [ 1607.253701][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.260782][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.408820][T21371] fuse: fd is not a fuse device [ 1611.012367][ T5284] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1614.465388][T21414] fuse: fd is not a fuse device [ 1614.717154][T21420] loop9: detected capacity change from 0 to 1764 [ 1614.737412][T21420] syz.9.3969: attempt to access beyond end of device [ 1614.737412][T21420] loop9: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1614.751899][T21420] Buffer I/O error on dev loop9, logical block 1795162143, async page read [ 1614.761964][T21420] syz.9.3969: attempt to access beyond end of device [ 1614.761964][T21420] loop9: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1614.778756][T21420] Buffer I/O error on dev loop9, logical block 1795162143, async page read [ 1614.787720][ T30] audit: type=1800 audit(1785773872.910:249): pid=21420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3969" name="file0" dev="loop9" ino=1923 res=0 errno=0 [ 1615.171480][ T5785] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1615.365588][ T5785] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1615.403131][ T5785] usb 5-1: config 0 has no interface number 0 [ 1615.432415][ T5785] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1615.490332][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.516721][ T5785] usb 5-1: Product: syz [ 1615.527877][ T5785] usb 5-1: Manufacturer: syz [ 1615.547936][ T5785] usb 5-1: SerialNumber: syz [ 1615.590975][ T5785] usb 5-1: config 0 descriptor?? [ 1615.624267][ T5785] usb 5-1: selecting invalid altsetting 1 [ 1615.671969][ T5785] dvb_ttusb_budget: ttusb_init_controller: error [ 1615.713906][ T5785] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1616.931600][ T5785] DVB: Unable to find symbol stv0299_attach() [ 1617.085886][ T5785] DVB: Unable to find symbol tda8083_attach() [ 1617.131077][ T5785] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1617.195277][ T5785] usb 5-1: USB disconnect, device number 21 [ 1617.306000][T20216] udevd[20216]: setting mode of /dev/dvb/adapter1/dvr0 to 020660 failed: No such file or directory [ 1617.386181][T20216] udevd[20216]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 1627.876119][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4011'. [ 1629.529800][T21612] netlink: 'syz.9.4018': attribute type 12 has an invalid length. [ 1629.579108][T21612] netlink: 'syz.9.4018': attribute type 29 has an invalid length. [ 1629.635873][T21612] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4018'. [ 1631.482654][T21644] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1631.765457][T21646] netlink: 'syz.9.4026': attribute type 10 has an invalid length. [ 1631.773938][T21646] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4026'. [ 1631.805997][T21646] bridge0: port 4(dummy0) entered blocking state [ 1631.826006][T21646] bridge0: port 4(dummy0) entered disabled state [ 1631.842180][T21646] dummy0: entered allmulticast mode [ 1631.900532][T21646] dummy0: entered promiscuous mode [ 1631.915302][T21646] bridge0: port 4(dummy0) entered blocking state [ 1631.922020][T21646] bridge0: port 4(dummy0) entered forwarding state [ 1634.997529][T21677] loop6: detected capacity change from 0 to 1764 [ 1635.106498][T21676] syz.6.4032: attempt to access beyond end of device [ 1635.106498][T21676] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1635.130302][T21676] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1635.243155][T21676] syz.6.4032: attempt to access beyond end of device [ 1635.243155][T21676] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1635.267918][T21676] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1635.342971][ T30] audit: type=1800 audit(1785773893.460:250): pid=21676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4032" name="file0" dev="loop6" ino=1923 res=0 errno=0 [ 1636.306283][T21715] netlink: 'syz.4.4043': attribute type 10 has an invalid length. [ 1636.380831][T21715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4043'. [ 1636.419192][T21715] bridge0: port 3(dummy0) entered blocking state [ 1636.501011][T21715] bridge0: port 3(dummy0) entered disabled state [ 1636.542918][T21715] dummy0: entered allmulticast mode [ 1636.574230][T21715] dummy0: entered promiscuous mode [ 1636.609007][T21715] bridge0: port 3(dummy0) entered blocking state [ 1636.615534][T21715] bridge0: port 3(dummy0) entered forwarding state [ 1638.551225][ T5284] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1639.643296][T21750] overlayfs: failed to clone upperpath [ 1643.315369][T21799] netlink: 'syz.9.4065': attribute type 10 has an invalid length. [ 1643.338411][ T5284] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1643.358353][T21799] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4065'. [ 1643.433596][T21802] overlayfs: failed to clone upperpath [ 1643.471044][T21804] fuse: Bad value for 'fd' [ 1644.964849][T21811] ceph: No mds server is up or the cluster is laggy [ 1646.330632][T21847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1647.436203][T21860] fuse: Bad value for 'fd' [ 1649.647069][T21868] overlayfs: failed to clone upperpath [ 1650.284369][ T4939] Bluetooth: hci4: command 0x0406 tx timeout [ 1650.726133][ T5284] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1650.794364][T21881] 9p: Bad value for 'rfdno' [ 1655.738466][T21939] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1655.745030][T21939] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1655.806091][T21939] vhci_hcd vhci_hcd.0: Device attached [ 1656.150573][T18074] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1656.576508][T21940] vhci_hcd: connection closed [ 1657.040621][T21308] vhci_hcd vhci_hcd.6: stop threads [ 1657.227303][T21308] vhci_hcd vhci_hcd.6: release socket [ 1657.234437][T21308] vhci_hcd vhci_hcd.6: disconnect device [ 1657.241501][T18074] usb 45-1: enqueue for inactive port 0 [ 1657.370519][T18074] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1661.093197][T21973] overlayfs: failed to clone upperpath [ 1665.211316][T22013] overlayfs: failed to clone upperpath [ 1665.272674][T22016] overlayfs: missing 'lowerdir' [ 1666.147478][T22030] pimreg: entered allmulticast mode [ 1666.160672][T22031] pimreg: left allmulticast mode [ 1666.574536][T22038] fuse: fd is not a fuse device [ 1667.465930][T22049] overlayfs: missing 'lowerdir' [ 1668.298490][T22051] could not allocate digest TFM handle xxhash64 [ 1668.745075][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.764085][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.064528][T22072] 9p: Bad value for 'rfdno' [ 1674.248247][T22107] overlayfs: failed to clone upperpath [ 1677.245939][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1678.599634][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1679.027188][T22151] loop6: detected capacity change from 0 to 1764 [ 1680.519735][T22151] syz.6.4160: attempt to access beyond end of device [ 1680.519735][T22151] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1680.534781][T22151] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1680.549844][T22151] syz.6.4160: attempt to access beyond end of device [ 1680.549844][T22151] loop6: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1680.578141][T22151] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 1680.795027][ T30] audit: type=1800 audit(1785773938.710:251): pid=22151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4160" name="file0" dev="loop6" ino=1923 res=0 errno=0 [ 1683.580944][T22172] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1685.472304][T22190] overlayfs: failed to clone upperpath [ 1685.516357][T22190] overlayfs: failed to clone upperpath [ 1685.943339][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1695.860673][T18714] libceph: connect (1)[c::]:6789 error -101 [ 1695.872220][T18714] libceph: mon0 (1)[c::]:6789 connect error [ 1695.888119][T22303] ceph: No mds server is up or the cluster is laggy [ 1698.150362][T22325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1702.969214][ T5638] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 1705.407244][T22388] fuse: fd is not a fuse device [ 1707.274144][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1707.576217][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4237'. [ 1708.156295][T22431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1708.170082][T22431] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1708.178676][T22431] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1708.193683][T22431] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1708.209541][T22431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1709.799170][T12819] bridge0: port 3(syz_tun) entered disabled state [ 1709.917087][T12819] syz_tun (unregistering): left allmulticast mode [ 1709.960901][T12819] syz_tun (unregistering): left promiscuous mode [ 1710.009889][T12819] bridge0: port 3(syz_tun) entered disabled state [ 1710.304542][T22431] Bluetooth: hci6: command tx timeout [ 1711.604866][T13142] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.156386][T13142] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.266784][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1712.520847][T22431] Bluetooth: hci6: command tx timeout [ 1712.730135][T13142] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.057203][T22428] lo speed is unknown, defaulting to 1000 [ 1713.332128][T13142] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.278476][ T180] netdevsim netdevsim9 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.393349][ T180] netdevsim netdevsim9 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.542182][ T6531] netdevsim netdevsim9 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.602539][T22431] Bluetooth: hci6: command tx timeout [ 1714.724626][T21309] netdevsim netdevsim9 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.291730][T13142] dummy0: left allmulticast mode [ 1715.343975][T13142] dummy0: left promiscuous mode [ 1715.369930][T13142] bridge0: port 4(dummy0) entered disabled state [ 1716.961653][T22431] Bluetooth: hci6: command tx timeout [ 1716.981172][T13142] bridge_slave_1: left allmulticast mode [ 1716.996960][T13142] bridge_slave_1: left promiscuous mode [ 1717.002913][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.118092][T13142] bridge_slave_0: left allmulticast mode [ 1717.202751][T13142] bridge_slave_0: left promiscuous mode [ 1717.452126][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.770813][T22568] overlayfs: missing 'lowerdir' [ 1718.379833][T22591] fuse: fd is not a fuse device [ 1720.562965][T13142] team0: Port device bridge1 removed [ 1720.632114][T13142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1721.375571][T13142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1721.397439][T13142] bond0 (unregistering): Released all slaves [ 1722.148056][T22616] capability: warning: `syz.1.4285' uses 32-bit capabilities (legacy support in use) [ 1722.404444][T22622] overlayfs: missing 'lowerdir' [ 1725.817943][T22428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.905447][T22428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.965315][T22428] bridge_slave_0: entered allmulticast mode [ 1726.009761][T22428] bridge_slave_0: entered promiscuous mode [ 1726.439862][T22662] loop6: detected capacity change from 0 to 32768 [ 1726.464756][T22662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4301 (22662) [ 1726.486215][T22662] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1726.496409][T22662] BTRFS info (device loop6): using sha256 checksum algorithm [ 1727.846306][T22662] BTRFS info (device loop6): enabling ssd optimizations [ 1727.853400][T22662] BTRFS info (device loop6): turning on sync discard [ 1727.860107][T22662] BTRFS info (device loop6): enabling free space tree [ 1727.866933][T22662] BTRFS info (device loop6): use zlib compression, level 3 [ 1727.882679][T22428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.899161][T22428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.935125][T22428] bridge_slave_1: entered allmulticast mode [ 1727.973428][T22428] bridge_slave_1: entered promiscuous mode [ 1728.885832][ T30] audit: type=1800 audit(1785773986.480:252): pid=22688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4301" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1729.518743][T19491] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1729.589266][T22428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.609731][T22696] overlayfs: missing 'lowerdir' [ 1729.658663][T22428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.123178][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.129556][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.199589][T13142] hsr_slave_0: left promiscuous mode [ 1730.669897][T13142] hsr_slave_1: left promiscuous mode [ 1730.740018][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1730.777788][T13142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.924086][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1730.959396][T13142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.046144][T13142] veth1_macvtap: left promiscuous mode [ 1731.066156][T13142] veth0_macvtap: left promiscuous mode [ 1731.102019][T13142] veth1_vlan: left promiscuous mode [ 1731.129318][T13142] veth0_vlan: left promiscuous mode [ 1737.064429][T22744] overlayfs: missing 'workdir' [ 1738.136917][T13142] team0 (unregistering): Port device team_slave_1 removed [ 1738.354545][T13142] team0 (unregistering): Port device team_slave_0 removed [ 1740.069366][ T5284] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1740.123733][T22428] team0: Port device team_slave_0 added [ 1740.174976][T22428] team0: Port device team_slave_1 added [ 1741.580707][T22431] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1741.604813][T22428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.632746][T22428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.708014][T22428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.086113][T22428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.144672][T22428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.922219][T22428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.082049][T22796] overlayfs: missing 'workdir' [ 1743.344766][T22798] netlink: 'syz.0.4335': attribute type 10 has an invalid length. [ 1743.352794][T22798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4335'. [ 1743.384146][T22428] hsr_slave_0: entered promiscuous mode [ 1743.442438][T22428] hsr_slave_1: entered promiscuous mode [ 1743.476709][T22428] debugfs: 'hsr0' already exists in 'hsr' [ 1743.509489][T22428] Cannot create hsr debugfs directory [ 1743.549841][T22798] bridge0: port 3(dummy0) entered blocking state [ 1743.556611][T22798] bridge0: port 3(dummy0) entered disabled state [ 1743.563747][T22798] dummy0: entered allmulticast mode [ 1743.571196][T22798] dummy0: entered promiscuous mode [ 1743.577043][T22798] bridge0: port 3(dummy0) entered blocking state [ 1743.583520][T22798] bridge0: port 3(dummy0) entered forwarding state [ 1743.613432][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1743.628710][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1743.640591][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1743.671686][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1743.682585][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1743.783523][T13142] IPVS: stop unused estimator thread 0... [ 1745.820575][T22431] Bluetooth: hci2: command tx timeout [ 1747.349584][T22428] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.528544][T22862] overlayfs: missing 'workdir' [ 1747.743730][T22428] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.880286][T22431] Bluetooth: hci2: command tx timeout [ 1748.076363][T10208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.483844][T22428] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.256839][T10208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.396036][T22428] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.709787][T10208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.822823][T22803] lo speed is unknown, defaulting to 1000 [ 1749.947865][T10208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.971208][T22431] Bluetooth: hci2: command tx timeout [ 1750.292791][T22905] overlayfs: failed to clone upperpath [ 1750.467295][T22907] Bluetooth: MGMT ver 1.23 [ 1750.476307][T22907] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1751.414688][ T57] netdevsim