last executing test programs: 2m9.219633979s ago: executing program 0 (id=1): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x145402, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x8d, @empty, 0x7fff}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r5 = socket$inet6(0x10, 0x2, 0x3ff) sendmsg(r5, 0x0, 0x0) write(r5, &(0x7f0000000040)="1c000000210025", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) 1m59.187055386s ago: executing program 0 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x9, 0x0, 0x0, 0x541}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 1m51.149576524s ago: executing program 0 (id=17): recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000780)=""/77, 0x4d}, {0x0}, {0x0}, {0x0}], 0x5}, 0x4}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 1m49.311393498s ago: executing program 0 (id=24): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x0, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) capget(0x0, &(0x7f0000000480)={0x1, 0x6, 0x40, 0x1ff, 0x5, 0x2}) 1m33.98653789s ago: executing program 32 (id=24): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x0, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) capget(0x0, &(0x7f0000000480)={0x1, 0x6, 0x40, 0x1ff, 0x5, 0x2}) 20.518475468s ago: executing program 2 (id=145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000500)=""/223, 0xdf}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/97, 0x61}], 0x8) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) 14.364580353s ago: executing program 4 (id=150): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 13.024574446s ago: executing program 4 (id=153): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 12.92200819s ago: executing program 3 (id=154): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x0, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) capget(0x0, &(0x7f0000000480)={0x1, 0x6, 0x40, 0x1ff, 0x5, 0x2}) 12.163935002s ago: executing program 3 (id=155): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7", 0x89}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e", 0x96}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, 0x0, 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.457790074s ago: executing program 2 (id=157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x80c01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @link_local, 'hsr0\x00'}}, 0x1e) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000005000000a30cff"]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000b40)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100767469000c00028008000400e000000108000a00", @ANYRES32=r2, @ANYBLOB="64094074cf27dc37f6dadefe4711d3e2502963c226fcdf3a83f092da24bcadc243b1adfecb19b336c43a80befa901d5d54286ed26a1339894150730f00000000000000e661f64393c6c4be26121b03e21ce2839ae4b935c9470426bc665d4ac1aebe6549dfa630fec92d7fbfea6373b335762ba3cec5ae"], 0x40}}, 0x440b0) 10.256807387s ago: executing program 3 (id=159): recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x4}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 9.02564917s ago: executing program 3 (id=160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d2"], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 8.88549132s ago: executing program 1 (id=161): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0xfffc, 0x17, "615c479e3adf6750"}) 7.583962654s ago: executing program 4 (id=162): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x0, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) capget(0x0, &(0x7f0000000480)={0x1, 0x6, 0x40, 0x1ff, 0x5, 0x2}) 7.575446604s ago: executing program 1 (id=163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4000000, {{0x2, 0x4e20, @loopback}}}, 0x88) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x20048050) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) kexec_load(0x8000, 0x1, &(0x7f0000001300)=[{0x0, 0x0, 0x800, 0x2}], 0x380001) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400a, &(0x7f0000006680)) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x100, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) write(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000080}, 0x42) kexec_load(0x6, 0x8, &(0x7f0000002700)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="99167086a9fe2012774c179367db2460ebaf7942e3dccf698fbd1a90c840d9de7a4f5063975482aea9c16c4e0d275e27cd1fd7a60a9e2b04beabdc273a017d44ba3a70dbe56b6c287a98", 0x4a, 0x762a3bbc, 0x2}, {&(0x7f00000023c0)="e4058b5ab474f3932b18aecd3d1b21809f73567f2abe24c936e1011f17851adf13591f44a94004b97c53ed7e44b9efc463d6610aa7dfac0da42189a346f055807d7b3711280e6dd0b917cc", 0x4b, 0xfffffffc, 0xffff73a5}, {&(0x7f0000002480)="239d0bc9d47fc1aedbf2e37cef12f74ad5267b1f9f2036f767629c30e51ddc2cdce3dbf747c2d44a787d3c40f0ed2141738ba074ff4ba07aa40d8b6f13492e74b878a3ad8b6ec62634ea60fdcb8c3c8bd6994ca2e65ff920a2b427d937f371c52ed4fe12b1bbd9ec1ecb88cdf37f310906015be501ee558fa428bb120a8f82e580d57f6196c6eb95a1eed5fcf39bf784379fa59b3b12c36f406b805c4138b3abc9bebc4c73d588cb6c9e93b462118dd5b6347361b73ff64989c23817a20c9e98c7518bffc145af1a4624316f2bd29519e43e3237e3624a1b5f16f7eaf97f93f19f3b8f15a8dae547c3241971613fe5ee8714a6c9", 0xf4, 0x5}, {0x0, 0x0, 0x1ff}, {&(0x7f00000025c0)="bca0cc6fe7bd9a9fea19b4db4cde5036860f9f6060d267f9d7d6a24620f6a00771716dba478eb55b545d74a717e2ef802468a9395b500dcc5dac585664f23a839dff511177c83968b75005577c8900c2cbaa417e150ffd", 0x57, 0x0, 0x1}, {&(0x7f0000002640)="070ab2d17f8fab2e79e012c8355f5d1eaf7229ed69d7042101cee3409fd36176e9fd18b842603168cfa853aa1747608e2e9f4476186cd64f95372cb07c9d", 0x3e, 0x8585, 0x6}, {&(0x7f0000002680)="993066c43f5c2a996fadb5a79ee10174fa397d58a9e1e40e4523bac6a44c23899c550f8edef81ec2d5e061ba1f02e57055d059ba6778eb8ae06106bb95df1ecd5381d862a970acfca150252d01d1886dc30608e1ead643a4a8ba0f9f", 0x5c, 0xd15, 0x10000}], 0x160000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="2e003300d000003605021100000108021100000050505050505000000f03"], 0x54}}, 0x0) 6.970900566s ago: executing program 2 (id=164): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ed", 0x67}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e5f89", 0x98}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac1414320000"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.709884574s ago: executing program 4 (id=165): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x10d040) write$sndseq(r3, &(0x7f0000000400)=[{0x19, 0x3, 0x1, 0x0, @time={0x5}, {0x3, 0xdc}, {0x5, 0x9}, @control={0x8, 0x3ff, 0x6}}, {0x4, 0x2, 0xe, 0xf, @time={0x3ff, 0x10}, {0x5, 0x4}, {0x2, 0x4}, @raw32={[0x1, 0x0, 0x5]}}, {0x3, 0xa0, 0x7, 0x3, @tick=0x100, {0x4, 0xf4}, {0x2, 0x2}, @connect={{0x5, 0x3}, {0x3, 0x10}}}, {0x40, 0x4, 0x9, 0x14, @tick=0x40, {0xe, 0x6}, {0xe7, 0x8}, @connect={{0x4}, {0x8, 0x2}}}, {0x0, 0x6, 0x6, 0x15, @tick=0x7, {0x7f, 0xd}, {0x8, 0xac}, @note={0x7f, 0x5, 0x5b, 0xf9}}, {0x8, 0x6, 0xcf, 0x0, @time={0x4800000, 0x7fffffff}, {0x6}, {0x81, 0x6}, @raw32={[0x6c, 0x8, 0x5]}}, {0x0, 0x81, 0x6, 0x7, @tick=0x4, {0x0, 0x4}, {0x2, 0x40}, @queue={0xa, {0xa, 0x88fe}}}, {0x7, 0x2, 0x3, 0xf6, @time={0x4cd7, 0x4}, {0xfb, 0x53}, {0x5, 0xa1}, @queue={0x57, {0x71d, 0x4}}}, {0x3f, 0xd, 0x7, 0x7f, @time={0x5eeb, 0x9}, {0x9, 0x9}, {0x8, 0x7}, @result={0x5dc8, 0x4}}, {0x0, 0x6, 0x53, 0x7, @time={0x4c6, 0x2}, {0x2, 0x9}, {0x9, 0x39}, @addr={0x4, 0x7}}], 0x118) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.1594736s ago: executing program 1 (id=166): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 5.732951392s ago: executing program 1 (id=167): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x166, &(0x7f0000000440)="$eJzs2rFKw0AYB/BPGq3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BH6Oimi4MvEUlzhCQWzSDmhP9vyZ9+afLlEr7pWv7Ya7OgRbQ3uT153/THXr1jH/ZZm/Uo1iWiehTmYXiv0xevSX0ekr7khHJtf8THxu5QHF8zlztW2S0BAAAAAAAAAAAAAAAAAAAAAEBBzZoMtZHwrpjLnXaqGjS0sx7njh+kflz/4xZL1azLPVzEBH+I1sfOnnC6IYMrjvyobmb/fyfDzkjwt/z6GhfexAims5br9YbO0Dm3LLtj7pvmgWUsrmXkr9h8lD3RPHwydQqlpJ7ab/ZSZL+ZfP/alituLvN3C6Yz+f4VCCtqtFEwVIhIgTZUCl1NsS/q34QKKdFGKiQjYm3pVNF+nDuqqK3Gx0HVbjxH80/vj/lAFhfPWqVfWjN5J8qWynpwAPjeZwAAAP//YO838g==") openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x23}], 0x2) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) write$UHID_INPUT(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000400)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) 5.601835691s ago: executing program 4 (id=168): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x6, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x600) 5.529465642s ago: executing program 2 (id=169): recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/77, 0x4d}, {0x0}, {0x0}], 0x3}, 0x4}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 3.974719997s ago: executing program 3 (id=170): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000000)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xbe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000638477fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x3}, 0x50) 3.726152909s ago: executing program 2 (id=171): syz_open_dev$dmmidi(0x0, 0x200, 0x40002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xddf}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.585030711s ago: executing program 1 (id=172): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000000000000000000000000000000000038e9692e9886b40bd62a4d7583fa924e9d9b28230d6f4815d379dc8c482e393126f40ee7eed590d90a", @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84e}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0x40) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffe}, 0x1c) r6 = dup(r5) sendto$packet(r6, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 2.529130527s ago: executing program 4 (id=173): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xf) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) ftruncate(r1, 0xa75) 2.466435955s ago: executing program 3 (id=174): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6", 0x8b}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 833.958µs ago: executing program 1 (id=175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80600, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='children\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4f, 0x4e) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) io_uring_enter(0xffffffffffffffff, 0xd, 0x7929, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xb840c58f) close(0x3) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6}) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, 0x0) openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r6, r5, 0x0, 0x7ffffffd) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$kcm(0x10, 0x2, 0x4) 0s ago: executing program 2 (id=176): syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80800) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000680)={0x25, &(0x7f0000000500)}) getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x8001, 0x8000, 0x8, 0x2, 0x9, 0x8, 0x7fffffff, {0x0, @in={{0x2, 0x4e20, @local}}, 0x55, 0x5, 0x8001, 0x72, 0x8}}, &(0x7f00000003c0)=0xb0) setuid(0xee01) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x19c, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x64, 0x2, {{'cbc(twofish)\x00'}, 0xe0, "1a000b0000849a7390450024000000004403000000c3d6db74b38500"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 50.393634][ T5282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.411388][ T5282] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. syzkaller login: [ 75.105301][ T5608] cgroup: Unknown subsys name 'net' [ 75.347042][ T5608] cgroup: Unknown subsys name 'cpuset' [ 75.412005][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.057571][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.408626][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.454888][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.474059][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.474903][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.490819][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.492181][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.493422][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.493715][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.528197][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.548686][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.560560][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.561425][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.567044][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.567747][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.571015][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.571345][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.578010][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.586061][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.589482][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.597758][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.599267][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.600718][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.708958][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.741832][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.792241][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.672731][ T5632] Bluetooth: hci3: command tx timeout [ 81.832277][ T5629] Bluetooth: hci0: command tx timeout [ 81.833460][ T5632] Bluetooth: hci1: command tx timeout [ 81.833466][ T5629] Bluetooth: hci4: command tx timeout [ 81.921944][ T5629] Bluetooth: hci2: command tx timeout [ 82.182120][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.182922][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.183396][ T5622] bridge_slave_0: entered allmulticast mode [ 82.185287][ T5622] bridge_slave_0: entered promiscuous mode [ 82.195816][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.196078][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.196290][ T5620] bridge_slave_0: entered allmulticast mode [ 82.199791][ T5620] bridge_slave_0: entered promiscuous mode [ 82.257752][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.258002][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.258203][ T5622] bridge_slave_1: entered allmulticast mode [ 82.260634][ T5622] bridge_slave_1: entered promiscuous mode [ 82.273389][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.273731][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.273955][ T5620] bridge_slave_1: entered allmulticast mode [ 82.277290][ T5620] bridge_slave_1: entered promiscuous mode [ 82.316937][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.317095][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.320610][ T5624] bridge_slave_0: entered allmulticast mode [ 82.325375][ T5624] bridge_slave_0: entered promiscuous mode [ 82.376572][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.376758][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.376902][ T5623] bridge_slave_0: entered allmulticast mode [ 82.378602][ T5623] bridge_slave_0: entered promiscuous mode [ 82.427931][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.428090][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.428224][ T5624] bridge_slave_1: entered allmulticast mode [ 82.429939][ T5624] bridge_slave_1: entered promiscuous mode [ 82.472225][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.472527][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.472754][ T5623] bridge_slave_1: entered allmulticast mode [ 82.474738][ T5623] bridge_slave_1: entered promiscuous mode [ 82.524166][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.528393][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.548803][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.549071][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.549280][ T5621] bridge_slave_0: entered allmulticast mode [ 82.552900][ T5621] bridge_slave_0: entered promiscuous mode [ 82.580543][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.586629][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.606821][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.607016][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.607321][ T5621] bridge_slave_1: entered allmulticast mode [ 82.609210][ T5621] bridge_slave_1: entered promiscuous mode [ 82.623595][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.662421][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.689162][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.723653][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.763015][ T5622] team0: Port device team_slave_0 added [ 82.766826][ T5620] team0: Port device team_slave_0 added [ 82.791266][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.812567][ T5622] team0: Port device team_slave_1 added [ 82.815063][ T5620] team0: Port device team_slave_1 added [ 82.846163][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.852178][ T5624] team0: Port device team_slave_0 added [ 82.886206][ T5623] team0: Port device team_slave_0 added [ 82.907941][ T5624] team0: Port device team_slave_1 added [ 82.943662][ T5623] team0: Port device team_slave_1 added [ 82.987061][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.987072][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.987085][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.989461][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.989469][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.989481][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.016593][ T5621] team0: Port device team_slave_0 added [ 83.043046][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.043061][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.043085][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.046033][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.046046][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.046068][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.073793][ T5621] team0: Port device team_slave_1 added [ 83.075794][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.075805][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.075828][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.108415][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.108430][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.108453][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.135707][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.135722][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.135744][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.150001][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.150015][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.150038][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.214636][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.214652][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.214675][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.277260][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.277275][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.277298][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.369920][ T5622] hsr_slave_0: entered promiscuous mode [ 83.372613][ T5622] hsr_slave_1: entered promiscuous mode [ 83.387520][ T5620] hsr_slave_0: entered promiscuous mode [ 83.389867][ T5620] hsr_slave_1: entered promiscuous mode [ 83.392346][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 83.392450][ T5620] Cannot create hsr debugfs directory [ 83.751665][ T5629] Bluetooth: hci3: command tx timeout [ 83.911677][ T5629] Bluetooth: hci1: command tx timeout [ 83.911706][ T5629] Bluetooth: hci0: command tx timeout [ 83.921749][ T5632] Bluetooth: hci4: command tx timeout [ 83.992052][ T5632] Bluetooth: hci2: command tx timeout [ 84.087688][ T5624] hsr_slave_0: entered promiscuous mode [ 84.088890][ T5624] hsr_slave_1: entered promiscuous mode [ 84.089907][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 84.089929][ T5624] Cannot create hsr debugfs directory [ 84.104686][ T5623] hsr_slave_0: entered promiscuous mode [ 84.106668][ T5623] hsr_slave_1: entered promiscuous mode [ 84.108452][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 84.108473][ T5623] Cannot create hsr debugfs directory [ 84.246252][ T5621] hsr_slave_0: entered promiscuous mode [ 84.247494][ T5621] hsr_slave_1: entered promiscuous mode [ 84.248478][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 84.248500][ T5621] Cannot create hsr debugfs directory [ 84.948583][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.995451][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.011246][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.058830][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.084439][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.124005][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.155605][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.197683][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.294131][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.326713][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.332259][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.366868][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.380398][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.410671][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.437479][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.469226][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.604793][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.652124][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.658745][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.696083][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.718429][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.757691][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.763568][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.797457][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.842065][ T5632] Bluetooth: hci3: command tx timeout [ 85.908870][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.936278][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.958157][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.977703][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.991743][ T5629] Bluetooth: hci0: command tx timeout [ 85.991769][ T5629] Bluetooth: hci1: command tx timeout [ 85.991868][ T5632] Bluetooth: hci4: command tx timeout [ 85.996246][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.037918][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.063847][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.071708][ T5632] Bluetooth: hci2: command tx timeout [ 86.097557][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.206868][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.255759][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.294785][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.313289][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.356773][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.370813][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.405057][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.410607][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.445813][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.496953][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.553708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.553856][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.587124][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.619814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.620171][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.741295][ T37] cfg80211: failed to load regulatory.db [ 86.805397][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.867880][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.880668][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.880806][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.940508][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.940659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.027414][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.073004][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.115063][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.115296][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.206898][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.207014][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.269548][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.322290][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.351345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.356777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.418479][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.426739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.568558][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.667307][ T489] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.668907][ T489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.740962][ T489] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.741074][ T489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.917419][ T5632] Bluetooth: hci3: command tx timeout [ 88.007376][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.074953][ T5632] Bluetooth: hci4: command tx timeout [ 88.074983][ T5626] Bluetooth: hci1: command tx timeout [ 88.074993][ T5632] Bluetooth: hci0: command tx timeout [ 88.152714][ T5629] Bluetooth: hci2: command tx timeout [ 88.680576][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.122850][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.293885][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.323614][ T5622] veth0_vlan: entered promiscuous mode [ 89.332864][ T5620] veth0_vlan: entered promiscuous mode [ 89.350073][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.400562][ T5622] veth1_vlan: entered promiscuous mode [ 89.414806][ T5620] veth1_vlan: entered promiscuous mode [ 89.526461][ T5624] veth0_vlan: entered promiscuous mode [ 89.585136][ T5623] veth0_vlan: entered promiscuous mode [ 89.606716][ T5624] veth1_vlan: entered promiscuous mode [ 89.627198][ T5622] veth0_macvtap: entered promiscuous mode [ 89.636184][ T5620] veth0_macvtap: entered promiscuous mode [ 89.650078][ T5621] veth0_vlan: entered promiscuous mode [ 89.666757][ T5622] veth1_macvtap: entered promiscuous mode [ 89.678945][ T5620] veth1_macvtap: entered promiscuous mode [ 89.685956][ T5623] veth1_vlan: entered promiscuous mode [ 89.720754][ T5621] veth1_vlan: entered promiscuous mode [ 89.773698][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.776645][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.830823][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.848295][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.875512][ T5624] veth0_macvtap: entered promiscuous mode [ 89.907170][ T3337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.924037][ T5624] veth1_macvtap: entered promiscuous mode [ 89.930797][ T3337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.954189][ T5623] veth0_macvtap: entered promiscuous mode [ 89.960314][ T489] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.975357][ T489] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.992436][ T489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.076579][ T489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.077856][ T5623] veth1_macvtap: entered promiscuous mode [ 90.107898][ T5621] veth0_macvtap: entered promiscuous mode [ 90.111036][ T489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.137835][ T489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.297557][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.298790][ T5621] veth1_macvtap: entered promiscuous mode [ 90.481540][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.621210][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.645846][ T489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.652646][ T489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.674567][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.675865][ T489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.704577][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.728538][ T489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.774368][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.776005][ T1302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.780381][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.780397][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.894662][ T1302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.913276][ T1302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.932542][ T1302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007978][ T1302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074690][ T1302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.117076][ T1302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.120384][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.120400][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.158336][ T1302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.330380][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.330398][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.532465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.532485][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.997580][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.997596][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.203876][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.203895][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.385544][ T3388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.385563][ T3388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.891865][ T489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.891881][ T489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.033509][ T489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.033528][ T489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.609358][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.278820][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.278839][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.737454][ T5837] binder: 5826:5837 ioctl 541b 0 returned -22 [ 99.096846][ T37] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 99.096975][ T37] usb 5-1: can't read configurations, error -71 [ 102.415010][ T5866] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 102.493800][ T5866] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.094440][ T5856] lo speed is unknown, defaulting to 1000 [ 103.400394][ T5856] lo speed is unknown, defaulting to 1000 [ 103.671521][ T5856] lo speed is unknown, defaulting to 1000 [ 103.778931][ T5856] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 103.779034][ T5856] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 103.779089][ T5856] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 104.017775][ T5856] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.451334][ T5856] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.536672][ T38] audit: type=1326 audit(1778053127.423:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f791783cdd9 code=0x0 [ 111.053123][ T5856] lo speed is unknown, defaulting to 1000 [ 111.107179][ T5856] lo speed is unknown, defaulting to 1000 [ 111.155332][ T5856] lo speed is unknown, defaulting to 1000 [ 111.298700][ T5856] lo speed is unknown, defaulting to 1000 [ 111.323088][ T5856] lo speed is unknown, defaulting to 1000 [ 112.303061][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.549770][ T5629] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 112.549814][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.549848][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.549862][ T5629] Workqueue: hci3 hci_rx_work [ 112.549901][ T5629] Call Trace: [ 112.549909][ T5629] [ 112.549918][ T5629] dump_stack_lvl+0xe8/0x150 [ 112.549948][ T5629] sysfs_create_dir_ns+0x271/0x2a0 [ 112.549972][ T5629] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.550004][ T5629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.550031][ T5629] ? rt_spin_unlock+0x160/0x200 [ 112.550064][ T5629] kobject_add_internal+0x631/0xd10 [ 112.550101][ T5629] kobject_add+0x163/0x240 [ 112.550133][ T5629] ? __pfx_kobject_add+0x10/0x10 [ 112.550166][ T5629] ? get_device_parent+0x370/0x3a0 [ 112.550196][ T5629] device_add+0x408/0xb90 [ 112.550227][ T5629] hci_conn_add_sysfs+0xd5/0x210 [ 112.550253][ T5629] le_conn_complete_evt+0x10e6/0x16b0 [ 112.550292][ T5629] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.550321][ T5629] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.550345][ T5629] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.550370][ T5629] ? skb_pull_data+0xfb/0x200 [ 112.550400][ T5629] hci_le_conn_complete_evt+0x187/0x470 [ 112.550435][ T5629] hci_event_packet+0x659/0xef0 [ 112.550464][ T5629] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.550492][ T5629] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.550517][ T5629] ? __pfx_hci_event_packet+0x10/0x10 [ 112.550537][ T5629] ? rt_spin_unlock+0x14f/0x200 [ 112.550575][ T5629] ? hci_send_to_monitor+0xe2/0x590 [ 112.550605][ T5629] hci_rx_work+0x3ee/0x1040 [ 112.550634][ T5629] ? process_one_work+0x8b7/0x1710 [ 112.550656][ T5629] process_one_work+0x9a3/0x1710 [ 112.550698][ T5629] ? __pfx_process_one_work+0x10/0x10 [ 112.550718][ T5629] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.550753][ T5629] worker_thread+0xba8/0x11e0 [ 112.550800][ T5629] kthread+0x388/0x470 [ 112.550828][ T5629] ? __pfx_worker_thread+0x10/0x10 [ 112.550858][ T5629] ? __pfx_kthread+0x10/0x10 [ 112.550888][ T5629] ret_from_fork+0x514/0xb70 [ 112.550917][ T5629] ? __pfx_ret_from_fork+0x10/0x10 [ 112.550939][ T5629] ? __switch_to+0xc79/0x1410 [ 112.550961][ T5629] ? __pfx_kthread+0x10/0x10 [ 112.550990][ T5629] ret_from_fork_asm+0x1a/0x30 [ 112.551033][ T5629] [ 112.551062][ T5629] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.551097][ T5629] Bluetooth: hci3: failed to register connection device [ 120.444763][ T5963] binder: 5951:5963 ioctl 541b 0 returned -22 [ 122.736774][ T5982] binder: BINDER_SET_CONTEXT_MGR already set [ 122.736784][ T5982] binder: 5974:5982 ioctl 4018620d 200000000040 returned -16 [ 124.341471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.653487][ T5994] syz.2.41 (5994) used greatest stack depth: 18824 bytes left [ 128.106309][ T6021] binder: 6018:6021 ioctl c0285840 200000000000 returned -22 [ 128.157674][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.875001][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 128.902979][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 128.903007][ T10] usb 2-1: config 0 has no interface number 0 [ 128.903050][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.903073][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.903092][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.903134][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.903156][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.271182][ T10] usb 2-1: config 0 descriptor?? [ 132.499527][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 133.455562][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.479604][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.482339][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.489284][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.490781][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.846812][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.846934][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.221869][ T10] usb 2-1: USB disconnect, device number 2 [ 136.748744][ T5632] Bluetooth: hci5: command tx timeout [ 137.870919][ T6070] Zero length message leads to an empty skb [ 137.871629][ T822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.027861][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 138.040141][ T822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.042939][ T822] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.042965][ T822] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.042984][ T822] usb 3-1: Product: syz [ 138.042995][ T822] usb 3-1: Manufacturer: syz [ 138.043009][ T822] usb 3-1: SerialNumber: syz [ 138.070558][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 138.232635][ T822] usb 3-1: config 0 descriptor?? [ 138.239670][ T6063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.319510][ T822] hub 3-1:0.0: bad descriptor, ignoring hub [ 138.319547][ T822] hub 3-1:0.0: probe with driver hub failed with error -5 [ 138.420291][ T6078] loop4: detected capacity change from 0 to 512 [ 138.830057][ T6078] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 138.830128][ T6078] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 138.877169][ T5632] Bluetooth: hci5: command tx timeout [ 139.095519][ T6085] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET) [ 139.144440][ T6084] syzkaller0: entered promiscuous mode [ 139.144464][ T6084] syzkaller0: entered allmulticast mode [ 139.303460][ T6078] EXT4-fs (loop4): 1 truncate cleaned up [ 139.326297][ T6028] lo speed is unknown, defaulting to 1000 [ 139.494395][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.688737][ T822] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 139.989376][ T6063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.250830][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.252025][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.438172][ T159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.484722][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.485318][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.735080][ T822] usb 3-1: USB disconnect, device number 2 [ 140.951903][ T5632] Bluetooth: hci5: command tx timeout [ 142.474429][ T6081] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 143.814183][ T5632] Bluetooth: hci5: command tx timeout [ 147.473388][ T159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.775484][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.129598][ T6130] siw: device registration error -23 [ 149.508489][ T159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.591465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.611449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.621448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.631447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.641446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.651454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.661447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.671447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.111470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.561588][ T5631] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.724259][ T5631] usb 4-1: Using ep0 maxpacket: 32 [ 151.729153][ T5631] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 151.735702][ T5631] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.735729][ T5631] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.735748][ T5631] usb 4-1: Product: syz [ 151.735761][ T5631] usb 4-1: Manufacturer: syz [ 151.735775][ T5631] usb 4-1: SerialNumber: syz [ 151.752121][ T5631] usb 4-1: config 0 descriptor?? [ 151.753143][ T6139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.787721][ T5631] hub 4-1:0.0: bad descriptor, ignoring hub [ 151.816063][ T5631] hub 4-1:0.0: probe with driver hub failed with error -5 [ 152.201885][ T159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.293221][ T5633] usb 4-1: USB disconnect, device number 2 [ 153.095999][ T5633] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.324767][ T5633] usb 4-1: Using ep0 maxpacket: 32 [ 153.521281][ T6158] siw: device registration error -23 [ 154.287984][ T5633] usb 4-1: device descriptor read/all, error -71 [ 154.510585][ T38] audit: type=1326 audit(1778053175.393:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.2.82" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f791783cdd9 code=0x0 [ 156.601858][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.751576][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 156.754188][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.754212][ T10] usb 5-1: config 0 has no interface number 0 [ 156.754252][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.754275][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 156.754297][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.754321][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 156.754343][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.754384][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.754406][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.875025][ T10] usb 5-1: config 0 descriptor?? [ 157.108471][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 157.121680][ T6186] netlink: 'syz.3.92': attribute type 17 has an invalid length. [ 157.121699][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 157.294417][ T6174] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 157.494912][ T5742] usb 5-1: USB disconnect, device number 4 [ 159.004777][ T5742] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 159.877833][ T6202] loop1: detected capacity change from 0 to 131072 [ 159.995043][ T159] bridge_slave_1: left allmulticast mode [ 159.995179][ T159] bridge_slave_1: left promiscuous mode [ 160.046931][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.146273][ T6202] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 160.168455][ T6202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 163.410500][ T6212] F2FS-fs (loop1): access invalid blkaddr:0 [ 163.410537][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.1.95 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.410565][ T6212] Tainted: [L]=SOFTLOCKUP [ 163.410572][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.410584][ T6212] Call Trace: [ 163.410591][ T6212] [ 163.410600][ T6212] dump_stack_lvl+0xe8/0x150 [ 163.410633][ T6212] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 163.410676][ T6212] sanity_check_extent_cache+0x1a3/0x620 [ 163.410705][ T6212] ? f2fs_sanity_check_inline_data+0x75/0x780 [ 163.410725][ T6212] ? set_nlink+0x5f/0x170 [ 163.410749][ T6212] f2fs_iget+0x3c2b/0x5a10 [ 163.410800][ T6212] f2fs_lookup+0x3ff/0x9c0 [ 163.410821][ T6212] ? make_vfsuid+0x49/0xa0 [ 163.410851][ T6212] ? generic_permission+0x2e4/0x690 [ 163.410873][ T6212] ? __pfx_f2fs_lookup+0x10/0x10 [ 163.410901][ T6212] ? security_inode_permission+0xb7/0x2e0 [ 163.410923][ T6212] ? may_o_create+0x2d2/0x370 [ 163.410949][ T6212] ? bpf_lsm_inode_create+0x9/0x20 [ 163.410987][ T6212] path_openat+0x11cb/0x38a0 [ 163.411048][ T6212] ? __pfx_path_openat+0x10/0x10 [ 163.411090][ T6212] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.411125][ T6212] do_file_open+0x23e/0x4a0 [ 163.411151][ T6212] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.411179][ T6212] ? __pfx_do_file_open+0x10/0x10 [ 163.411202][ T6212] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 163.411256][ T6212] ? alloc_fd+0x64e/0x6c0 [ 163.411289][ T6212] do_sys_openat2+0x113/0x200 [ 163.411311][ T6212] ? __se_sys_futex+0x3a8/0x450 [ 163.411332][ T6212] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.411359][ T6212] ? rcu_is_watching+0x15/0xb0 [ 163.411379][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.411399][ T6212] __x64_sys_open+0x11e/0x150 [ 163.411422][ T6212] do_syscall_64+0x15f/0xf80 [ 163.411445][ T6212] ? clear_bhb_loop+0x40/0x90 [ 163.411469][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.411489][ T6212] RIP: 0033:0x7fa5c472cdd9 [ 163.411524][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.411540][ T6212] RSP: 002b:00007fa5c20f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 163.411562][ T6212] RAX: ffffffffffffffda RBX: 00007fa5c49a6360 RCX: 00007fa5c472cdd9 [ 163.411577][ T6212] RDX: 0000000000000002 RSI: 0000000000060840 RDI: 00002000009e1000 [ 163.411589][ T6212] RBP: 00007fa5c47c2d69 R08: 0000000000000000 R09: 0000000000000000 [ 163.411601][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.411612][ T6212] R13: 00007fa5c49a63f8 R14: 00007fa5c49a6360 R15: 00007ffeaba5a9c8 [ 163.411642][ T6212] [ 163.412119][ T6212] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 163.419125][ T6214] F2FS-fs (loop1): access invalid blkaddr:0 [ 163.419150][ T6214] CPU: 0 UID: 0 PID: 6214 Comm: syz.1.95 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.419177][ T6214] Tainted: [L]=SOFTLOCKUP [ 163.419183][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.419194][ T6214] Call Trace: [ 163.419202][ T6214] [ 163.419210][ T6214] dump_stack_lvl+0xe8/0x150 [ 163.419246][ T6214] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 163.419280][ T6214] sanity_check_extent_cache+0x1a3/0x620 [ 163.419306][ T6214] ? f2fs_sanity_check_inline_data+0x75/0x780 [ 163.419327][ T6214] ? set_nlink+0x5f/0x170 [ 163.419348][ T6214] f2fs_iget+0x3c2b/0x5a10 [ 163.419393][ T6214] f2fs_lookup+0x3ff/0x9c0 [ 163.419419][ T6214] ? __pfx_f2fs_lookup+0x10/0x10 [ 163.419440][ T6214] ? __pfx_d_alloc_parallel+0x10/0x10 [ 163.419462][ T6214] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 163.419492][ T6214] ? __rt_spin_lock_init+0x3e/0x50 [ 163.419516][ T6214] ? __init_waitqueue_head+0xae/0x160 [ 163.419545][ T6214] __lookup_slow+0x2d2/0x440 [ 163.419568][ T6214] ? __pfx___lookup_slow+0x10/0x10 [ 163.419586][ T6214] ? __rwbase_read_lock+0x126/0x180 [ 163.419621][ T6214] ? down_read+0x132/0x200 [ 163.419643][ T6214] ? __pfx_down_read+0x10/0x10 [ 163.419677][ T6214] ? lookup_fast+0x1a3/0x5b0 [ 163.419704][ T6214] lookup_slow+0x53/0x70 [ 163.419727][ T6214] path_lookupat+0x3f5/0x8c0 [ 163.419763][ T6214] filename_lookup+0x256/0x5d0 [ 163.419789][ T6214] ? __pfx_filename_lookup+0x10/0x10 [ 163.419833][ T6214] ? strncpy_from_user+0x150/0x2b0 [ 163.419858][ T6214] ? do_getname+0x151/0x250 [ 163.419878][ T6214] do_fchmodat+0xe4/0x230 [ 163.419903][ T6214] ? __pfx_do_fchmodat+0x10/0x10 [ 163.419925][ T6214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.419950][ T6214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.419969][ T6214] __x64_sys_chmod+0x62/0x70 [ 163.419987][ T6214] do_syscall_64+0x15f/0xf80 [ 163.420011][ T6214] ? clear_bhb_loop+0x40/0x90 [ 163.420034][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.420052][ T6214] RIP: 0033:0x7fa5c472cdd9 [ 163.420070][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.420086][ T6214] RSP: 002b:00007fa5c18b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 163.420106][ T6214] RAX: ffffffffffffffda RBX: 00007fa5c49a6540 RCX: 00007fa5c472cdd9 [ 163.420121][ T6214] RDX: 0000000000000000 RSI: 00000000000003dc RDI: 0000200000000100 [ 163.420133][ T6214] RBP: 00007fa5c47c2d69 R08: 0000000000000000 R09: 0000000000000000 [ 163.420144][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.420155][ T6214] R13: 00007fa5c49a65d8 R14: 00007fa5c49a6540 R15: 00007ffeaba5a9c8 [ 163.420185][ T6214] [ 163.420438][ T6214] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 163.426434][ T6215] F2FS-fs (loop1): access invalid blkaddr:0 [ 163.426460][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.1.95 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.426487][ T6215] Tainted: [L]=SOFTLOCKUP [ 163.426493][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.426505][ T6215] Call Trace: [ 163.426512][ T6215] [ 163.426520][ T6215] dump_stack_lvl+0xe8/0x150 [ 163.426552][ T6215] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 163.426585][ T6215] sanity_check_extent_cache+0x1a3/0x620 [ 163.426611][ T6215] ? f2fs_sanity_check_inline_data+0x75/0x780 [ 163.426631][ T6215] ? set_nlink+0x5f/0x170 [ 163.426652][ T6215] f2fs_iget+0x3c2b/0x5a10 [ 163.426702][ T6215] f2fs_lookup+0x3ff/0x9c0 [ 163.426729][ T6215] ? __pfx_f2fs_lookup+0x10/0x10 [ 163.426750][ T6215] ? __pfx_d_alloc_parallel+0x10/0x10 [ 163.426774][ T6215] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 163.426806][ T6215] ? __rt_spin_lock_init+0x3e/0x50 [ 163.426832][ T6215] ? __init_waitqueue_head+0xae/0x160 [ 163.426865][ T6215] __lookup_slow+0x2d2/0x440 [ 163.426892][ T6215] ? __pfx___lookup_slow+0x10/0x10 [ 163.426920][ T6215] ? __rwbase_read_lock+0x126/0x180 [ 163.426958][ T6215] ? down_read+0x132/0x200 [ 163.426982][ T6215] ? __pfx_down_read+0x10/0x10 [ 163.427009][ T6215] ? lookup_fast+0x1a3/0x5b0 [ 163.427037][ T6215] lookup_slow+0x53/0x70 [ 163.427061][ T6215] path_lookupat+0x3f5/0x8c0 [ 163.427100][ T6215] filename_lookup+0x256/0x5d0 [ 163.427128][ T6215] ? __pfx_filename_lookup+0x10/0x10 [ 163.427176][ T6215] ? strncpy_from_user+0x150/0x2b0 [ 163.427202][ T6215] ? do_getname+0x151/0x250 [ 163.427224][ T6215] do_fchmodat+0xe4/0x230 [ 163.427250][ T6215] ? __pfx_do_fchmodat+0x10/0x10 [ 163.427281][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.427303][ T6215] __x64_sys_chmod+0x62/0x70 [ 163.427322][ T6215] do_syscall_64+0x15f/0xf80 [ 163.427346][ T6215] ? clear_bhb_loop+0x40/0x90 [ 163.427370][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.427389][ T6215] RIP: 0033:0x7fa5c472cdd9 [ 163.427408][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.427423][ T6215] RSP: 002b:00007fa5c148d028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 163.427443][ T6215] RAX: ffffffffffffffda RBX: 00007fa5c49a6630 RCX: 00007fa5c472cdd9 [ 163.427455][ T6215] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000200000000000 [ 163.427468][ T6215] RBP: 00007fa5c47c2d69 R08: 0000000000000000 R09: 0000000000000000 [ 163.427481][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.427493][ T6215] R13: 00007fa5c49a66c8 R14: 00007fa5c49a6630 R15: 00007ffeaba5a9c8 [ 163.427523][ T6215] [ 163.428908][ T6215] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 163.433379][ T6213] F2FS-fs (loop1): access invalid blkaddr:0 [ 163.433403][ T6213] CPU: 0 UID: 0 PID: 6213 Comm: syz.1.95 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.433430][ T6213] Tainted: [L]=SOFTLOCKUP [ 163.433437][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.433448][ T6213] Call Trace: [ 163.433456][ T6213] [ 163.433464][ T6213] dump_stack_lvl+0xe8/0x150 [ 163.433493][ T6213] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 163.433526][ T6213] sanity_check_extent_cache+0x1a3/0x620 [ 163.433553][ T6213] ? f2fs_sanity_check_inline_data+0x75/0x780 [ 163.433573][ T6213] ? set_nlink+0x5f/0x170 [ 163.433596][ T6213] f2fs_iget+0x3c2b/0x5a10 [ 163.433641][ T6213] f2fs_lookup+0x3ff/0x9c0 [ 163.433701][ T6213] ? __pfx_f2fs_lookup+0x10/0x10 [ 163.433722][ T6213] ? __pfx_d_alloc_parallel+0x10/0x10 [ 163.433745][ T6213] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 163.433772][ T6213] ? __rt_spin_lock_init+0x3e/0x50 [ 163.433796][ T6213] ? __init_waitqueue_head+0xae/0x160 [ 163.433827][ T6213] __lookup_slow+0x2d2/0x440 [ 163.433853][ T6213] ? __pfx___lookup_slow+0x10/0x10 [ 163.433874][ T6213] ? __rwbase_read_lock+0x126/0x180 [ 163.433910][ T6213] ? down_read+0x132/0x200 [ 163.433933][ T6213] ? __pfx_down_read+0x10/0x10 [ 163.433958][ T6213] ? lookup_fast+0x1a3/0x5b0 [ 163.433986][ T6213] lookup_slow+0x53/0x70 [ 163.434008][ T6213] path_lookupat+0x3f5/0x8c0 [ 163.434043][ T6213] filename_lookup+0x256/0x5d0 [ 163.434068][ T6213] ? __pfx_filename_lookup+0x10/0x10 [ 163.434111][ T6213] ? strncpy_from_user+0x150/0x2b0 [ 163.434137][ T6213] ? do_getname+0x151/0x250 [ 163.434158][ T6213] user_path_at+0x40/0x160 [ 163.434181][ T6213] __se_sys_mount+0x2dc/0x420 [ 163.434208][ T6213] ? __pfx___se_sys_mount+0x10/0x10 [ 163.434227][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.434252][ T6213] ? __x64_sys_mount+0x20/0xc0 [ 163.434271][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.434290][ T6213] do_syscall_64+0x15f/0xf80 [ 163.434313][ T6213] ? clear_bhb_loop+0x40/0x90 [ 163.434335][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.434354][ T6213] RIP: 0033:0x7fa5c472cdd9 [ 163.434370][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.434386][ T6213] RSP: 002b:00007fa5c1cd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.434405][ T6213] RAX: ffffffffffffffda RBX: 00007fa5c49a6450 RCX: 00007fa5c472cdd9 [ 163.434419][ T6213] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 163.434432][ T6213] RBP: 00007fa5c47c2d69 R08: 0000200000000080 R09: 0000000000000000 [ 163.434444][ T6213] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 163.434456][ T6213] R13: 00007fa5c49a64e8 R14: 00007fa5c49a6450 R15: 00007ffeaba5a9c8 [ 163.434486][ T6213] [ 163.434539][ T6213] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 163.586825][ T38] audit: type=1804 audit(1778053183.063:4): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.95" name="/newroot/26/file1/bus" dev="loop1" ino=10 res=1 errno=0 [ 163.792102][ T159] bridge_slave_0: left allmulticast mode [ 163.792136][ T159] bridge_slave_0: left promiscuous mode [ 163.793623][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.921548][ T5742] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.073769][ T5742] usb 3-1: Using ep0 maxpacket: 8 [ 168.077165][ T5742] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 168.077208][ T5742] usb 3-1: config 0 has no interface number 0 [ 168.077249][ T5742] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.077262][ T5742] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 168.077275][ T5742] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.077287][ T5742] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 168.077298][ T5742] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.077320][ T5742] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 168.077331][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.425669][ T5742] usb 3-1: config 0 descriptor?? [ 168.445519][ T5742] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 168.738953][ T5631] usb 3-1: USB disconnect, device number 3 [ 168.771306][ T6248] netlink: 'syz.3.106': attribute type 17 has an invalid length. [ 168.771319][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 168.822415][ T5631] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 171.030050][ T6262] loop1: detected capacity change from 0 to 24 [ 171.044663][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.086516][ T6251] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 171.086542][ T6251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.224562][ T38] audit: type=1326 audit(1778053192.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68f2d3cdd9 code=0x0 [ 171.331287][ T6262] random: crng reseeded on system resumption [ 171.403847][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.450135][ T6251] vhci_hcd vhci_hcd.0: Device attached [ 171.470589][ T159] bond0 (unregistering): Released all slaves [ 172.913276][ T5631] usb 42-1: SetAddress Request (2) to port 0 [ 172.913357][ T5631] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 172.995635][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.995896][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.996141][ T6028] bridge_slave_0: entered allmulticast mode [ 173.020454][ T6028] bridge_slave_0: entered promiscuous mode [ 173.077457][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.085439][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.085746][ T6028] bridge_slave_1: entered allmulticast mode [ 173.128481][ T6028] bridge_slave_1: entered promiscuous mode [ 173.134047][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.303391][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 173.304959][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.304983][ T10] usb 2-1: config 0 has no interface number 0 [ 173.305023][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.305046][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.305070][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.305090][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.305112][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.305123][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.354010][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.389855][ T10] usb 2-1: config 0 descriptor?? [ 173.400355][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.472020][ T4948] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.522615][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 