netdevsim1 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.630871][ T57] netdevsim netdevsim1 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.670591][T22428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1751.739165][T22428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1752.040389][T22431] Bluetooth: hci2: command tx timeout [ 1752.103939][T22428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1752.621938][T22428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1752.670824][T21304] netdevsim netdevsim1 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.461108][T22428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1753.509644][T22428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1753.544723][T22428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1753.553469][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4367'. [ 1753.628963][T22428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1753.676068][T21304] netdevsim netdevsim1 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.047949][T22962] overlayfs: failed to clone upperpath [ 1754.258708][T22956] loop6: detected capacity change from 0 to 32768 [ 1754.285147][T22956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4369 (22956) [ 1754.303830][T22956] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1754.314048][T22956] BTRFS info (device loop6): using sha256 checksum algorithm [ 1754.462855][T22956] BTRFS info (device loop6): enabling ssd optimizations [ 1754.469994][T22956] BTRFS info (device loop6): turning on sync discard [ 1754.476791][T22956] BTRFS info (device loop6): enabling free space tree [ 1754.483823][T22956] BTRFS info (device loop6): use zlib compression, level 3 [ 1755.171396][ T30] audit: type=1800 audit(1785774013.150:253): pid=22998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4369" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1756.569504][ T30] audit: type=1326 audit(1785774014.690:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.4377" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929959de99 code=0x7ffc0000 [ 1757.037056][T10208] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.130206][ T30] audit: type=1326 audit(1785774014.730:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.4377" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929959de99 code=0x7ffc0000 [ 1757.254111][T19491] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1757.336096][ T30] audit: type=1326 audit(1785774014.820:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.4377" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f929959de99 code=0x7ffc0000 [ 1757.533767][ T30] audit: type=1326 audit(1785774014.830:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.4377" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929959de99 code=0x7ffc0000 [ 1757.560580][ T30] audit: type=1326 audit(1785774014.850:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.4377" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929959de99 code=0x7ffc0000 [ 1757.699478][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1757.984263][T10208] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.465050][T23035] overlayfs: failed to clone upperpath [ 1759.137454][T21308] netdevsim netdevsim10 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.189015][T18074] libceph: connect (1)[c::]:6789 error -101 [ 1759.220463][T18074] libceph: mon0 (1)[c::]:6789 connect error [ 1759.256188][T22803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.277044][T23051] ceph: No mds server is up or the cluster is laggy [ 1759.307158][T22803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.318486][T18074] libceph: connect (1)[c::]:6789 error -101 [ 1759.384270][T22803] bridge_slave_0: entered allmulticast mode [ 1759.390589][T18074] libceph: mon0 (1)[c::]:6789 connect error [ 1759.413654][T22803] bridge_slave_0: entered promiscuous mode [ 1760.022381][T18074] libceph: connect (1)[c::]:6789 error -101 [ 1760.028565][T18074] libceph: mon0 (1)[c::]:6789 connect error [ 1760.056942][T22803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.102842][T22803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.150358][T22431] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 1760.168554][T22803] bridge_slave_1: entered allmulticast mode [ 1760.267534][T22803] bridge_slave_1: entered promiscuous mode [ 1760.408260][T21308] netdevsim netdevsim10 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.580089][T10208] bridge_slave_1: left promiscuous mode [ 1760.601025][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.907758][T10208] bridge_slave_0: left allmulticast mode [ 1760.925704][T10208] bridge_slave_0: left promiscuous mode [ 1760.946005][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.020720][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4391'. [ 1762.966920][T23094] overlayfs: failed to clone upperpath [ 1763.556716][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1763.575759][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.013688][T10208] bond0 (unregistering): Released all slaves [ 1764.036682][T10208] team0: Port device bond1 removed [ 1764.048354][T10208] bond1 (unregistering): Released all slaves [ 1764.266981][T22803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.926499][T22428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.017516][T22803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.144224][T23114] netlink: 'syz.4.4405': attribute type 10 has an invalid length. [ 1765.152900][T23114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4405'. [ 1765.452135][T22803] team0: Port device team_slave_0 added [ 1765.517328][T22803] team0: Port device team_slave_1 added [ 1765.708553][T22428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.762923][T23127] overlayfs: failed to clone upperpath [ 1765.889924][T22803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.910483][T22803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.980281][T22803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.014100][T22803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.103604][T22803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.748025][T22803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.106999][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.114236][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.558736][T23123] loop6: detected capacity change from 0 to 32768 [ 1767.642407][T23123] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4408 (23123) [ 1767.892703][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.899941][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.526835][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1768.549214][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1768.557350][T23123] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1768.575664][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1768.748610][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1768.781866][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1768.892406][T23123] BTRFS info (device loop6): using sha256 checksum algorithm [ 1769.295822][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1769.299183][T10208] hsr_slave_0: left promiscuous mode [ 1769.314932][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1769.315435][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1769.386914][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1769.454541][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1769.475191][T10208] hsr_slave_1: left promiscuous mode [ 1769.567627][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1769.605613][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1769.626532][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.643747][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.651619][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1769.652598][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1769.664545][T23123] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1769.675617][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.733830][T23123] BTRFS error (device loop6): open_ctree failed: -12 [ 1769.742921][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1770.167360][T10208] veth1_macvtap: left promiscuous mode [ 1770.173073][T10208] veth0_macvtap: left promiscuous mode [ 1770.179575][T10208] veth1_vlan: left promiscuous mode [ 1770.185065][T10208] veth0_vlan: left promiscuous mode [ 1771.173618][T22431] Bluetooth: hci1: command tx timeout [ 1771.872712][T23194] overlayfs: failed to clone upperpath [ 1772.622673][T10208] team0 (unregistering): Port device team_slave_1 removed [ 1773.250366][T22431] Bluetooth: hci1: command tx timeout [ 1774.899301][T22803] hsr_slave_0: entered promiscuous mode [ 1774.932881][T22803] hsr_slave_1: entered promiscuous mode [ 1774.952268][T22803] debugfs: 'hsr0' already exists in 'hsr' [ 1774.966777][T22803] Cannot create hsr debugfs directory [ 1775.320258][T22431] Bluetooth: hci1: command tx timeout [ 1777.414045][T22431] Bluetooth: hci1: command tx timeout [ 1777.552488][T10208] IPVS: stop unused estimator thread 0... [ 1778.823762][T23263] fuse: Bad value for 'fd' [ 1779.240043][T22803] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.845932][T23151] lo speed is unknown, defaulting to 1000 [ 1781.226650][T22803] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.024153][T22803] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.696360][T22803] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.931902][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.432840][T21308] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.264287][T23364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.361613][T21304] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.501121][T10208] bridge_slave_1: left allmulticast mode [ 1787.525820][T10208] bridge_slave_1: left promiscuous mode [ 1787.541498][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.578160][T10208] bridge_slave_0: left allmulticast mode [ 1787.595414][T10208] bridge_slave_0: left promiscuous mode [ 1787.614019][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.917721][T22431] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 1788.430092][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1788.474553][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.513093][T10208] bond0 (unregistering): Released all slaves [ 1789.662310][T23151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.995426][T23151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.035555][T23151] bridge_slave_0: entered allmulticast mode [ 1790.066937][T23151] bridge_slave_0: entered promiscuous mode [ 1790.111464][T21308] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.990452][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1791.000257][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1792.039742][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.048605][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.154149][T23151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.182108][T23151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.207191][T23151] bridge_slave_1: entered allmulticast mode [ 1792.244103][T23151] bridge_slave_1: entered promiscuous mode [ 1792.400713][T22803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1792.470721][T22803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1792.919960][T23151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.969013][T22803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1793.074094][T22803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.169415][T23151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.337154][T22803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1793.397090][T22803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1793.506183][T10208] hsr_slave_0: left promiscuous mode [ 1793.534192][T10208] hsr_slave_1: left promiscuous mode [ 1793.563369][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.601193][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.013546][T10208] team0 (unregistering): Port device team_slave_1 removed [ 1795.045267][T23458] overlayfs: failed to clone upperpath [ 1795.063220][T10208] team0 (unregistering): Port device team_slave_0 removed [ 1795.469577][T22803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1795.594077][T22803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1795.623844][T23151] team0: Port device team_slave_0 added [ 1795.662286][T23151] team0: Port device team_slave_1 added [ 1795.758222][T23472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1795.795488][T23151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.831062][T23472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1795.839292][T23151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.866737][T23151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1795.893991][T23151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1795.907119][T23151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.949407][T23151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.077322][T23478] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1796.090008][T18716] IPVS: starting estimator thread 0... [ 1796.260525][T23479] IPVS: using max 22 ests per chain, 52800 per kthread [ 1797.057335][T23151] hsr_slave_0: entered promiscuous mode [ 1797.072144][T23151] hsr_slave_1: entered promiscuous mode [ 1797.090323][T23151] debugfs: 'hsr0' already exists in 'hsr' [ 1797.112857][T23151] Cannot create hsr debugfs directory [ 1797.435111][T23497] fuse: Bad value for 'fd' [ 1797.865069][T22803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.984624][T23151] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.196810][T22803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.248048][T21308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.255274][T21308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.308218][T21308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.315446][T21308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.380120][T23151] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.650760][T23151] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.935758][T23151] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.150832][T23534] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4505'. [ 1799.452288][T23536] netlink: 'syz.4.4507': attribute type 10 has an invalid length. [ 1799.646786][T23536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4507'. [ 1801.201459][ T5284] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1801.258047][T22431] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 1801.354550][T23151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1801.373019][T23151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1801.383510][T23151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1801.396779][T23151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1801.552097][T23151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1801.576293][T23151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1801.603747][T23151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1801.627583][T23151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1804.857800][T23151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.986733][T23151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.082801][T21311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.090019][T21311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.227021][T21311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.234263][T21311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.378777][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1805.398462][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1805.418745][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1805.444014][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1805.476733][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1807.570417][T22431] Bluetooth: hci6: command tx timeout [ 1808.876469][T22431] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1809.404954][ T5284] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1809.650337][T22431] Bluetooth: hci6: command tx timeout [ 1811.208536][T23604] lo speed is unknown, defaulting to 1000 [ 1811.483144][T23151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.720487][T22431] Bluetooth: hci6: command tx timeout [ 1811.809963][T22431] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 