173.635306][ T4948] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 173.635338][ T4948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.678020][ T4948] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.678050][ T4948] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.678069][ T4948] usb 4-1: Product: syz [ 173.678082][ T4948] usb 4-1: Manufacturer: syz [ 173.678096][ T4948] usb 4-1: SerialNumber: syz [ 173.726490][ T4948] usb 4-1: config 0 descriptor?? [ 173.727630][ T6274] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 173.819093][ T4948] usb 4-1: selecting invalid altsetting 0 [ 174.051337][ T5742] usb 2-1: USB disconnect, device number 3 [ 174.183390][ T5742] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 176.974033][ T4948] usb 4-1: USB disconnect, device number 5 [ 177.010509][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 177.785284][ T6028] team0: Port device team_slave_0 added [ 180.446402][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 180.471190][ T6028] team0: Port device team_slave_1 added [ 180.658311][ T6161] udevd[6161]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.680657][ T6260] vhci_hcd: connection reset by peer [ 180.779063][ T6319] loop1: detected capacity change from 0 to 24 [ 180.824688][ T3331] vhci_hcd vhci_hcd.4: stop threads [ 180.825471][ T3331] vhci_hcd vhci_hcd.4: release socket [ 180.905737][ T5631] usb 42-1: device descriptor read/8, error -110 [ 180.905777][ T3331] vhci_hcd vhci_hcd.4: disconnect device [ 181.075773][ T6319] random: crng reseeded on system resumption [ 181.336506][ T5631] usb usb42-port1: attempt power cycle [ 181.559579][ T6324] netlink: 'syz.2.121': attribute type 17 has an invalid length. [ 181.559599][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 181.760849][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 181.815191][ T5633] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.866424][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.866435][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.866448][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.921922][ T5631] usb usb42-port1: unable to enumerate USB device [ 182.001535][ T5633] usb 5-1: Using ep0 maxpacket: 8 [ 182.003525][ T5633] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.003548][ T5633] usb 5-1: config 0 has no interface number 0 [ 182.003587][ T5633] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.003608][ T5633] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.003631][ T5633] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.003663][ T5633] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.003700][ T5633] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.003722][ T5633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.006786][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.006795][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.006808][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.680094][ T5633] usb 5-1: config 0 descriptor?? [ 184.201217][ T5633] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 184.303579][ T5633] usb 5-1: USB disconnect, device number 5 [ 184.358619][ T6028] hsr_slave_0: entered promiscuous mode [ 184.650944][ T6028] hsr_slave_1: entered promiscuous mode [ 185.240706][ T5633] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 185.244043][ T6028] debugfs: 'hsr0' already exists in 'hsr' [ 185.244066][ T6028] Cannot create hsr debugfs directory [ 186.189256][ T159] hsr_slave_0: left promiscuous mode [ 186.317523][ T159] hsr_slave_1: left promiscuous mode [ 186.635069][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.685012][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.947829][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.947846][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.076434][ T6358] loop1: detected capacity change from 0 to 24 [ 187.135402][ T6358] random: crng reseeded on system resumption [ 187.439844][ T159] veth1_macvtap: left promiscuous mode [ 187.448078][ T159] veth0_macvtap: left promiscuous mode [ 187.448284][ T159] veth1_vlan: left promiscuous mode [ 187.448508][ T159] veth0_vlan: left promiscuous mode [ 191.638484][ T6379] netlink: 'syz.1.134': attribute type 17 has an invalid length. [ 191.638505][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 191.832359][ T159] team0 (unregistering): Port device team_slave_1 removed [ 191.882263][ T159] team0 (unregistering): Port device team_slave_0 removed [ 192.288258][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.379343][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.381256][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.391242][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.399414][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.489765][ T5629] Bluetooth: hci4: command tx timeout [ 197.231604][ T5629] Bluetooth: hci4: command tx timeout [ 197.390075][ T38] audit: type=1326 audit(1778053218.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.132" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f791783cdd9 code=0x0 [ 199.078937][ T6437] loop4: detected capacity change from 0 to 256 [ 199.102127][ T6437] exfat: Bad value for 'uid' [ 199.102139][ T6437] exfat: Bad value for 'uid' [ 199.275236][ T5629] Bluetooth: hci4: command tx timeout [ 199.428075][ T6437] loop4: detected capacity change from 0 to 512 [ 199.834889][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.834993][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.516823][ T5629] Bluetooth: hci4: command tx timeout [ 201.711952][ T6437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.464222][ T6446] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #12: comm syz.4.143: checksumming directory block 0 [ 203.571152][ T38] audit: type=1800 audit(1778053223.983:7): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 203.665208][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 204.208371][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.213481][ T6383] lo speed is unknown, defaulting to 1000 [ 204.656554][ T9] libceph: connect (1)[c::]:6789 error -97 [ 204.788180][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 204.797146][ T6452] ceph: No mds server is up or the cluster is laggy [ 205.127976][ T5859] libceph: connect (1)[c::]:6789 error -97 [ 205.268230][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 205.546775][ T5859] libceph: connect (1)[c::]:6789 error -97 [ 205.582542][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 206.554115][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 206.564168][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 206.564197][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 206.567920][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 206.646714][ T5633] libceph: connect (1)[c::]:6789 error -97 [ 206.646832][ T5633] libceph: mon0 (1)[c::]:6789 connect error [ 206.694384][ T146] bridge_slave_1: left allmulticast mode [ 206.694418][ T146] bridge_slave_1: left promiscuous mode [ 206.698279][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.829416][ T146] bridge_slave_0: left allmulticast mode [ 206.829448][ T146] bridge_slave_0: left promiscuous mode [ 206.834954][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.909102][ T5629] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 207.485272][ T6486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 207.485300][ T6486] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.516404][ T6486] vhci_hcd vhci_hcd.0: Device attached [ 207.814196][ T5742] usb 38-1: SetAddress Request (2) to port 0 [ 207.814246][ T5742] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 207.835696][ T6495] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 207.872647][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.946986][ T6497] program syz.3.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.003215][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.072040][ T146] bond0 (unregistering): Released all slaves [ 208.494635][ T6495] bond1: entered promiscuous mode [ 208.495598][ T6495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.545454][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 208.799558][ T6502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.799848][ T6502] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 208.799861][ T6502] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 208.809780][ T6502] bond1: (slave vti0): making interface the new active one [ 208.809802][ T6502] vti0: entered promiscuous mode [ 208.814433][ T6502] bond1: (slave vti0): Enslaving as an active interface with an up link [ 208.840270][ T823] libceph: connect (1)[c::]:6789 error -101 [ 208.858113][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 208.886292][ T823] libceph: connect (1)[c::]:6789 error -101 [ 208.886485][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 208.922801][ T6508] ceph: No mds server is up or the cluster is laggy [ 209.265278][ T146] hsr_slave_0: left promiscuous mode [ 209.342980][ T146] hsr_slave_1: left promiscuous mode [ 209.345546][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.402984][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.153187][ T6490] vhci_hcd: connection reset by peer [ 210.157722][ T1302] vhci_hcd vhci_hcd.2: stop threads [ 210.157744][ T1302] vhci_hcd vhci_hcd.2: release socket [ 210.230500][ T1302] vhci_hcd vhci_hcd.2: disconnect device [ 210.328767][ T5632] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 210.340035][ T6531] loop1: detected capacity change from 0 to 24 [ 211.909155][ T6538] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 211.982134][ T146] team0 (unregistering): Port device team_slave_1 removed [ 212.029867][ T6540] program syz.2.