1811.975283][T21307] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.025913][T21307] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.965410][ T6119] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.147135][ T1021] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.301955][ T180] bridge_slave_1: left allmulticast mode [ 1813.324695][ T180] bridge_slave_1: left promiscuous mode [ 1813.347634][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.651177][T22431] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1813.800240][T22431] Bluetooth: hci6: command tx timeout [ 1813.874520][ T180] bridge_slave_0: left allmulticast mode [ 1813.922090][ T180] bridge_slave_0: left promiscuous mode [ 1813.946888][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.688976][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.724839][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.755183][ T180] bond0 (unregistering): Released all slaves [ 1815.875240][ T5284] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1816.069773][T23151] veth0_vlan: entered promiscuous mode [ 1816.103501][T22431] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 1817.139659][ T180] hsr_slave_0: left promiscuous mode [ 1817.428616][ T180] hsr_slave_1: left promiscuous mode [ 1817.455060][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1817.487969][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1818.963022][T22431] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 1820.055711][ T180] team0 (unregistering): Port device team_slave_1 removed [ 1820.112574][ T180] team0 (unregistering): Port device team_slave_0 removed [ 1820.289614][T22431] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 1820.580933][T23151] veth1_vlan: entered promiscuous mode [ 1821.395258][T23151] veth0_macvtap: entered promiscuous mode [ 1821.618648][T23151] veth1_macvtap: entered promiscuous mode [ 1821.639985][T23816] syzkaller0: entered promiscuous mode [ 1821.662325][T23816] syzkaller0: entered allmulticast mode [ 1821.949920][T23151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1822.514640][T23604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.553334][T23604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.590958][T23604] bridge_slave_0: entered allmulticast mode [ 1822.643127][T23604] bridge_slave_0: entered promiscuous mode [ 1822.708771][T23604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.717226][T23604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.724804][T23604] bridge_slave_1: entered allmulticast mode [ 1822.733034][T23604] bridge_slave_1: entered promiscuous mode [ 1822.751990][T23151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.095169][T23604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1824.874633][ T1021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.921546][ T1021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.026290][T23604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1825.167740][ T1021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.205326][ T1021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.293953][T23604] team0: Port device team_slave_0 added [ 1825.326103][T23604] team0: Port device team_slave_1 added [ 1825.525627][T23604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1825.559862][T23604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.851151][T23604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1825.864941][T23604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1825.873725][T23604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.926518][T23604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.441812][T23604] hsr_slave_0: entered promiscuous mode [ 1827.177492][T23604] hsr_slave_1: entered promiscuous mode [ 1827.198169][T23604] debugfs: 'hsr0' already exists in 'hsr' [ 1827.238043][T23604] Cannot create hsr debugfs directory [ 1827.404280][T22431] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 1829.584640][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1829.604062][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1829.613781][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1829.639231][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1829.654046][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1830.294035][ T5284] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1830.827483][T23604] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.755042][ T5638] Bluetooth: hci2: command tx timeout [ 1831.975110][T23604] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.313183][T23932] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4595'. [ 1832.511526][ T3290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.704407][T23604] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.074290][ T3290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.800793][ T5638] Bluetooth: hci2: command tx timeout [ 1833.899495][T23891] lo speed is unknown, defaulting to 1000 [ 1833.956209][T23604] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.561413][ T3290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.484838][ T3290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.669364][ T5284] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1835.880607][ T5638] Bluetooth: hci2: command tx timeout [ 1836.863737][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.574784][ T6531] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.584753][ T6531] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.601308][T23604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1837.619687][T23604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1837.633823][T23604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1837.828484][T23604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1837.851199][T23604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1837.920785][T23604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1837.960447][ T5638] Bluetooth: hci2: command tx timeout [ 1838.007491][ T1137] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.078386][T23604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1838.129293][T23604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1838.191403][ T3290] bridge_slave_1: left allmulticast mode [ 1838.216904][ T3290] bridge_slave_1: left promiscuous mode [ 1838.244877][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.545527][ T3290] bridge_slave_0: left allmulticast mode [ 1838.551773][ T3290] bridge_slave_0: left promiscuous mode [ 1838.557634][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.619963][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.649072][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1841.862559][ T3290] bond0 (unregistering): Released all slaves [ 1842.292714][ T5284] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1842.817118][ T3290] hsr_slave_0: left promiscuous mode [ 1842.828069][ T3290] hsr_slave_1: left promiscuous mode [ 1842.841418][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1842.848979][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.858249][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1842.866273][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.902028][ T3290] veth1_macvtap: left promiscuous mode [ 1842.924372][ T3290] veth0_macvtap: left promiscuous mode [ 1842.937900][ T3290] veth1_vlan: left promiscuous mode [ 1842.954644][ T3290] veth0_vlan: left promiscuous mode [ 1843.458645][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 1843.492369][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 1843.788699][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4628'. [ 1844.759536][T23891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.769629][T23891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.803460][T23891] bridge_slave_0: entered allmulticast mode [ 1844.812135][T24090] ieee802154 phy0 wpan0: encryption failed: -22 [ 1844.821717][T23891] bridge_slave_0: entered promiscuous mode [ 1846.239639][T23891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1846.259252][T23891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.298367][T23891] bridge_slave_1: entered allmulticast mode [ 1846.322696][T23891] bridge_slave_1: entered promiscuous mode [ 1847.005315][T23891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1847.050592][T23891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.673472][ T5638] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 1847.729343][T23891] team0: Port device team_slave_0 added [ 1847.769402][T23891] team0: Port device team_slave_1 added [ 1847.915052][T23891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.938629][T23891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.976425][T23891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1848.106980][T23891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.178729][T23891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1848.224823][T23891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1848.294426][T23891] hsr_slave_0: entered promiscuous mode [ 1848.321821][T23891] hsr_slave_1: entered promiscuous mode [ 1848.349112][T23891] debugfs: 'hsr0' already exists in 'hsr' [ 1848.362068][T23891] Cannot create hsr debugfs directory [ 1848.622011][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4646'. [ 1849.904581][T23604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.544417][T23604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.618338][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.625543][ T3290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.765998][T23891] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.526605][ T5638] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1851.564425][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.571636][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.807969][T23891] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.021802][T23891] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.347746][T23891] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.007209][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.019931][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.758567][T23891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1853.817660][T23891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1853.851769][T23891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1853.912254][T23891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1853.934010][T23891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1853.955380][T24205] netlink: 'syz.4.4667': attribute type 27 has an invalid length. [ 1854.018974][T23891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1854.301939][T24205] bridge0: port 3(dummy0) entered disabled state [ 1854.308639][T24205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.316007][T24205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.669615][T24205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1854.889273][T24205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1855.876404][T23891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1855.927934][T23891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1856.063018][ T180] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.119524][ T1137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.132131][ T1137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.176145][ T1137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.676377][T23891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.750887][T23604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1856.866776][T23891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.959499][T21304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.966703][T21304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.070699][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.077897][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.300179][T23604] veth0_vlan: entered promiscuous mode [ 1858.451936][T24294] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4683'. [ 1858.974979][T23604] veth1_vlan: entered promiscuous mode [ 1859.429846][T23604] veth0_macvtap: entered promiscuous mode [ 1859.467057][T23604] veth1_macvtap: entered promiscuous mode [ 1859.610279][T23604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.668683][T23604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1859.759746][T21307] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.809141][T21307] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1860.752936][T21307] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1860.824531][T21307] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.159272][T10208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.206220][T10208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1861.419332][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.451725][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.530603][T23891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1862.922062][T23891] veth0_vlan: entered promiscuous mode [ 1863.148073][T23891] veth1_vlan: entered promiscuous mode [ 1863.632122][T24357] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4700'. [ 1863.660838][T24339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.106524][T23891] veth0_macvtap: entered promiscuous mode [ 1864.508423][T23891] veth1_macvtap: entered promiscuous mode [ 1864.713805][T23891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1864.797715][T23891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1865.159021][ T6531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.994215][ T1021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.144293][ T6119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.246041][ T6119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.533896][T10208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.580705][T10208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.942054][T21307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.077026][T21307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.997077][T24416] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1874.003668][T24416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1874.092936][T24416] vhci_hcd vhci_hcd.0: Device attached [ 1875.937274][ T5784] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1878.427406][T24418] vhci_hcd: connection reset by peer [ 1878.462832][ T1137] vhci_hcd vhci_hcd.2: stop threads [ 1878.492821][ T1137] vhci_hcd vhci_hcd.2: release socket [ 1878.524194][T24435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.557736][ T1137] vhci_hcd vhci_hcd.2: disconnect device [ 1880.394802][T24471] loop5: detected capacity change from 0 to 32768 [ 1880.420760][T24471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4729 (24471) [ 1880.438653][T24471] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1880.448889][T24471] BTRFS info (device loop5): using sha256 checksum algorithm [ 1880.996790][T24471] BTRFS info (device loop5): enabling ssd optimizations [ 1881.005614][T24471] BTRFS info (device loop5): turning on sync discard [ 1881.012400][T24471] BTRFS info (device loop5): enabling free space tree [ 1881.019200][T24471] BTRFS info (device loop5): use zlib compression, level 3 [ 1881.100356][ T5784] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1881.510906][ T30] audit: type=1800 audit(2000000121.819:259): pid=24495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4729" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1882.102783][T24500] netlink: 'syz.4.4731': attribute type 10 has an invalid length. [ 1882.112891][T24500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4731'. [ 1882.357127][T23604] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1883.101913][T24516] syzkaller0: entered promiscuous mode [ 1883.153143][T24516] syzkaller0: entered allmulticast mode [ 1885.226079][T24544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1886.065859][T24551] loop5: detected capacity change from 0 to 32768 [ 1886.127405][T24551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4745 (24551) [ 1886.157288][T24551] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1886.167432][T24551] BTRFS info (device loop5): using sha256 checksum algorithm [ 1886.744857][T24565] netlink: 'syz.8.4747': attribute type 10 has an invalid length. [ 1886.752849][T24565] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4747'. [ 1886.762623][T24565] bridge0: port 3(dummy0) entered blocking state [ 1886.769084][T24565] bridge0: port 3(dummy0) entered disabled state [ 1886.775663][T24565] dummy0: entered allmulticast mode [ 1886.782950][T24565] dummy0: entered promiscuous mode [ 1886.788734][T24565] bridge0: port 3(dummy0) entered blocking state [ 1886.795201][T24565] bridge0: port 3(dummy0) entered forwarding state [ 1887.012928][T24551] BTRFS info (device loop5): enabling ssd optimizations [ 1887.019947][T24551] BTRFS info (device loop5): turning on sync discard [ 1887.026861][T24551] BTRFS info (device loop5): enabling free space tree [ 1887.033741][T24551] BTRFS info (device loop5): use zlib compression, level 3 [ 1887.392751][ T30] audit: type=1800 audit(2000000127.759:260): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4745" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1889.088297][T23604] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1894.771883][T24635] loop5: detected capacity change from 0 to 32768 [ 1894.781490][T24635] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4765 (24635) [ 1894.806862][T24635] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1894.817478][T24635] BTRFS info (device loop5): using sha256 checksum algorithm [ 1894.915937][T24635] BTRFS info (device loop5): enabling ssd optimizations [ 1894.922968][T24635] BTRFS info (device loop5): turning on sync discard [ 1894.929669][T24635] BTRFS info (device loop5): enabling free space tree [ 1894.938277][T24635] BTRFS info (device loop5): use zlib compression, level 3 [ 1895.850691][ T30] audit: type=1800 audit(2000000135.969:261): pid=24660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4765" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1896.710502][T23604] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1897.884622][T24678] evm: overlay not supported [ 1897.995764][T24682] netlink: 'syz.8.4772': attribute type 10 has an invalid length. [ 1898.432339][T24682] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4772'. [ 1900.664462][T24707] loop2: detected capacity change from 0 to 1764 [ 1901.260540][T24707] syz.2.4781: attempt to access beyond end of device [ 1901.260540][T24707] loop2: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1901.275532][T24707] Buffer I/O error on dev loop2, logical block 1795162143, async page read [ 1901.559880][T24707] syz.2.4781: attempt to access beyond end of device [ 1901.559880][T24707] loop2: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 1901.574942][T24707] Buffer I/O error on dev loop2, logical block 1795162143, async page read [ 1901.831306][ T30] audit: type=1800 audit(2000000141.959:262): pid=24707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4781" name="file0" dev="loop2" ino=1923 res=0 errno=0 [ 1902.840292][ T5638] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1902.851488][ T5638] Bluetooth: hci2: Injecting HCI hardware error event [ 1902.875166][ T5638] Bluetooth: hci2: hardware error 0x00 [ 1904.633396][T24716] loop6: detected capacity change from 0 to 32768 [ 1905.198690][T24716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4783 (24716) [ 1905.246778][T24716] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1905.257068][T24716] BTRFS info (device loop6): using sha256 checksum algorithm [ 1905.416540][T24716] BTRFS info (device loop6): enabling ssd optimizations [ 1905.424010][T24716] BTRFS info (device loop6): turning on sync discard [ 1905.430815][T24716] BTRFS info (device loop6): enabling free space tree [ 1905.437624][T24716] BTRFS info (device loop6): use zlib compression, level 3 [ 1907.102235][T19491] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1907.220439][T24758] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1907.322488][ T5638] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1907.415597][T24758] netlink: 'syz.5.4792': attribute type 10 has an invalid length. [ 1907.425645][T24758] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4792'. [ 1907.434907][T24758] bridge0: port 3(dummy0) entered blocking state [ 1907.441404][T24758] bridge0: port 3(dummy0) entered disabled state [ 1907.447967][T24758] dummy0: entered allmulticast mode [ 1907.455420][T24758] dummy0: entered promiscuous mode [ 1907.461526][T24758] bridge0: port 3(dummy0) entered blocking state [ 1907.467970][T24758] bridge0: port 3(dummy0) entered forwarding state [ 1909.204779][T24773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4797'. [ 1912.304275][ T5638] Bluetooth: hci3: unexpected event for opcode 0x0025 [ 1914.463199][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.469620][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.650931][T24829] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4814'. [ 1916.660381][T18713] IPVS: starting estimator thread 0... [ 1916.781461][T24835] IPVS: using max 22 ests per chain, 52800 per kthread [ 1917.471727][T24849] ipvlan2: entered promiscuous mode [ 1917.510709][T24849] ipvlan2: entered allmulticast mode [ 1917.555642][T24849] gretap0: entered allmulticast mode [ 1917.665495][T24849] team0: Device ipvlan2 failed to register rx_handler [ 1918.025742][T24858] smpboot: CPU 1 is now offline [ 1919.194794][T24872] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1919.468688][T24872] netlink: 'syz.5.4826': attribute type 10 has an invalid length. [ 1919.476658][T24872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4826'. [ 1921.228743][T24886] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4831'. [ 1924.876727][T24881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1928.447817][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 1932.845108][T24927] input: syz1 as /devices/virtual/input/input61 [ 1934.203669][T24927] input: failed to attach handler leds to device input61, error: -6 [ 1935.301649][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1935.311809][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1935.324588][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1935.358329][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1935.374544][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1936.008238][T24938] loop9: detected capacity change from 0 to 524287999 [ 1937.540000][ T5638] Bluetooth: hci1: command tx timeout [ 1937.618834][T22431] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1937.658965][T22431] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1937.676543][T22431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1937.687388][T22431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1937.697169][T22431] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1938.291606][T18714] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1938.610946][T18714] usb 6-1: Using ep0 maxpacket: 32 [ 1938.696122][T18714] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1938.773367][T22431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1938.817145][T22431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1938.828318][T22431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1938.877408][T22431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1938.888278][T22431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1938.972356][T18714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.865078][ T5638] Bluetooth: hci1: command tx timeout [ 1939.870679][T22431] Bluetooth: hci7: command tx timeout [ 1939.911192][T18714] usb 6-1: Product: syz [ 1940.160987][T18714] usb 6-1: Manufacturer: syz [ 1940.198702][T24955] bond0: entered promiscuous mode [ 1940.251514][T18714] usb 6-1: SerialNumber: syz [ 1940.309904][T24955] bond_slave_0: entered promiscuous mode [ 1940.417411][T18714] usb 6-1: config 0 descriptor?? [ 1940.436844][T24955] bond_slave_1: entered promiscuous mode [ 1940.587914][T24955] batadv0: entered promiscuous mode [ 1940.644977][T18714] usb 6-1: can't set config #0, error -71 [ 1940.788209][T18714] usb 6-1: USB disconnect, device number 13 [ 1940.796586][T24955] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1941.001424][T22431] Bluetooth: hci4: command tx timeout [ 1941.358019][T24971] overlayfs: missing 'lowerdir' [ 1941.880481][T22431] Bluetooth: hci1: command tx timeout [ 1941.961163][T22431] Bluetooth: hci7: command tx timeout [ 1943.080687][T22431] Bluetooth: hci4: command tx timeout [ 1943.960303][T22431] Bluetooth: hci1: command tx timeout [ 1944.040326][T22431] Bluetooth: hci7: command tx timeout [ 1944.469926][T24931] lo speed is unknown, defaulting to 1000 [ 1945.264775][T22431] Bluetooth: hci4: command tx timeout [ 1945.281297][ T30] audit: type=1326 audit(2000000185.649:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34479de99 code=0x7ffc0000 [ 1945.513163][ T30] audit: type=1326 audit(2000000185.679:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc34479dc02 code=0x7ffc0000 [ 1945.856330][ T30] audit: type=1326 audit(2000000185.679:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc34479dc97 code=0x7ffc0000 [ 1946.120818][T22431] Bluetooth: hci7: command tx timeout [ 1946.139787][ T30] audit: type=1326 audit(2000000185.679:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc34475ab91 code=0x7ffc0000 [ 1946.205034][T21304] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.272710][T24947] lo speed is unknown, defaulting to 1000 [ 1946.394440][ T30] audit: type=1326 audit(2000000185.679:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34479de99 code=0x7ffc0000 [ 1946.488799][T21311] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.676900][ T30] audit: type=1326 audit(2000000185.679:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34479de99 code=0x7ffc0000 [ 1946.935733][ T30] audit: type=1326 audit(2000000185.719:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc34479ec89 code=0x7ffc0000 [ 1946.984590][T24956] lo speed is unknown, defaulting to 1000 [ 1947.006872][ T1021] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.183640][ T30] audit: type=1326 audit(2000000185.719:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc34475a2ec code=0x7ffc0000 [ 1947.289581][T21308] dummy0: left allmulticast mode [ 1947.316941][T21308] dummy0: left promiscuous mode [ 1947.326988][T22431] Bluetooth: hci4: command tx timeout [ 1947.348700][T21308] bridge0: port 3(dummy0) entered disabled state [ 1947.386956][ T30] audit: type=1326 audit(2000000185.719:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc34475a34e code=0x7ffc0000 [ 1947.496722][T21308] bridge_slave_1: left allmulticast mode [ 1947.516182][T21308] bridge_slave_1: left promiscuous mode [ 1947.542159][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.559666][ T30] audit: type=1326 audit(2000000185.719:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25005 comm="syz.8.4856" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34479de99 code=0x7ffc0000 [ 1947.674041][T21308] bridge_slave_0: left allmulticast mode [ 1947.699587][T21308] bridge_slave_0: left promiscuous mode [ 1947.742171][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.428603][T25033] overlayfs: missing 'lowerdir' [ 1948.702008][T21308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.805336][T21308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.904891][T21308] bond0 (unregistering): Released all slaves [ 1949.364841][T21304] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.356110][T21308] hsr_slave_0: left promiscuous mode [ 1952.402528][T21308] hsr_slave_1: left promiscuous mode [ 1952.446097][T21308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1952.497064][T21308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1953.868416][T21308] team0 (unregistering): Port device team_slave_1 removed [ 1953.991694][T21308] team0 (unregistering): Port device team_slave_0 removed [ 1956.506842][T24931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.567169][T24931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.656455][T24931] bridge_slave_0: entered allmulticast mode [ 1956.730028][T24931] bridge_slave_0: entered promiscuous mode [ 1956.856482][T24931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.924119][T24931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.995448][T24931] bridge_slave_1: entered allmulticast mode [ 1957.059855][T24931] bridge_slave_1: entered promiscuous mode [ 1957.559573][T24931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.776917][T24931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.446491][T21308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.127443][T24931] team0: Port device team_slave_0 added [ 1959.267789][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4874'. [ 1959.414615][T21308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.910725][T24931] team0: Port device team_slave_1 added [ 1960.094993][T24947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.142591][T24947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.186717][T24947] bridge_slave_0: entered allmulticast mode [ 1960.233462][T24947] bridge_slave_0: entered promiscuous mode [ 1960.628451][T21308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.737995][T24947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.601215][T24947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.696604][T24947] bridge_slave_1: entered allmulticast mode [ 1963.758095][T24947] bridge_slave_1: entered promiscuous mode [ 1964.657091][T24931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1964.881691][T24931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1965.118606][T24931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1965.322325][T24931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1965.358144][T24931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1965.533913][T24931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.789023][T21308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.059226][T24947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1966.198719][T24947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1966.505814][T24956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.587355][T24956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.654605][T24956] bridge_slave_0: entered allmulticast mode [ 1966.736020][T24956] bridge_slave_0: entered promiscuous mode [ 1967.068923][T24956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.138403][T24956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.181451][T24956] bridge_slave_1: entered allmulticast mode [ 1967.238247][T24956] bridge_slave_1: entered promiscuous mode [ 1967.476634][T24947] team0: Port device team_slave_0 added [ 1969.690495][T25162] mmap: syz.5.4882 (25162) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1970.124972][T24931] hsr_slave_0: entered promiscuous mode [ 1970.179341][T24931] hsr_slave_1: entered promiscuous mode [ 1970.217549][T25160] binder: BC_ATTEMPT_ACQUIRE not supported [ 1970.225629][T25160] binder: 25159:25160 ioctl c0306201 200000000c00 returned -22 [ 1970.259726][T24931] debugfs: 'hsr0' already exists in 'hsr' [ 1970.339267][T24931] Cannot create hsr debugfs directory [ 1970.578537][T24956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.597227][T25168] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 1970.597227][T25168] program syz.6.4884 not setting count and/or reply_len properly [ 1970.685028][T24947] team0: Port device team_slave_1 added [ 1970.872966][T24956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1971.053011][T24214] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1972.255909][T24214] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1972.310814][T24214] usb 6-1: config 0 has no interface number 0 [ 1972.506123][T24214] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1972.608673][T24214] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1972.698981][T24214] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1972.791950][T24214] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1972.854886][T24956] team0: Port device team_slave_0 added [ 1972.993346][T24214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.016431][T24947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.172785][T25182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1973.198894][T24947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.238308][T24214] usb 6-1: config 0 descriptor?? [ 1973.307025][T24214] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input62 [ 1973.388882][T24947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.477914][T24214] usb 6-1: USB disconnect, device number 14 [ 1973.578818][ T57] netdevsim netdevsim2 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.785435][T24956] team0: Port device team_slave_1 added [ 