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.090889][ T146] team0 (unregistering): Port device team_slave_0 removed [ 212.311524][ T5740] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 212.461507][ T5740] usb 2-1: Using ep0 maxpacket: 8 [ 212.463961][ T5740] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.463984][ T5740] usb 2-1: config 0 has no interface number 0 [ 212.464017][ T5740] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.464036][ T5740] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.464054][ T5740] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.464074][ T5740] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.464107][ T5740] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.464133][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.561804][ T5740] usb 2-1: config 0 descriptor?? [ 212.592511][ T5740] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.789711][ T5740] usb 2-1: USB disconnect, device number 4 [ 212.830966][ T5740] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 212.878547][ T5742] usb 38-1: device descriptor read/8, error -110 [ 213.093859][ T6520] syzkaller0: entered promiscuous mode [ 213.093889][ T6520] syzkaller0: entered allmulticast mode [ 213.109502][ T6538] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 213.264813][ T5742] usb usb38-port1: attempt power cycle [ 213.537152][ T6555] siw: device registration error -23 [ 214.570219][ T5742] usb usb38-port1: unable to enumerate USB device [ 215.444098][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 216.795865][ T6586] loop1: detected capacity change from 0 to 24 [ 219.817524][ T6608] loop4: detected capacity change from 0 to 2048 [ 220.029472][ T5632] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 220.250151][ T6608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.413601][ T6630] ------------[ cut here ]------------ [ 222.413615][ T6630] within_last_ext && elen > ((loff_t)offset + 1) << inode->i_blkbits [ 222.413631][ T6630] WARNING: fs/udf/inode.c:683 at udf_setsize+0xdf5/0x10b0, CPU#1: syz.4.173/6630 [ 222.413670][ T6630] Modules linked in: [ 222.413692][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.4.173 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.413721][ T6630] Tainted: [L]=SOFTLOCKUP [ 222.413728][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.413740][ T6630] RIP: 0010:udf_setsize+0xdf5/0x10b0 [ 222.413788][ T6630] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f9 0a 75 fe 45 89 f4 e9 2a fe ff ff e8 ec 0a 75 fe 90 <0f> 0b 90 e9 8a f7 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 9f f2 ff ff [ 222.413805][ T6630] RSP: 0018:ffffc9000558faa0 EFLAGS: 00010283 [ 222.413823][ T6630] RAX: ffffffff834fa014 RBX: ffff8880406636d8 RCX: 0000000000080000 [ 222.413838][ T6630] RDX: ffffc9000fd69000 RSI: 0000000000000531 RDI: 0000000000000532 [ 222.413851][ T6630] RBP: ffffc9000558fc00 R08: 0000000000000000 R09: 0000000000000000 [ 222.413864][ T6630] R10: dffffc0000000000 R11: fffffbfff1f152bf R12: 0000000000000001 [ 222.413878][ T6630] R13: 1ffff92000ab1f68 R14: 0000000000000c00 R15: 0000000000001000 [ 222.413892][ T6630] FS: 00007f68f0f546c0(0000) GS:ffff888126025000(0000) knlGS:0000000000000000 [ 222.413909][ T6630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.413923][ T6630] CR2: 0000200000000040 CR3: 000000003b6d0000 CR4: 00000000003526f0 [ 222.413943][ T6630] Call Trace: [ 222.413951][ T6630] [ 222.413978][ T6630] ? __pfx_udf_setsize+0x10/0x10 [ 222.414018][ T6630] udf_setattr+0x3a2/0x5a0 [ 222.414041][ T6630] ? __pfx_udf_setattr+0x10/0x10 [ 222.414068][ T6630] notify_change+0xc18/0xf60 [ 222.414109][ T6630] do_truncate+0x1c2/0x250 [ 222.414140][ T6630] ? __pfx_do_truncate+0x10/0x10 [ 222.414193][ T6630] do_ftruncate+0x49c/0x550 [ 222.414225][ T6630] ? __pfx_do_ftruncate+0x10/0x10 [ 222.414254][ T6630] ? __fget_files+0x2a/0x420 [ 222.414278][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.414302][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.414323][ T6630] __x64_sys_ftruncate+0x8f/0xe0 [ 222.414352][ T6630] do_syscall_64+0x15f/0xf80 [ 222.414375][ T6630] ? trace_irq_disable+0x3b/0x140 [ 222.414402][ T6630] ? clear_bhb_loop+0x40/0x90 [ 222.414427][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.414447][ T6630] RIP: 0033:0x7f68f2d3cdd9 [ 222.414467][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.414483][ T6630] RSP: 002b:00007f68f0f54028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 222.414503][ T6630] RAX: ffffffffffffffda RBX: 00007f68f2fb6180 RCX: 00007f68f2d3cdd9 [ 222.414518][ T6630] RDX: 0000000000000000 RSI: 0000000000000a75 RDI: 0000000000000005 [ 222.414531][ T6630] RBP: 00007f68f2dd2d69 R08: 0000000000000000 R09: 0000000000000000 [ 222.414543][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.414555][ T6630] R13: 00007f68f2fb6218 R14: 00007f68f2fb6180 R15: 00007ffdf480c518 [ 222.414590][ T6630] [ 222.414605][ T6630] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.414622][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.4.173 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.414648][ T6630] Tainted: [L]=SOFTLOCKUP [ 222.414655][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.414667][ T6630] Call Trace: [ 222.414675][ T6630] [ 222.414683][ T6630] vpanic+0x56c/0xa60 [ 222.414712][ T6630] ? __pfx__printk+0x10/0x10 [ 222.414732][ T6630] ? __pfx_vpanic+0x10/0x10 [ 222.414758][ T6630] ? is_bpf_text_address+0x292/0x2b0 [ 222.414785][ T6630] ? is_bpf_text_address+0x26/0x2b0 [ 222.414818][ T6630] panic+0xc5/0xd0 [ 222.414844][ T6630] ? __pfx_panic+0x10/0x10 [ 222.414888][ T6630] __warn+0x315/0x4c0 [ 222.414913][ T6630] ? udf_setsize+0xdf5/0x10b0 [ 222.414934][ T6630] ? udf_setsize+0xdf5/0x10b0 [ 222.414955][ T6630] __report_bug+0x29a/0x540 [ 222.414983][ T6630] ? udf_setsize+0xdf5/0x10b0 [ 222.415006][ T6630] ? __pfx___report_bug+0x10/0x10 [ 222.415026][ T6630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 222.415048][ T6630] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.415069][ T6630] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 222.415093][ T6630] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 222.415121][ T6630] ? reacquire_held_locks+0x104/0x190 [ 222.415142][ T6630] ? rt_spin_lock+0x1e0/0x400 [ 222.415176][ T6630] ? udf_setsize+0xdf5/0x10b0 [ 222.415206][ T6630] report_bug+0x16a/0x220 [ 222.415228][ T6630] ? udf_setsize+0xdf5/0x10b0 [ 222.415249][ T6630] ? udf_setsize+0xdf7/0x10b0 [ 222.415272][ T6630] handle_bug+0x9c/0x200 [ 222.415299][ T6630] exc_invalid_op+0x1a/0x50 [ 222.415324][ T6630] asm_exc_invalid_op+0x1a/0x20 [ 222.415341][ T6630] RIP: 0010:udf_setsize+0xdf5/0x10b0 [ 222.415363][ T6630] Code: 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f9 0a 75 fe 45 89 f4 e9 2a fe ff ff e8 ec 0a 75 fe 90 <0f> 0b 90 e9 8a f7 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 9f f2 ff ff [ 222.415377][ T6630] RSP: 0018:ffffc9000558faa0 EFLAGS: 00010283 [ 222.415394][ T6630] RAX: ffffffff834fa014 RBX: ffff8880406636d8 RCX: 0000000000080000 [ 222.415409][ T6630] RDX: ffffc9000fd69000 RSI: 0000000000000531 RDI: 0000000000000532 [ 222.415421][ T6630] RBP: ffffc9000558fc00 R08: 0000000000000000 R09: 0000000000000000 [ 222.415433][ T6630] R10: dffffc0000000000 R11: fffffbfff1f152bf R12: 0000000000000001 [ 222.415447][ T6630] R13: 1ffff92000ab1f68 R14: 0000000000000c00 R15: 0000000000001000 [ 222.415470][ T6630] ? udf_setsize+0xdf4/0x10b0 [ 222.415515][ T6630] ? __pfx_udf_setsize+0x10/0x10 [ 222.415550][ T6630] udf_setattr+0x3a2/0x5a0 [ 222.415572][ T6630] ? __pfx_udf_setattr+0x10/0x10 [ 222.415596][ T6630] notify_change+0xc18/0xf60 [ 222.415636][ T6630] do_truncate+0x1c2/0x250 [ 222.415662][ T6630] ? __pfx_do_truncate+0x10/0x10 [ 222.415706][ T6630] do_ftruncate+0x49c/0x550 [ 222.415735][ T6630] ? __pfx_do_ftruncate+0x10/0x10 [ 222.415763][ T6630] ? __fget_files+0x2a/0x420 [ 222.415786][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.415809][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.415830][ T6630] __x64_sys_ftruncate+0x8f/0xe0 [ 222.415859][ T6630] do_syscall_64+0x15f/0xf80 [ 222.415881][ T6630] ? trace_irq_disable+0x3b/0x140 [ 222.415905][ T6630] ? clear_bhb_loop+0x40/0x90 [ 222.415927][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.415946][ T6630] RIP: 0033:0x7f68f2d3cdd9 [ 222.415963][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.415978][ T6630] RSP: 002b:00007f68f0f54028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 222.415999][ T6630] RAX: ffffffffffffffda RBX: 00007f68f2fb6180 RCX: 00007f68f2d3cdd9 [ 222.416014][ T6630] RDX: 0000000000000000 RSI: 0000000000000a75 RDI: 0000000000000005 [ 222.416027][ T6630] RBP: 00007f68f2dd2d69 R08: 0000000000000000 R09: 0000000000000000 [ 222.416039][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.416050][ T6630] R13: 00007f68f2fb6218 R14: 00007f68f2fb6180 R15: 00007ffdf480c518 [ 222.416081][ T6630] [ 222.416470][ T6630] Kernel Offset: disabled