1973.917817][T24947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.965830][T24947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.155243][T24947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1974.411217][T10208] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 1974.670391][ T180] netdevsim netdevsim2 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.096974][T24956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1975.139642][T24956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1975.329033][T24956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1975.468218][ T9343] netdevsim netdevsim2 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.683472][T24947] hsr_slave_0: entered promiscuous mode [ 1975.737075][T24947] hsr_slave_1: entered promiscuous mode [ 1975.796508][T24947] debugfs: 'hsr0' already exists in 'hsr' [ 1975.847417][T24947] Cannot create hsr debugfs directory [ 1975.892642][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.900029][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.922667][T24956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1975.981458][T24956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1976.114324][T24956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1976.927973][T21308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.703068][T21308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.182815][T24956] hsr_slave_0: entered promiscuous mode [ 1980.243305][T24956] hsr_slave_1: entered promiscuous mode [ 1980.306918][T24956] debugfs: 'hsr0' already exists in 'hsr' [ 1980.370739][T24956] Cannot create hsr debugfs directory [ 1984.133124][T21308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.395768][T21308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.570641][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4907'. [ 1987.638436][T24931] netdevsim netdevsim7 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.033603][T25268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.191667][T25268] bridge_slave_1 (unregistering): left allmulticast mode [ 1988.246822][T25268] bridge_slave_1 (unregistering): left promiscuous mode [ 1988.286810][T25268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.167609][T24931] netdevsim netdevsim7 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.867386][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1995.887343][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1995.918964][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1995.930645][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1995.945063][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1996.295519][T22431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1996.316449][T22431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1996.328933][T22431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1996.342271][T22431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1996.357318][T22431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1997.028637][T24931] netdevsim netdevsim7 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1998.040303][T22431] Bluetooth: hci2: command tx timeout [ 1998.331284][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1998.344299][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1998.360624][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1998.386513][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1998.404926][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1998.441057][T22431] Bluetooth: hci3: command tx timeout [ 1998.916950][T24931] netdevsim netdevsim7 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.242378][T10208] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.121530][T22431] Bluetooth: hci2: command tx timeout [ 2000.435839][T13142] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.530266][T22431] Bluetooth: hci8: command tx timeout [ 2000.537413][ T5638] Bluetooth: hci3: command tx timeout [ 2000.787146][ T9343] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.285182][T25345] ALSA: mixer_oss: invalid OSS volume '' [ 2001.543493][ T9343] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.995508][ T5638] Bluetooth: hci2: command tx timeout [ 2003.001056][T22431] Bluetooth: hci3: command tx timeout [ 2003.006487][ T5638] Bluetooth: hci8: command tx timeout [ 2003.012647][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2003.012664][ T30] audit: type=1107 audit(2000000243.209:282): pid=25351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2003.495416][T21308] bridge_slave_1: left allmulticast mode [ 2003.599482][T21308] bridge_slave_1: left promiscuous mode [ 2003.690252][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.875914][T21308] bridge_slave_0: left allmulticast mode [ 2003.990300][T21308] bridge_slave_0: left promiscuous mode [ 2004.045372][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.226698][T21308] dummy0: left allmulticast mode [ 2004.274694][T21308] dummy0: left promiscuous mode [ 2004.306529][T21308] bridge0: port 3(dummy0) entered disabled state [ 2004.352511][T21308] bridge_slave_1: left allmulticast mode [ 2004.386291][T21308] bridge_slave_1: left promiscuous mode [ 2004.415789][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.471695][T21308] bridge_slave_0: left allmulticast mode [ 2004.507816][T21308] bridge_slave_0: left promiscuous mode [ 2004.537796][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.080314][ T5638] Bluetooth: hci8: command tx timeout [ 2005.085834][T22431] Bluetooth: hci3: command tx timeout [ 2005.091290][T16053] Bluetooth: hci2: command tx timeout [ 2007.160169][T16053] Bluetooth: hci8: command tx timeout [ 2010.076639][T21308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2010.089186][T21308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.102023][T21308] bond0 (unregistering): Released all slaves [ 2010.325797][T21308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2010.344464][T21308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.356356][T21308] bond0 (unregistering): Released all slaves [ 2010.921061][T25305] lo speed is unknown, defaulting to 1000 [ 2011.148032][T25299] lo speed is unknown, defaulting to 1000 [ 2011.195636][T25398] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4933'. [ 2011.641542][T24214] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2011.717941][ T5284] 8021q: adding VLAN 0 to HW filter on device eth20 [ 2011.850796][T24214] usb 6-1: Using ep0 maxpacket: 32 [ 2011.920609][T24214] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2011.984867][T24214] usb 6-1: config 0 has no interface number 0 [ 2012.058104][T24214] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2012.207316][T24214] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2012.332667][T24214] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2012.441856][T24214] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2012.526148][T25421] netlink: 'syz.8.4938': attribute type 10 has an invalid length. [ 2012.534214][T25421] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4938'. [ 2012.547750][T24214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.595520][T24214] usb 6-1: Product: syz [ 2012.610013][T24214] usb 6-1: Manufacturer: syz [ 2012.638708][T24214] usb 6-1: SerialNumber: syz [ 2014.252772][T24214] usb 6-1: config 0 descriptor?? [ 2016.012723][T24214] usb 6-1: can't set config #0, error -71 [ 2016.115168][T24214] usb 6-1: USB disconnect, device number 15 [ 2016.371862][T25327] lo speed is unknown, defaulting to 1000 [ 2019.467003][T21308] hsr_slave_0: left promiscuous mode [ 2019.512049][T21308] hsr_slave_1: left promiscuous mode [ 2019.535083][T21308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2019.579724][T21308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2019.619292][T21308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2019.670941][T21308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2019.724810][T21308] hsr_slave_0: left promiscuous mode [ 2019.747026][T21308] hsr_slave_1: left promiscuous mode [ 2019.779381][T21308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2019.797111][T21308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2019.816894][T21308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2020.825094][T21308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2022.425990][T21308] veth1_macvtap: left promiscuous mode [ 2022.444676][T21308] veth0_macvtap: left promiscuous mode [ 2022.457889][T21308] veth1_vlan: left promiscuous mode [ 2022.472742][T21308] veth0_vlan: left promiscuous mode [ 2022.496717][T16053] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 2022.513111][T21308] veth1_macvtap: left promiscuous mode [ 2022.529757][T21308] veth0_macvtap: left promiscuous mode [ 2022.536797][T21308] veth1_vlan: left promiscuous mode [ 2022.544482][T21308] veth0_vlan: left promiscuous mode [ 2023.100990][T21308] team0 (unregistering): Port device team_slave_1 removed [ 2023.125546][T21308] team0 (unregistering): Port device team_slave_0 removed [ 2023.598183][T21308] team0 (unregistering): Port device team_slave_1 removed [ 2023.627222][T21308] team0 (unregistering): Port device team_slave_0 removed [ 2036.103775][T25299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.164650][T25299] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.191792][T25299] bridge_slave_0: entered allmulticast mode [ 2036.221806][T25299] bridge_slave_0: entered promiscuous mode [ 2036.353558][T25299] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.404243][T25299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.444226][T25299] bridge_slave_1: entered allmulticast mode [ 2036.499955][T25299] bridge_slave_1: entered promiscuous mode [ 2036.638928][T25512] fuse: fd is not a fuse device [ 2036.651268][T21308] IPVS: stop unused estimator thread 0... [ 2036.698927][T21308] IPVS: stop unused estimator thread 0... [ 2036.865540][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4961'. [ 2036.931342][T25299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2037.216102][T25299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.327343][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.335808][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.364240][T25523] vhci_hcd vhci_hcd.0: remove, state 4 [ 2037.417548][T25523] usb usb34: USB disconnect, device number 1 [ 2041.844326][T21308] bridge_slave_1: left allmulticast mode [ 2041.878950][T21308] bridge_slave_1: left promiscuous mode [ 2041.917441][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.967177][T21308] bridge_slave_0: left allmulticast mode [ 2041.998638][T21308] bridge_slave_0: left promiscuous mode [ 2042.033223][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.129259][T21308] bridge_slave_1: left allmulticast mode [ 2042.171101][T21308] bridge_slave_1: left promiscuous mode [ 2042.201466][T10208] vhci_hcd vhci_hcd.0: stop threads [ 2042.211761][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.228481][T25523] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 2042.235874][T10208] vhci_hcd vhci_hcd.0: release socket [ 2042.258963][T10208] vhci_hcd vhci_hcd.0: disconnect device [ 2042.289785][T21308] bridge_slave_0: left allmulticast mode [ 2042.303607][T10208] vhci_hcd vhci_hcd.0: stop threads [ 2042.323187][T21308] bridge_slave_0: left promiscuous mode [ 2042.332184][T10208] vhci_hcd vhci_hcd.0: release socket [ 2042.348202][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.367327][T10208] vhci_hcd vhci_hcd.0: disconnect device [ 2042.385161][T25523] vhci_hcd vhci_hcd.0: remove, state 4 [ 2042.396149][T10208] ================================================================== [ 2042.404200][T10208] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 2042.412350][T10208] Read of size 1 at addr ffff88802ca206c8 by task kworker/u8:18/10208 [ 2042.420487][T10208] [ 2042.422800][T10208] CPU: 0 UID: 0 PID: 10208 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 2042.422839][T10208] Tainted: [L]=SOFTLOCKUP [ 2042.422850][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2042.422869][T10208] Workqueue: usbip_event event_handler [ 2042.422900][T10208] Call Trace: [ 2042.422910][T10208] [ 2042.422921][T10208] dump_stack_lvl+0x100/0x190 [ 2042.422952][T10208] print_report+0x13d/0x4b0 [ 2042.422993][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.423031][T10208] ? __virt_addr_valid+0x239/0x430 [ 2042.423065][T10208] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2042.423094][T10208] kasan_report+0xdf/0x1c0 [ 2042.423125][T10208] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2042.423157][T10208] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2042.423186][T10208] __kasan_check_byte+0x36/0x50 [ 2042.423215][T10208] lock_acquire+0x132/0x370 [ 2042.423245][T10208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2042.423277][T10208] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2042.423309][T10208] _raw_spin_lock_irqsave+0x3a/0x60 [ 2042.423337][T10208] ? event_handler+0x21e/0x570 [ 2042.423366][T10208] event_handler+0x21e/0x570 [ 2042.423398][T10208] process_one_work+0xa23/0x1940 [ 2042.423434][T10208] ? __pfx_process_one_work+0x10/0x10 [ 2042.423461][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.423502][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.423539][T10208] worker_thread+0x5ef/0xe50 [ 2042.423570][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2042.423599][T10208] ? kthread+0x13a/0x450 [ 2042.423641][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2042.423667][T10208] kthread+0x370/0x450 [ 2042.423709][T10208] ? __pfx_kthread+0x10/0x10 [ 2042.423753][T10208] ret_from_fork+0x72b/0xd50 [ 2042.423791][T10208] ? __pfx_ret_from_fork+0x10/0x10 [ 2042.423829][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2042.423863][T10208] ? __switch_to+0x800/0x10f0 [ 2042.423907][T10208] ? __switch_to_asm+0x39/0x70 [ 2042.423944][T10208] ? __pfx_kthread+0x10/0x10 [ 2042.423989][T10208] ret_from_fork_asm+0x1a/0x30 [ 2042.424042][T10208] [ 2042.424052][T10208] [ 2042.624129][T10208] Allocated by task 1: [ 2042.628182][T10208] kasan_save_stack+0x30/0x50 [ 2042.632865][T10208] kasan_save_track+0x14/0x30 [ 2042.637547][T10208] __kasan_kmalloc+0xaa/0xb0 [ 2042.642141][T10208] __kmalloc_noprof+0x322/0x820 [ 2042.646995][T10208] __usb_create_hcd+0x5e/0xac0 [ 2042.651766][T10208] vhci_hcd_probe+0x1a5/0x4e0 [ 2042.656441][T10208] platform_probe+0x106/0x1d0 [ 2042.661128][T10208] really_probe+0x241/0xa60 [ 2042.665630][T10208] __driver_probe_device+0x20e/0x450 [ 2042.670914][T10208] driver_probe_device+0x4a/0x140 [ 2042.675947][T10208] __device_attach_driver+0x1df/0x320 [ 2042.681322][T10208] bus_for_each_drv+0x159/0x1e0 [ 2042.686251][T10208] __device_attach+0x1e4/0x4d0 [ 2042.691036][T10208] device_initial_probe+0xaf/0xd0 [ 2042.696061][T10208] bus_probe_device+0x64/0x160 [ 2042.700817][T10208] device_add+0x121d/0x1970 [ 2042.705324][T10208] platform_device_add+0x35a/0x800 [ 2042.710425][T10208] platform_device_register_full+0x5cf/0x830 [ 2042.716402][T10208] vhci_hcd_init+0x1a1/0x2f0 [ 2042.720984][T10208] do_one_initcall+0x11d/0x700 [ 2042.725752][T10208] kernel_init_freeable+0x6ea/0x7b0 [ 2042.730949][T10208] kernel_init+0x1f/0x1e0 [ 2042.735311][T10208] ret_from_fork+0x72b/0xd50 [ 2042.739897][T10208] ret_from_fork_asm+0x1a/0x30 [ 2042.744661][T10208] [ 2042.746964][T10208] Freed by task 25523: [ 2042.751014][T10208] kasan_save_stack+0x30/0x50 [ 2042.755699][T10208] kasan_save_track+0x14/0x30 [ 2042.760396][T10208] kasan_save_free_info+0x3b/0x70 [ 2042.765418][T10208] __kasan_slab_free+0x5f/0x80 [ 2042.770169][T10208] kfree+0x22b/0x6c0 [ 2042.774059][T10208] usb_put_hcd+0x149/0x1f0 [ 2042.778492][T10208] vhci_hcd_remove+0xb5/0x1b0 [ 2042.783177][T10208] platform_remove+0x5f/0x80 [ 2042.787807][T10208] device_remove+0xcb/0x180 [ 2042.792309][T10208] device_release_driver_internal+0x44e/0x620 [ 2042.798379][T10208] unbind_store+0xf8/0x110 [ 2042.802787][T10208] drv_attr_store+0x74/0xb0 [ 2042.807277][T10208] sysfs_kf_write+0xf2/0x150 [ 2042.811863][T10208] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2042.817138][T10208] vfs_write+0x6ac/0x1050 [ 2042.821466][T10208] ksys_write+0x12a/0x250 [ 2042.825791][T10208] do_syscall_64+0x115/0x870 [ 2042.830394][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.836295][T10208] [ 2042.838601][T10208] Last potentially related work creation: [ 2042.844294][T10208] kasan_save_stack+0x30/0x50 [ 2042.848996][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2042.854200][T10208] insert_work+0x36/0x230 [ 2042.858537][T10208] __queue_work+0x9bc/0x12b0 [ 2042.863131][T10208] queue_work_on+0x1a9/0x1e0 [ 2042.867710][T10208] usb_hcd_giveback_urb+0x330/0x4a0 [ 2042.872915][T10208] unlink1+0x418/0x510 [ 2042.876986][T10208] usb_hcd_unlink_urb+0x131/0x210 [ 2042.882018][T10208] usb_kill_urb+0x121/0x320 [ 2042.886514][T10208] hub_quiesce+0x1e9/0x320 [ 2042.890927][T10208] hub_suspend+0x4ab/0x9e0 [ 2042.895340][T10208] usb_suspend_both+0x288/0x950 [ 2042.900192][T10208] usb_runtime_suspend+0x49/0x120 [ 2042.905222][T10208] __rpm_callback+0xc8/0x620 [ 2042.909811][T10208] rpm_callback+0x16a/0x1b0 [ 2042.914312][T10208] rpm_suspend+0x2f4/0x11a0 [ 2042.918813][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2042.923924][T10208] usb_runtime_idle+0x7e/0x90 [ 2042.928603][T10208] rpm_idle+0x322/0x790 [ 2042.932755][T10208] pm_runtime_work+0x120/0x150 [ 2042.937519][T10208] process_one_work+0xa23/0x1940 [ 2042.942444][T10208] worker_thread+0x5ef/0xe50 [ 2042.947024][T10208] kthread+0x370/0x450 [ 2042.951100][T10208] ret_from_fork+0x72b/0xd50 [ 2042.955687][T10208] ret_from_fork_asm+0x1a/0x30 [ 2042.960451][T10208] [ 2042.962755][T10208] Second to last potentially related work creation: [ 2042.969333][T10208] kasan_save_stack+0x30/0x50 [ 2042.974018][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2042.979234][T10208] insert_work+0x36/0x230 [ 2042.983567][T10208] __queue_work+0x9bc/0x12b0 [ 2042.988146][T10208] queue_work_on+0x1a9/0x1e0 [ 2042.992724][T10208] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 2042.997928][T10208] usb_hcd_submit_urb+0xab7/0x2150 [ 2043.003049][T10208] usb_submit_urb+0x827/0x19b0 [ 2043.007805][T10208] usb_start_wait_urb+0x10e/0x580 [ 2043.012838][T10208] usb_control_msg+0x328/0x4b0 [ 2043.017596][T10208] hub_suspend+0x826/0x9e0 [ 2043.022008][T10208] usb_suspend_both+0x288/0x950 [ 2043.026862][T10208] usb_runtime_suspend+0x49/0x120 [ 2043.031892][T10208] __rpm_callback+0xc8/0x620 [ 2043.036481][T10208] rpm_callback+0x16a/0x1b0 [ 2043.040982][T10208] rpm_suspend+0x2f4/0x11a0 [ 2043.045485][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2043.050597][T10208] usb_runtime_idle+0x7e/0x90 [ 2043.055281][T10208] rpm_idle+0x322/0x790 [ 2043.059438][T10208] pm_runtime_work+0x120/0x150 [ 2043.064204][T10208] process_one_work+0xa23/0x1940 [ 2043.069128][T10208] worker_thread+0x5ef/0xe50 [ 2043.073704][T10208] kthread+0x370/0x450 [ 2043.077776][T10208] ret_from_fork+0x72b/0xd50 [ 2043.082362][T10208] ret_from_fork_asm+0x1a/0x30 [ 2043.087125][T10208] [ 2043.089427][T10208] The buggy address belongs to the object at ffff88802ca20000 [ 2043.089427][T10208] which belongs to the cache kmalloc-8k of size 8192 [ 2043.103463][T10208] The buggy address is located 1736 bytes inside of [ 2043.103463][T10208] freed 8192-byte region [ffff88802ca20000, ffff88802ca22000) [ 2043.117418][T10208] [ 2043.119720][T10208] The buggy address belongs to the physical page: [ 2043.126110][T10208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ca20 [ 2043.134857][T10208] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2043.143357][T10208] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2043.150887][T10208] page_type: f5(slab) [ 2043.154855][T10208] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2043.163434][T10208] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2043.172008][T10208] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2043.180669][T10208] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2043.189330][T10208] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2043.197988][T10208] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2043.206637][T10208] page dumped because: kasan: bad access detected [ 2043.213027][T10208] page_owner tracks the page as allocated [ 2043.218721][T10208] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12793354925, free_ts 0 [ 2043.238425][T10208] post_alloc_hook+0xfd/0x120 [ 2043.243101][T10208] get_page_from_freelist+0xf48/0x3530 [ 2043.248563][T10208] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2043.254457][T10208] new_slab+0xa2/0x640 [ 2043.258521][T10208] refill_objects+0xe3/0x410 [ 2043.263111][T10208] __pcs_replace_empty_main+0x376/0x680 [ 2043.268654][T10208] __kmalloc_noprof+0x66d/0x820 [ 2043.273507][T10208] __usb_create_hcd+0x5e/0xac0 [ 2043.278273][T10208] vhci_hcd_probe+0xf3/0x4e0 [ 2043.282857][T10208] platform_probe+0x106/0x1d0 [ 2043.287524][T10208] really_probe+0x241/0xa60 [ 2043.292023][T10208] __driver_probe_device+0x20e/0x450 [ 2043.297311][T10208] driver_probe_device+0x4a/0x140 [ 2043.302332][T10208] __device_attach_driver+0x1df/0x320 [ 2043.307702][T10208] bus_for_each_drv+0x159/0x1e0 [ 2043.312543][T10208] __device_attach+0x1e4/0x4d0 [ 2043.317304][T10208] page_owner free stack trace missing [ 2043.322645][T10208] [ 2043.324947][T10208] Memory state around the buggy address: [ 2043.330554][T10208] ffff88802ca20580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.338685][T10208] ffff88802ca20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.346731][T10208] >ffff88802ca20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.354774][T10208] ^ [ 2043.361185][T10208] ffff88802ca20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.369230][T10208] ffff88802ca20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2043.377298][T10208] ================================================================== [ 2043.385335][T10208] Disabling lock debugging due to kernel taint [ 2043.391461][T10208] ================================================================== [ 2043.399499][T10208] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 2043.407304][T10208] Read of size 4 at addr ffff88802ca206b4 by task kworker/u8:18/10208 [ 2043.415438][T10208] [ 2043.417749][T10208] CPU: 0 UID: 0 PID: 10208 Comm: kworker/u8:18 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2043.417790][T10208] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2043.417803][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2043.417824][T10208] Workqueue: usbip_event event_handler [ 2043.417853][T10208] Call Trace: [ 2043.417865][T10208] [ 2043.417876][T10208] dump_stack_lvl+0x100/0x190 [ 2043.417907][T10208] print_report+0x13d/0x4b0 [ 2043.417948][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2043.417982][T10208] ? __virt_addr_valid+0x239/0x430 [ 2043.418017][T10208] ? do_raw_spin_lock+0x23b/0x260 [ 2043.418056][T10208] kasan_report+0xdf/0x1c0 [ 2043.418087][T10208] ? do_raw_spin_lock+0x23b/0x260 [ 2043.418128][T10208] do_raw_spin_lock+0x23b/0x260 [ 2043.418164][T10208] ? __kasan_check_byte+0x36/0x50 [ 2043.418192][T10208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2043.418228][T10208] ? lock_acquire+0x132/0x370 [ 2043.418257][T10208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2043.418290][T10208] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2043.418321][T10208] _raw_spin_lock_irqsave+0x42/0x60 [ 2043.418350][T10208] ? event_handler+0x21e/0x570 [ 2043.418378][T10208] event_handler+0x21e/0x570 [ 2043.418409][T10208] process_one_work+0xa23/0x1940 [ 2043.418444][T10208] ? __pfx_process_one_work+0x10/0x10 [ 2043.418471][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2043.418510][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2043.418546][T10208] worker_thread+0x5ef/0xe50 [ 2043.418578][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2043.418606][T10208] ? kthread+0x13a/0x450 [ 2043.418647][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2043.418673][T10208] kthread+0x370/0x450 [ 2043.418716][T10208] ? __pfx_kthread+0x10/0x10 [ 2043.418764][T10208] ret_from_fork+0x72b/0xd50 [ 2043.418801][T10208] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.418838][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2043.418871][T10208] ? __switch_to+0x800/0x10f0 [ 2043.418914][T10208] ? __switch_to_asm+0x39/0x70 [ 2043.418952][T10208] ? __pfx_kthread+0x10/0x10 [ 2043.418997][T10208] ret_from_fork_asm+0x1a/0x30 [ 2043.419048][T10208] [ 2043.419058][T10208] [ 2043.624802][T10208] Allocated by task 1: [ 2043.628850][T10208] kasan_save_stack+0x30/0x50 [ 2043.633532][T10208] kasan_save_track+0x14/0x30 [ 2043.638214][T10208] __kasan_kmalloc+0xaa/0xb0 [ 2043.642808][T10208] __kmalloc_noprof+0x322/0x820 [ 2043.647661][T10208] __usb_create_hcd+0x5e/0xac0 [ 2043.652428][T10208] vhci_hcd_probe+0x1a5/0x4e0 [ 2043.657097][T10208] platform_probe+0x106/0x1d0 [ 2043.661780][T10208] really_probe+0x241/0xa60 [ 2043.666280][T10208] __driver_probe_device+0x20e/0x450 [ 2043.671563][T10208] driver_probe_device+0x4a/0x140 [ 2043.676586][T10208] __device_attach_driver+0x1df/0x320 [ 2043.681958][T10208] bus_for_each_drv+0x159/0x1e0 [ 2043.686817][T10208] __device_attach+0x1e4/0x4d0 [ 2043.691580][T10208] device_initial_probe+0xaf/0xd0 [ 2043.696605][T10208] bus_probe_device+0x64/0x160 [ 2043.701362][T10208] device_add+0x121d/0x1970 [ 2043.705867][T10208] platform_device_add+0x35a/0x800 [ 2043.710972][T10208] platform_device_register_full+0x5cf/0x830 [ 2043.716950][T10208] vhci_hcd_init+0x1a1/0x2f0 [ 2043.721545][T10208] do_one_initcall+0x11d/0x700 [ 2043.726309][T10208] kernel_init_freeable+0x6ea/0x7b0 [ 2043.731505][T10208] kernel_init+0x1f/0x1e0 [ 2043.735836][T10208] ret_from_fork+0x72b/0xd50 [ 2043.740423][T10208] ret_from_fork_asm+0x1a/0x30 [ 2043.745185][T10208] [ 2043.747487][T10208] Freed by task 25523: [ 2043.751598][T10208] kasan_save_stack+0x30/0x50 [ 2043.756280][T10208] kasan_save_track+0x14/0x30 [ 2043.760963][T10208] kasan_save_free_info+0x3b/0x70 [ 2043.765986][T10208] __kasan_slab_free+0x5f/0x80 [ 2043.770737][T10208] kfree+0x22b/0x6c0 [ 2043.774631][T10208] usb_put_hcd+0x149/0x1f0 [ 2043.779054][T10208] vhci_hcd_remove+0xb5/0x1b0 [ 2043.783723][T10208] platform_remove+0x5f/0x80 [ 2043.788302][T10208] device_remove+0xcb/0x180 [ 2043.792801][T10208] device_release_driver_internal+0x44e/0x620 [ 2043.798869][T10208] unbind_store+0xf8/0x110 [ 2043.803277][T10208] drv_attr_store+0x74/0xb0 [ 2043.807767][T10208] sysfs_kf_write+0xf2/0x150 [ 2043.812351][T10208] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2043.817625][T10208] vfs_write+0x6ac/0x1050 [ 2043.821958][T10208] ksys_write+0x12a/0x250 [ 2043.826290][T10208] do_syscall_64+0x115/0x870 [ 2043.830878][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.836761][T10208] [ 2043.839067][T10208] Last potentially related work creation: [ 2043.844759][T10208] kasan_save_stack+0x30/0x50 [ 2043.849444][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2043.854653][T10208] insert_work+0x36/0x230 [ 2043.858988][T10208] __queue_work+0x9bc/0x12b0 [ 2043.863565][T10208] queue_work_on+0x1a9/0x1e0 [ 2043.868145][T10208] usb_hcd_giveback_urb+0x330/0x4a0 [ 2043.873347][T10208] unlink1+0x418/0x510 [ 2043.877420][T10208] usb_hcd_unlink_urb+0x131/0x210 [ 2043.882449][T10208] usb_kill_urb+0x121/0x320 [ 2043.886942][T10208] hub_quiesce+0x1e9/0x320 [ 2043.891384][T10208] hub_suspend+0x4ab/0x9e0 [ 2043.895814][T10208] usb_suspend_both+0x288/0x950 [ 2043.900665][T10208] usb_runtime_suspend+0x49/0x120 [ 2043.905695][T10208] __rpm_callback+0xc8/0x620 [ 2043.910282][T10208] rpm_callback+0x16a/0x1b0 [ 2043.914782][T10208] rpm_suspend+0x2f4/0x11a0 [ 2043.919283][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2043.924414][T10208] usb_runtime_idle+0x7e/0x90 [ 2043.929100][T10208] rpm_idle+0x322/0x790 [ 2043.933252][T10208] pm_runtime_work+0x120/0x150 [ 2043.938016][T10208] process_one_work+0xa23/0x1940 [ 2043.942945][T10208] worker_thread+0x5ef/0xe50 [ 2043.947523][T10208] kthread+0x370/0x450 [ 2043.951594][T10208] ret_from_fork+0x72b/0xd50 [ 2043.956182][T10208] ret_from_fork_asm+0x1a/0x30 [ 2043.960952][T10208] [ 2043.963260][T10208] Second to last potentially related work creation: [ 2043.969836][T10208] kasan_save_stack+0x30/0x50 [ 2043.974517][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2043.979712][T10208] insert_work+0x36/0x230 [ 2043.984064][T10208] __queue_work+0x9bc/0x12b0 [ 2043.988646][T10208] queue_work_on+0x1a9/0x1e0 [ 2043.993223][T10208] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 2043.998426][T10208] usb_hcd_submit_urb+0xab7/0x2150 [ 2044.003544][T10208] usb_submit_urb+0x827/0x19b0 [ 2044.008300][T10208] usb_start_wait_urb+0x10e/0x580 [ 2044.013323][T10208] usb_control_msg+0x328/0x4b0 [ 2044.018080][T10208] hub_suspend+0x826/0x9e0 [ 2044.022493][T10208] usb_suspend_both+0x288/0x950 [ 2044.027362][T10208] usb_runtime_suspend+0x49/0x120 [ 2044.032392][T10208] __rpm_callback+0xc8/0x620 [ 2044.036979][T10208] rpm_callback+0x16a/0x1b0 [ 2044.041488][T10208] rpm_suspend+0x2f4/0x11a0 [ 2044.046009][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2044.051128][T10208] usb_runtime_idle+0x7e/0x90 [ 2044.055809][T10208] rpm_idle+0x322/0x790 [ 2044.059962][T10208] pm_runtime_work+0x120/0x150 [ 2044.064729][T10208] process_one_work+0xa23/0x1940 [ 2044.069657][T10208] worker_thread+0x5ef/0xe50 [ 2044.074232][T10208] kthread+0x370/0x450 [ 2044.078305][T10208] ret_from_fork+0x72b/0xd50 [ 2044.082893][T10208] ret_from_fork_asm+0x1a/0x30 [ 2044.087657][T10208] [ 2044.089961][T10208] The buggy address belongs to the object at ffff88802ca20000 [ 2044.089961][T10208] which belongs to the cache kmalloc-8k of size 8192 [ 2044.103998][T10208] The buggy address is located 1716 bytes inside of [ 2044.103998][T10208] freed 8192-byte region [ffff88802ca20000, ffff88802ca22000) [ 2044.117959][T10208] [ 2044.120263][T10208] The buggy address belongs to the physical page: [ 2044.126651][T10208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ca20 [ 2044.135393][T10208] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2044.143874][T10208] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2044.151400][T10208] page_type: f5(slab) [ 2044.155368][T10208] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2044.163957][T10208] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2044.172562][T10208] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2044.181252][T10208] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2044.189917][T10208] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2044.198577][T10208] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2044.207232][T10208] page dumped because: kasan: bad access detected [ 2044.213630][T10208] page_owner tracks the page as allocated [ 2044.219325][T10208] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12793354925, free_ts 0 [ 2044.239031][T10208] post_alloc_hook+0xfd/0x120 [ 2044.243731][T10208] get_page_from_freelist+0xf48/0x3530 [ 2044.249192][T10208] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2044.255086][T10208] new_slab+0xa2/0x640 [ 2044.259151][T10208] refill_objects+0xe3/0x410 [ 2044.263740][T10208] __pcs_replace_empty_main+0x376/0x680 [ 2044.269283][T10208] __kmalloc_noprof+0x66d/0x820 [ 2044.274135][T10208] __usb_create_hcd+0x5e/0xac0 [ 2044.278906][T10208] vhci_hcd_probe+0xf3/0x4e0 [ 2044.283510][T10208] platform_probe+0x106/0x1d0 [ 2044.288178][T10208] really_probe+0x241/0xa60 [ 2044.292678][T10208] __driver_probe_device+0x20e/0x450 [ 2044.297980][T10208] driver_probe_device+0x4a/0x140 [ 2044.303013][T10208] __device_attach_driver+0x1df/0x320 [ 2044.308404][T10208] bus_for_each_drv+0x159/0x1e0 [ 2044.313246][T10208] __device_attach+0x1e4/0x4d0 [ 2044.318010][T10208] page_owner free stack trace missing [ 2044.323362][T10208] [ 2044.325680][T10208] Memory state around the buggy address: [ 2044.331290][T10208] ffff88802ca20580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2044.339334][T10208] ffff88802ca20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2044.347381][T10208] >ffff88802ca20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2044.355422][T10208] ^ [ 2044.361033][T10208] ffff88802ca20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2044.369079][T10208] ffff88802ca20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2044.377118][T10208] ================================================================== [ 2044.385153][T10208] ================================================================== [ 2044.393190][T10208] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x248/0x260 [ 2044.400998][T10208] Read of size 8 at addr ffff88802ca206c0 by task kworker/u8:18/10208 [ 2044.409142][T10208] [ 2044.411454][T10208] CPU: 0 UID: 0 PID: 10208 Comm: kworker/u8:18 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2044.411496][T10208] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2044.411509][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2044.411529][T10208] Workqueue: usbip_event event_handler [ 2044.411561][T10208] Call Trace: [ 2044.411572][T10208] [ 2044.411584][T10208] dump_stack_lvl+0x100/0x190 [ 2044.411615][T10208] print_report+0x13d/0x4b0 [ 2044.411656][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2044.411690][T10208] ? __virt_addr_valid+0x239/0x430 [ 2044.411725][T10208] ? do_raw_spin_lock+0x248/0x260 [ 2044.411761][T10208] kasan_report+0xdf/0x1c0 [ 2044.411791][T10208] ? do_raw_spin_lock+0x248/0x260 [ 2044.411833][T10208] do_raw_spin_lock+0x248/0x260 [ 2044.411869][T10208] ? __kasan_check_byte+0x36/0x50 [ 2044.411897][T10208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2044.411933][T10208] ? lock_acquire+0x132/0x370 [ 2044.411963][T10208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2044.411996][T10208] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2044.412032][T10208] _raw_spin_lock_irqsave+0x42/0x60 [ 2044.412061][T10208] ? event_handler+0x21e/0x570 [ 2044.412090][T10208] event_handler+0x21e/0x570 [ 2044.412121][T10208] process_one_work+0xa23/0x1940 [ 2044.412156][T10208] ? __pfx_process_one_work+0x10/0x10 [ 2044.412182][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2044.412222][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2044.412259][T10208] worker_thread+0x5ef/0xe50 [ 2044.412290][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2044.412318][T10208] ? kthread+0x13a/0x450 [ 2044.412360][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2044.412386][T10208] kthread+0x370/0x450 [ 2044.412428][T10208] ? __pfx_kthread+0x10/0x10 [ 2044.412472][T10208] ret_from_fork+0x72b/0xd50 [ 2044.412509][T10208] ? __pfx_ret_from_fork+0x10/0x10 [ 2044.412546][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2044.412580][T10208] ? __switch_to+0x800/0x10f0 [ 2044.412624][T10208] ? __switch_to_asm+0x39/0x70 [ 2044.412662][T10208] ? __pfx_kthread+0x10/0x10 [ 2044.412706][T10208] ret_from_fork_asm+0x1a/0x30 [ 2044.412754][T10208] [ 2044.412764][T10208] [ 2044.618346][T10208] Allocated by task 1: [ 2044.622390][T10208] kasan_save_stack+0x30/0x50 [ 2044.627070][T10208] kasan_save_track+0x14/0x30 [ 2044.631749][T10208] __kasan_kmalloc+0xaa/0xb0 [ 2044.636339][T10208] __kmalloc_noprof+0x322/0x820 [ 2044.641192][T10208] __usb_create_hcd+0x5e/0xac0 [ 2044.645959][T10208] vhci_hcd_probe+0x1a5/0x4e0 [ 2044.650628][T10208] platform_probe+0x106/0x1d0 [ 2044.655296][T10208] really_probe+0x241/0xa60 [ 2044.659794][T10208] __driver_probe_device+0x20e/0x450 [ 2044.665087][T10208] driver_probe_device+0x4a/0x140 [ 2044.670109][T10208] __device_attach_driver+0x1df/0x320 [ 2044.675477][T10208] bus_for_each_drv+0x159/0x1e0 [ 2044.680316][T10208] __device_attach+0x1e4/0x4d0 [ 2044.685078][T10208] device_initial_probe+0xaf/0xd0 [ 2044.690101][T10208] bus_probe_device+0x64/0x160 [ 2044.694854][T10208] device_add+0x121d/0x1970 [ 2044.699367][T10208] platform_device_add+0x35a/0x800 [ 2044.704465][T10208] platform_device_register_full+0x5cf/0x830 [ 2044.710440][T10208] vhci_hcd_init+0x1a1/0x2f0 [ 2044.715025][T10208] do_one_initcall+0x11d/0x700 [ 2044.719786][T10208] kernel_init_freeable+0x6ea/0x7b0 [ 2044.724981][T10208] kernel_init+0x1f/0x1e0 [ 2044.729316][T10208] ret_from_fork+0x72b/0xd50 [ 2044.733917][T10208] ret_from_fork_asm+0x1a/0x30 [ 2044.738677][T10208] [ 2044.740977][T10208] Freed by task 25523: [ 2044.745023][T10208] kasan_save_stack+0x30/0x50 [ 2044.749707][T10208] kasan_save_track+0x14/0x30 [ 2044.754385][T10208] kasan_save_free_info+0x3b/0x70 [ 2044.759403][T10208] __kasan_slab_free+0x5f/0x80 [ 2044.764152][T10208] kfree+0x22b/0x6c0 [ 2044.768043][T10208] usb_put_hcd+0x149/0x1f0 [ 2044.772471][T10208] vhci_hcd_remove+0xb5/0x1b0 [ 2044.777140][T10208] platform_remove+0x5f/0x80 [ 2044.781715][T10208] device_remove+0xcb/0x180 [ 2044.786211][T10208] device_release_driver_internal+0x44e/0x620 [ 2044.792277][T10208] unbind_store+0xf8/0x110 [ 2044.796682][T10208] drv_attr_store+0x74/0xb0 [ 2044.801170][T10208] sysfs_kf_write+0xf2/0x150 [ 2044.805751][T10208] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2044.811026][T10208] vfs_write+0x6ac/0x1050 [ 2044.815348][T10208] ksys_write+0x12a/0x250 [ 2044.819672][T10208] do_syscall_64+0x115/0x870 [ 2044.824256][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.830136][T10208] [ 2044.832437][T10208] Last potentially related work creation: [ 2044.838125][T10208] kasan_save_stack+0x30/0x50 [ 2044.842804][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2044.847996][T10208] insert_work+0x36/0x230 [ 2044.852337][T10208] __queue_work+0x9bc/0x12b0 [ 2044.856913][T10208] queue_work_on+0x1a9/0x1e0 [ 2044.861489][T10208] usb_hcd_giveback_urb+0x330/0x4a0 [ 2044.866703][T10208] unlink1+0x418/0x510 [ 2044.870775][T10208] usb_hcd_unlink_urb+0x131/0x210 [ 2044.875803][T10208] usb_kill_urb+0x121/0x320 [ 2044.880293][T10208] hub_quiesce+0x1e9/0x320 [ 2044.884705][T10208] hub_suspend+0x4ab/0x9e0 [ 2044.889116][T10208] usb_suspend_both+0x288/0x950 [ 2044.893963][T10208] usb_runtime_suspend+0x49/0x120 [ 2044.898995][T10208] __rpm_callback+0xc8/0x620 [ 2044.903587][T10208] rpm_callback+0x16a/0x1b0 [ 2044.908084][T10208] rpm_suspend+0x2f4/0x11a0 [ 2044.912582][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2044.917692][T10208] usb_runtime_idle+0x7e/0x90 [ 2044.922368][T10208] rpm_idle+0x322/0x790 [ 2044.926532][T10208] pm_runtime_work+0x120/0x150 [ 2044.931297][T10208] process_one_work+0xa23/0x1940 [ 2044.936220][T10208] worker_thread+0x5ef/0xe50 [ 2044.940793][T10208] kthread+0x370/0x450 [ 2044.944880][T10208] ret_from_fork+0x72b/0xd50 [ 2044.949465][T10208] ret_from_fork_asm+0x1a/0x30 [ 2044.954227][T10208] [ 2044.956530][T10208] Second to last potentially related work creation: [ 2044.963087][T10208] kasan_save_stack+0x30/0x50 [ 2044.967767][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2044.972960][T10208] insert_work+0x36/0x230 [ 2044.977296][T10208] __queue_work+0x9bc/0x12b0 [ 2044.981872][T10208] queue_work_on+0x1a9/0x1e0 [ 2044.986450][T10208] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 2044.991650][T10208] usb_hcd_submit_urb+0xab7/0x2150 [ 2044.996764][T10208] usb_submit_urb+0x827/0x19b0 [ 2045.001516][T10208] usb_start_wait_urb+0x10e/0x580 [ 2045.006529][T10208] usb_control_msg+0x328/0x4b0 [ 2045.011279][T10208] hub_suspend+0x826/0x9e0 [ 2045.015690][T10208] usb_suspend_both+0x288/0x950 [ 2045.020538][T10208] usb_runtime_suspend+0x49/0x120 [ 2045.025566][T10208] __rpm_callback+0xc8/0x620 [ 2045.030152][T10208] rpm_callback+0x16a/0x1b0 [ 2045.034652][T10208] rpm_suspend+0x2f4/0x11a0 [ 2045.039154][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2045.044264][T10208] usb_runtime_idle+0x7e/0x90 [ 2045.048943][T10208] rpm_idle+0x322/0x790 [ 2045.053093][T10208] pm_runtime_work+0x120/0x150 [ 2045.057856][T10208] process_one_work+0xa23/0x1940 [ 2045.062780][T10208] worker_thread+0x5ef/0xe50 [ 2045.067381][T10208] kthread+0x370/0x450 [ 2045.071452][T10208] ret_from_fork+0x72b/0xd50 [ 2045.076043][T10208] ret_from_fork_asm+0x1a/0x30 [ 2045.080804][T10208] [ 2045.083105][T10208] The buggy address belongs to the object at ffff88802ca20000 [ 2045.083105][T10208] which belongs to the cache kmalloc-8k of size 8192 [ 2045.097147][T10208] The buggy address is located 1728 bytes inside of [ 2045.097147][T10208] freed 8192-byte region [ffff88802ca20000, ffff88802ca22000) [ 2045.111102][T10208] [ 2045.113405][T10208] The buggy address belongs to the physical page: [ 2045.119792][T10208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ca20 [ 2045.128534][T10208] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2045.137013][T10208] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2045.144543][T10208] page_type: f5(slab) [ 2045.148508][T10208] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2045.157075][T10208] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2045.165646][T10208] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2045.174302][T10208] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2045.182958][T10208] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2045.191616][T10208] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2045.200266][T10208] page dumped because: kasan: bad access detected [ 2045.206653][T10208] page_owner tracks the page as allocated [ 2045.212342][T10208] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12793354925, free_ts 0 [ 2045.232133][T10208] post_alloc_hook+0xfd/0x120 [ 2045.236806][T10208] get_page_from_freelist+0xf48/0x3530 [ 2045.242264][T10208] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2045.248158][T10208] new_slab+0xa2/0x640 [ 2045.252223][T10208] refill_objects+0xe3/0x410 [ 2045.256825][T10208] __pcs_replace_empty_main+0x376/0x680 [ 2045.262366][T10208] __kmalloc_noprof+0x66d/0x820 [ 2045.267218][T10208] __usb_create_hcd+0x5e/0xac0 [ 2045.271982][T10208] vhci_hcd_probe+0xf3/0x4e0 [ 2045.276569][T10208] platform_probe+0x106/0x1d0 [ 2045.281235][T10208] really_probe+0x241/0xa60 [ 2045.285733][T10208] __driver_probe_device+0x20e/0x450 [ 2045.291018][T10208] driver_probe_device+0x4a/0x140 [ 2045.296043][T10208] __device_attach_driver+0x1df/0x320 [ 2045.301414][T10208] bus_for_each_drv+0x159/0x1e0 [ 2045.306254][T10208] __device_attach+0x1e4/0x4d0 [ 2045.311018][T10208] page_owner free stack trace missing [ 2045.316360][T10208] [ 2045.318659][T10208] Memory state around the buggy address: [ 2045.324267][T10208] ffff88802ca20580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2045.332310][T10208] ffff88802ca20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2045.340351][T10208] >ffff88802ca20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2045.348390][T10208] ^ [ 2045.354519][T10208] ffff88802ca20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2045.362563][T10208] ffff88802ca20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2045.370601][T10208] ================================================================== [ 2045.378642][T10208] ================================================================== [ 2045.386682][T10208] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x231/0x260 [ 2045.394485][T10208] Read of size 4 at addr ffff88802ca206b8 by task kworker/u8:18/10208 [ 2045.402617][T10208] [ 2045.404930][T10208] CPU: 0 UID: 0 PID: 10208 Comm: kworker/u8:18 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2045.404972][T10208] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2045.404984][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2045.405005][T10208] Workqueue: usbip_event event_handler [ 2045.405039][T10208] Call Trace: [ 2045.405050][T10208] [ 2045.405062][T10208] dump_stack_lvl+0x100/0x190 [ 2045.405093][T10208] print_report+0x13d/0x4b0 [ 2045.405134][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2045.405168][T10208] ? __virt_addr_valid+0x239/0x430 [ 2045.405204][T10208] ? do_raw_spin_lock+0x231/0x260 [ 2045.405240][T10208] kasan_report+0xdf/0x1c0 [ 2045.405270][T10208] ? do_raw_spin_lock+0x231/0x260 [ 2045.405312][T10208] do_raw_spin_lock+0x231/0x260 [ 2045.405348][T10208] ? __kasan_check_byte+0x36/0x50 [ 2045.405376][T10208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2045.405413][T10208] ? lock_acquire+0x132/0x370 [ 2045.405442][T10208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2045.405475][T10208] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2045.405507][T10208] _raw_spin_lock_irqsave+0x42/0x60 [ 2045.405536][T10208] ? event_handler+0x21e/0x570 [ 2045.405564][T10208] event_handler+0x21e/0x570 [ 2045.405596][T10208] process_one_work+0xa23/0x1940 [ 2045.405632][T10208] ? __pfx_process_one_work+0x10/0x10 [ 2045.405658][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2045.405698][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2045.405735][T10208] worker_thread+0x5ef/0xe50 [ 2045.405767][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2045.405794][T10208] ? kthread+0x13a/0x450 [ 2045.405836][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2045.405862][T10208] kthread+0x370/0x450 [ 2045.405904][T10208] ? __pfx_kthread+0x10/0x10 [ 2045.405949][T10208] ret_from_fork+0x72b/0xd50 [ 2045.405986][T10208] ? __pfx_ret_from_fork+0x10/0x10 [ 2045.406028][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2045.406062][T10208] ? __switch_to+0x800/0x10f0 [ 2045.406106][T10208] ? __switch_to_asm+0x39/0x70 [ 2045.406144][T10208] ? __pfx_kthread+0x10/0x10 [ 2045.406189][T10208] ret_from_fork_asm+0x1a/0x30 [ 2045.406237][T10208] [ 2045.406247][T10208] [ 2045.611850][T10208] Allocated by task 1: [ 2045.615901][T10208] kasan_save_stack+0x30/0x50 [ 2045.620587][T10208] kasan_save_track+0x14/0x30 [ 2045.625285][T10208] __kasan_kmalloc+0xaa/0xb0 [ 2045.629877][T10208] __kmalloc_noprof+0x322/0x820 [ 2045.634730][T10208] __usb_create_hcd+0x5e/0xac0 [ 2045.639494][T10208] vhci_hcd_probe+0x1a5/0x4e0 [ 2045.644161][T10208] platform_probe+0x106/0x1d0 [ 2045.648825][T10208] really_probe+0x241/0xa60 [ 2045.653323][T10208] __driver_probe_device+0x20e/0x450 [ 2045.658602][T10208] driver_probe_device+0x4a/0x140 [ 2045.663629][T10208] __device_attach_driver+0x1df/0x320 [ 2045.669007][T10208] bus_for_each_drv+0x159/0x1e0 [ 2045.673852][T10208] __device_attach+0x1e4/0x4d0 [ 2045.678613][T10208] device_initial_probe+0xaf/0xd0 [ 2045.683650][T10208] bus_probe_device+0x64/0x160 [ 2045.688407][T10208] device_add+0x121d/0x1970 [ 2045.692913][T10208] platform_device_add+0x35a/0x800 [ 2045.698015][T10208] platform_device_register_full+0x5cf/0x830 [ 2045.703994][T10208] vhci_hcd_init+0x1a1/0x2f0 [ 2045.708577][T10208] do_one_initcall+0x11d/0x700 [ 2045.713337][T10208] kernel_init_freeable+0x6ea/0x7b0 [ 2045.718531][T10208] kernel_init+0x1f/0x1e0 [ 2045.722861][T10208] ret_from_fork+0x72b/0xd50 [ 2045.727448][T10208] ret_from_fork_asm+0x1a/0x30 [ 2045.732223][T10208] [ 2045.734525][T10208] Freed by task 25523: [ 2045.738569][T10208] kasan_save_stack+0x30/0x50 [ 2045.743251][T10208] kasan_save_track+0x14/0x30 [ 2045.747929][T10208] kasan_save_free_info+0x3b/0x70 [ 2045.752947][T10208] __kasan_slab_free+0x5f/0x80 [ 2045.757693][T10208] kfree+0x22b/0x6c0 [ 2045.761580][T10208] usb_put_hcd+0x149/0x1f0 [ 2045.765999][T10208] vhci_hcd_remove+0xb5/0x1b0 [ 2045.770679][T10208] platform_remove+0x5f/0x80 [ 2045.775257][T10208] device_remove+0xcb/0x180 [ 2045.779753][T10208] device_release_driver_internal+0x44e/0x620 [ 2045.785820][T10208] unbind_store+0xf8/0x110 [ 2045.790224][T10208] drv_attr_store+0x74/0xb0 [ 2045.794710][T10208] sysfs_kf_write+0xf2/0x150 [ 2045.799306][T10208] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2045.804580][T10208] vfs_write+0x6ac/0x1050 [ 2045.808915][T10208] ksys_write+0x12a/0x250 [ 2045.813239][T10208] do_syscall_64+0x115/0x870 [ 2045.817825][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.823704][T10208] [ 2045.826005][T10208] Last potentially related work creation: [ 2045.831697][T10208] kasan_save_stack+0x30/0x50 [ 2045.836377][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2045.841570][T10208] insert_work+0x36/0x230 [ 2045.845903][T10208] __queue_work+0x9bc/0x12b0 [ 2045.850476][T10208] queue_work_on+0x1a9/0x1e0 [ 2045.855053][T10208] usb_hcd_giveback_urb+0x330/0x4a0 [ 2045.860253][T10208] unlink1+0x418/0x510 [ 2045.864323][T10208] usb_hcd_unlink_urb+0x131/0x210 [ 2045.869351][T10208] usb_kill_urb+0x121/0x320 [ 2045.873837][T10208] hub_quiesce+0x1e9/0x320 [ 2045.878247][T10208] hub_suspend+0x4ab/0x9e0 [ 2045.882657][T10208] usb_suspend_both+0x288/0x950 [ 2045.887519][T10208] usb_runtime_suspend+0x49/0x120 [ 2045.892546][T10208] __rpm_callback+0xc8/0x620 [ 2045.897134][T10208] rpm_callback+0x16a/0x1b0 [ 2045.901633][T10208] rpm_suspend+0x2f4/0x11a0 [ 2045.906149][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2045.911257][T10208] usb_runtime_idle+0x7e/0x90 [ 2045.915934][T10208] rpm_idle+0x322/0x790 [ 2045.920088][T10208] pm_runtime_work+0x120/0x150 [ 2045.924850][T10208] process_one_work+0xa23/0x1940 [ 2045.929773][T10208] worker_thread+0x5ef/0xe50 [ 2045.934346][T10208] kthread+0x370/0x450 [ 2045.938415][T10208] ret_from_fork+0x72b/0xd50 [ 2045.943000][T10208] ret_from_fork_asm+0x1a/0x30 [ 2045.947763][T10208] [ 2045.950062][T10208] Second to last potentially related work creation: [ 2045.956621][T10208] kasan_save_stack+0x30/0x50 [ 2045.961300][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2045.966493][T10208] insert_work+0x36/0x230 [ 2045.970824][T10208] __queue_work+0x9bc/0x12b0 [ 2045.975414][T10208] queue_work_on+0x1a9/0x1e0 [ 2045.979992][T10208] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 2045.985198][T10208] usb_hcd_submit_urb+0xab7/0x2150 [ 2045.990312][T10208] usb_submit_urb+0x827/0x19b0 [ 2045.995064][T10208] usb_start_wait_urb+0x10e/0x580 [ 2046.000077][T10208] usb_control_msg+0x328/0x4b0 [ 2046.004829][T10208] hub_suspend+0x826/0x9e0 [ 2046.009239][T10208] usb_suspend_both+0x288/0x950 [ 2046.014088][T10208] usb_runtime_suspend+0x49/0x120 [ 2046.019125][T10208] __rpm_callback+0xc8/0x620 [ 2046.023713][T10208] rpm_callback+0x16a/0x1b0 [ 2046.028214][T10208] rpm_suspend+0x2f4/0x11a0 [ 2046.032711][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2046.037821][T10208] usb_runtime_idle+0x7e/0x90 [ 2046.042500][T10208] rpm_idle+0x322/0x790 [ 2046.046651][T10208] pm_runtime_work+0x120/0x150 [ 2046.051415][T10208] process_one_work+0xa23/0x1940 [ 2046.056348][T10208] worker_thread+0x5ef/0xe50 [ 2046.060923][T10208] kthread+0x370/0x450 [ 2046.064994][T10208] ret_from_fork+0x72b/0xd50 [ 2046.069583][T10208] ret_from_fork_asm+0x1a/0x30 [ 2046.074358][T10208] [ 2046.076660][T10208] The buggy address belongs to the object at ffff88802ca20000 [ 2046.076660][T10208] which belongs to the cache kmalloc-8k of size 8192 [ 2046.090695][T10208] The buggy address is located 1720 bytes inside of [ 2046.090695][T10208] freed 8192-byte region [ffff88802ca20000, ffff88802ca22000) [ 2046.104649][T10208] [ 2046.106953][T10208] The buggy address belongs to the physical page: [ 2046.113339][T10208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ca20 [ 2046.122095][T10208] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2046.130576][T10208] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2046.138114][T10208] page_type: f5(slab) [ 2046.142082][T10208] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2046.150651][T10208] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2046.159221][T10208] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2046.167881][T10208] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2046.176540][T10208] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2046.185195][T10208] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2046.193842][T10208] page dumped because: kasan: bad access detected [ 2046.200231][T10208] page_owner tracks the page as allocated [ 2046.205922][T10208] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12793354925, free_ts 0 [ 2046.225636][T10208] post_alloc_hook+0xfd/0x120 [ 2046.230317][T10208] get_page_from_freelist+0xf48/0x3530 [ 2046.235782][T10208] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2046.241676][T10208] new_slab+0xa2/0x640 [ 2046.245738][T10208] refill_objects+0xe3/0x410 [ 2046.250325][T10208] __pcs_replace_empty_main+0x376/0x680 [ 2046.255869][T10208] __kmalloc_noprof+0x66d/0x820 [ 2046.260720][T10208] __usb_create_hcd+0x5e/0xac0 [ 2046.265486][T10208] vhci_hcd_probe+0xf3/0x4e0 [ 2046.270066][T10208] platform_probe+0x106/0x1d0 [ 2046.274729][T10208] really_probe+0x241/0xa60 [ 2046.279226][T10208] __driver_probe_device+0x20e/0x450 [ 2046.284508][T10208] driver_probe_device+0x4a/0x140 [ 2046.289529][T10208] __device_attach_driver+0x1df/0x320 [ 2046.294905][T10208] bus_for_each_drv+0x159/0x1e0 [ 2046.299745][T10208] __device_attach+0x1e4/0x4d0 [ 2046.304505][T10208] page_owner free stack trace missing [ 2046.309845][T10208] [ 2046.312145][T10208] Memory state around the buggy address: [ 2046.317751][T10208] ffff88802ca20580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.325792][T10208] ffff88802ca20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.333837][T10208] >ffff88802ca20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.341875][T10208] ^ [ 2046.347744][T10208] ffff88802ca20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.355787][T10208] ffff88802ca20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2046.363826][T10208] ================================================================== [ 2046.371863][T10208] ================================================================== [ 2046.379901][T10208] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x119/0x260 [ 2046.387704][T10208] Write of size 4 at addr ffff88802ca206b0 by task kworker/u8:18/10208 [ 2046.395925][T10208] [ 2046.398235][T10208] CPU: 0 UID: 0 PID: 10208 Comm: kworker/u8:18 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2046.398277][T10208] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2046.398289][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2046.398310][T10208] Workqueue: usbip_event event_handler [ 2046.398340][T10208] Call Trace: [ 2046.398351][T10208] [ 2046.398363][T10208] dump_stack_lvl+0x100/0x190 [ 2046.398394][T10208] print_report+0x13d/0x4b0 [ 2046.398435][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2046.398469][T10208] ? __virt_addr_valid+0x239/0x430 [ 2046.398504][T10208] ? do_raw_spin_lock+0x119/0x260 [ 2046.398540][T10208] kasan_report+0xdf/0x1c0 [ 2046.398570][T10208] ? do_raw_spin_lock+0x119/0x260 [ 2046.398612][T10208] kasan_check_range+0x10f/0x1e0 [ 2046.398646][T10208] do_raw_spin_lock+0x119/0x260 [ 2046.398682][T10208] ? __kasan_check_byte+0x36/0x50 [ 2046.398710][T10208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2046.398746][T10208] ? lock_acquire+0x132/0x370 [ 2046.398778][T10208] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2046.398810][T10208] _raw_spin_lock_irqsave+0x42/0x60 [ 2046.398839][T10208] ? event_handler+0x21e/0x570 [ 2046.398867][T10208] event_handler+0x21e/0x570 [ 2046.398898][T10208] process_one_work+0xa23/0x1940 [ 2046.398933][T10208] ? __pfx_process_one_work+0x10/0x10 [ 2046.398960][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2046.398999][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2046.399040][T10208] worker_thread+0x5ef/0xe50 [ 2046.399072][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2046.399100][T10208] ? kthread+0x13a/0x450 [ 2046.399142][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2046.399168][T10208] kthread+0x370/0x450 [ 2046.399210][T10208] ? __pfx_kthread+0x10/0x10 [ 2046.399254][T10208] ret_from_fork+0x72b/0xd50 [ 2046.399291][T10208] ? __pfx_ret_from_fork+0x10/0x10 [ 2046.399328][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2046.399362][T10208] ? __switch_to+0x800/0x10f0 [ 2046.399406][T10208] ? __switch_to_asm+0x39/0x70 [ 2046.399444][T10208] ? __pfx_kthread+0x10/0x10 [ 2046.399488][T10208] ret_from_fork_asm+0x1a/0x30 [ 2046.399536][T10208] [ 2046.399546][T10208] [ 2046.604260][T10208] Allocated by task 1: [ 2046.608304][T10208] kasan_save_stack+0x30/0x50 [ 2046.612986][T10208] kasan_save_track+0x14/0x30 [ 2046.617678][T10208] __kasan_kmalloc+0xaa/0xb0 [ 2046.622271][T10208] __kmalloc_noprof+0x322/0x820 [ 2046.627137][T10208] __usb_create_hcd+0x5e/0xac0 [ 2046.631905][T10208] vhci_hcd_probe+0x1a5/0x4e0 [ 2046.636577][T10208] platform_probe+0x106/0x1d0 [ 2046.641243][T10208] really_probe+0x241/0xa60 [ 2046.645739][T10208] __driver_probe_device+0x20e/0x450 [ 2046.651026][T10208] driver_probe_device+0x4a/0x140 [ 2046.656045][T10208] __device_attach_driver+0x1df/0x320 [ 2046.661415][T10208] bus_for_each_drv+0x159/0x1e0 [ 2046.666254][T10208] __device_attach+0x1e4/0x4d0 [ 2046.671018][T10208] device_initial_probe+0xaf/0xd0 [ 2046.676041][T10208] bus_probe_device+0x64/0x160 [ 2046.680797][T10208] device_add+0x121d/0x1970 [ 2046.685301][T10208] platform_device_add+0x35a/0x800 [ 2046.690400][T10208] platform_device_register_full+0x5cf/0x830 [ 2046.696377][T10208] vhci_hcd_init+0x1a1/0x2f0 [ 2046.700956][T10208] do_one_initcall+0x11d/0x700 [ 2046.705714][T10208] kernel_init_freeable+0x6ea/0x7b0 [ 2046.710910][T10208] kernel_init+0x1f/0x1e0 [ 2046.715240][T10208] ret_from_fork+0x72b/0xd50 [ 2046.719825][T10208] ret_from_fork_asm+0x1a/0x30 [ 2046.724584][T10208] [ 2046.726897][T10208] Freed by task 25523: [ 2046.730942][T10208] kasan_save_stack+0x30/0x50 [ 2046.735635][T10208] kasan_save_track+0x14/0x30 [ 2046.740315][T10208] kasan_save_free_info+0x3b/0x70 [ 2046.745334][T10208] __kasan_slab_free+0x5f/0x80 [ 2046.750082][T10208] kfree+0x22b/0x6c0 [ 2046.753969][T10208] usb_put_hcd+0x149/0x1f0 [ 2046.758389][T10208] vhci_hcd_remove+0xb5/0x1b0 [ 2046.763058][T10208] platform_remove+0x5f/0x80 [ 2046.767635][T10208] device_remove+0xcb/0x180 [ 2046.772130][T10208] device_release_driver_internal+0x44e/0x620 [ 2046.778198][T10208] unbind_store+0xf8/0x110 [ 2046.782603][T10208] drv_attr_store+0x74/0xb0 [ 2046.787089][T10208] sysfs_kf_write+0xf2/0x150 [ 2046.791671][T10208] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2046.796945][T10208] vfs_write+0x6ac/0x1050 [ 2046.801266][T10208] ksys_write+0x12a/0x250 [ 2046.805588][T10208] do_syscall_64+0x115/0x870 [ 2046.810172][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.816052][T10208] [ 2046.818352][T10208] Last potentially related work creation: [ 2046.824041][T10208] kasan_save_stack+0x30/0x50 [ 2046.828718][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2046.833910][T10208] insert_work+0x36/0x230 [ 2046.838240][T10208] __queue_work+0x9bc/0x12b0 [ 2046.842814][T10208] queue_work_on+0x1a9/0x1e0 [ 2046.847406][T10208] usb_hcd_giveback_urb+0x330/0x4a0 [ 2046.852608][T10208] unlink1+0x418/0x510 [ 2046.856677][T10208] usb_hcd_unlink_urb+0x131/0x210 [ 2046.861703][T10208] usb_kill_urb+0x121/0x320 [ 2046.866192][T10208] hub_quiesce+0x1e9/0x320 [ 2046.870616][T10208] hub_suspend+0x4ab/0x9e0 [ 2046.875027][T10208] usb_suspend_both+0x288/0x950 [ 2046.879876][T10208] usb_runtime_suspend+0x49/0x120 [ 2046.884904][T10208] __rpm_callback+0xc8/0x620 [ 2046.889489][T10208] rpm_callback+0x16a/0x1b0 [ 2046.893990][T10208] rpm_suspend+0x2f4/0x11a0 [ 2046.898491][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2046.903602][T10208] usb_runtime_idle+0x7e/0x90 [ 2046.908282][T10208] rpm_idle+0x322/0x790 [ 2046.912432][T10208] pm_runtime_work+0x120/0x150 [ 2046.917196][T10208] process_one_work+0xa23/0x1940 [ 2046.922117][T10208] worker_thread+0x5ef/0xe50 [ 2046.926706][T10208] kthread+0x370/0x450 [ 2046.930777][T10208] ret_from_fork+0x72b/0xd50 [ 2046.935361][T10208] ret_from_fork_asm+0x1a/0x30 [ 2046.940125][T10208] [ 2046.942426][T10208] Second to last potentially related work creation: [ 2046.948983][T10208] kasan_save_stack+0x30/0x50 [ 2046.953664][T10208] kasan_record_aux_stack+0xa7/0xc0 [ 2046.958870][T10208] insert_work+0x36/0x230 [ 2046.963204][T10208] __queue_work+0x9bc/0x12b0 [ 2046.967780][T10208] queue_work_on+0x1a9/0x1e0 [ 2046.972356][T10208] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 2046.977556][T10208] usb_hcd_submit_urb+0xab7/0x2150 [ 2046.982670][T10208] usb_submit_urb+0x827/0x19b0 [ 2046.987423][T10208] usb_start_wait_urb+0x10e/0x580 [ 2046.992437][T10208] usb_control_msg+0x328/0x4b0 [ 2046.997190][T10208] hub_suspend+0x826/0x9e0 [ 2047.001600][T10208] usb_suspend_both+0x288/0x950 [ 2047.006450][T10208] usb_runtime_suspend+0x49/0x120 [ 2047.011477][T10208] __rpm_callback+0xc8/0x620 [ 2047.016061][T10208] rpm_callback+0x16a/0x1b0 [ 2047.020562][T10208] rpm_suspend+0x2f4/0x11a0 [ 2047.025062][T10208] __pm_runtime_suspend+0xba/0x1a0 [ 2047.030172][T10208] usb_runtime_idle+0x7e/0x90 [ 2047.034850][T10208] rpm_idle+0x322/0x790 [ 2047.039012][T10208] pm_runtime_work+0x120/0x150 [ 2047.043782][T10208] process_one_work+0xa23/0x1940 [ 2047.048704][T10208] worker_thread+0x5ef/0xe50 [ 2047.053280][T10208] kthread+0x370/0x450 [ 2047.057350][T10208] ret_from_fork+0x72b/0xd50 [ 2047.061934][T10208] ret_from_fork_asm+0x1a/0x30 [ 2047.066694][T10208] [ 2047.068993][T10208] The buggy address belongs to the object at ffff88802ca20000 [ 2047.068993][T10208] which belongs to the cache kmalloc-8k of size 8192 [ 2047.083032][T10208] The buggy address is located 1712 bytes inside of [ 2047.083032][T10208] freed 8192-byte region [ffff88802ca20000, ffff88802ca22000) [ 2047.096985][T10208] [ 2047.099288][T10208] The buggy address belongs to the physical page: [ 2047.105674][T10208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ca20 [ 2047.114417][T10208] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2047.122896][T10208] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2047.130421][T10208] page_type: f5(slab) [ 2047.134401][T10208] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2047.142972][T10208] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2047.151543][T10208] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 2047.160198][T10208] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2047.168855][T10208] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2047.177509][T10208] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2047.186155][T10208] page dumped because: kasan: bad access detected [ 2047.192542][T10208] page_owner tracks the page as allocated [ 2047.198233][T10208] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12793354925, free_ts 0 [ 2047.217935][T10208] post_alloc_hook+0xfd/0x120 [ 2047.222622][T10208] get_page_from_freelist+0xf48/0x3530 [ 2047.228094][T10208] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2047.233990][T10208] new_slab+0xa2/0x640 [ 2047.238059][T10208] refill_objects+0xe3/0x410 [ 2047.242648][T10208] __pcs_replace_empty_main+0x376/0x680 [ 2047.248189][T10208] __kmalloc_noprof+0x66d/0x820 [ 2047.253040][T10208] __usb_create_hcd+0x5e/0xac0 [ 2047.257805][T10208] vhci_hcd_probe+0xf3/0x4e0 [ 2047.262386][T10208] platform_probe+0x106/0x1d0 [ 2047.267053][T10208] really_probe+0x241/0xa60 [ 2047.271558][T10208] __driver_probe_device+0x20e/0x450 [ 2047.276845][T10208] driver_probe_device+0x4a/0x140 [ 2047.281865][T10208] __device_attach_driver+0x1df/0x320 [ 2047.287237][T10208] bus_for_each_drv+0x159/0x1e0 [ 2047.292078][T10208] __device_attach+0x1e4/0x4d0 [ 2047.296837][T10208] page_owner free stack trace missing [ 2047.302178][T10208] [ 2047.304479][T10208] Memory state around the buggy address: [ 2047.310084][T10208] ffff88802ca20580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2047.318127][T10208] ffff88802ca20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2047.326170][T10208] >ffff88802ca20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2047.334208][T10208] ^ [ 2047.339815][T10208] ffff88802ca20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2047.347870][T10208] ffff88802ca20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2047.355908][T10208] ================================================================== [ 2047.363947][T10208] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 2047.371648][T10208] CPU: 0 UID: 0 PID: 10208 Comm: kworker/u8:18 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2047.382841][T10208] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2047.388360][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2047.398417][T10208] Workqueue: usbip_event event_handler [ 2047.403888][T10208] Call Trace: [ 2047.407155][T10208] [ 2047.410073][T10208] dump_stack_lvl+0x100/0x190 [ 2047.414746][T10208] vpanic+0x552/0x970 [ 2047.418805][T10208] ? __pfx_vpanic+0x10/0x10 [ 2047.423306][T10208] ? do_raw_spin_lock+0x119/0x260 [ 2047.428330][T10208] panic+0xd1/0xe0 [ 2047.432045][T10208] ? __pfx_panic+0x10/0x10 [ 2047.436457][T10208] ? end_report.part.0+0x23/0x90 [ 2047.441397][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2047.447032][T10208] ? rcu_is_watching+0x12/0xc0 [ 2047.451805][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2047.457435][T10208] ? lock_release+0x24d/0x310 [ 2047.462110][T10208] end_report.part.0+0x68/0x90 [ 2047.466878][T10208] kasan_report.cold+0xe/0x18 [ 2047.471560][T10208] ? do_raw_spin_lock+0x119/0x260 [ 2047.476591][T10208] kasan_check_range+0x10f/0x1e0 [ 2047.481526][T10208] do_raw_spin_lock+0x119/0x260 [ 2047.486377][T10208] ? __kasan_check_byte+0x36/0x50 [ 2047.491392][T10208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2047.496764][T10208] ? lock_acquire+0x132/0x370 [ 2047.501437][T10208] ? _raw_spin_lock_irqsave+0x52/0x60 [ 2047.506804][T10208] _raw_spin_lock_irqsave+0x42/0x60 [ 2047.511996][T10208] ? event_handler+0x21e/0x570 [ 2047.516753][T10208] event_handler+0x21e/0x570 [ 2047.521339][T10208] process_one_work+0xa23/0x1940 [ 2047.526275][T10208] ? __pfx_process_one_work+0x10/0x10 [ 2047.531635][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2047.537287][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2047.542924][T10208] worker_thread+0x5ef/0xe50 [ 2047.547512][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2047.552616][T10208] ? kthread+0x13a/0x450 [ 2047.556863][T10208] ? __pfx_worker_thread+0x10/0x10 [ 2047.561965][T10208] kthread+0x370/0x450 [ 2047.566042][T10208] ? __pfx_kthread+0x10/0x10 [ 2047.570644][T10208] ret_from_fork+0x72b/0xd50 [ 2047.575235][T10208] ? __pfx_ret_from_fork+0x10/0x10 [ 2047.580346][T10208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2047.585975][T10208] ? __switch_to+0x800/0x10f0 [ 2047.590661][T10208] ? __switch_to_asm+0x39/0x70 [ 2047.595430][T10208] ? __pfx_kthread+0x10/0x10 [ 2047.600028][T10208] ret_from_fork_asm+0x1a/0x30 [ 2047.604806][T10208] [ 2047.607852][T10208] Kernel Offset: disabled [ 2047.612166][T10208] Rebooting in 86400 seconds..