last executing test programs: 2m46.363271567s ago: executing program 5 (id=355): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c864) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 2m43.132253625s ago: executing program 5 (id=361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) 2m41.803518633s ago: executing program 5 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000000)="de21cff472aa580c2ee9", 0xa}, {&(0x7f00000014c0)="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", 0xdec}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2m37.605371481s ago: executing program 5 (id=377): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) setreuid(0xee01, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2m37.264866492s ago: executing program 5 (id=379): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)={[{@uni_xlate}, {@shortname_win95}, {@rodir}, {}, {@utf8}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@utf8}, {@shortname_mixed}]}, 0x7, 0x2a6, &(0x7f0000000240)="$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") socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m37.257442484s ago: executing program 4 (id=380): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x2, 0xffff, 0x7ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.696640314s ago: executing program 4 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="01000000190000000100000000000000090400000000000000", 0x19) 2m36.488227731s ago: executing program 4 (id=387): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) 2m30.796577942s ago: executing program 4 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r4, 0x0, 0x0}) 2m29.573457059s ago: executing program 4 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m29.569006513s ago: executing program 5 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='+tcp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2m28.01124965s ago: executing program 3 (id=402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) close(r1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xffff) 2m28.008447105s ago: executing program 4 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14000040}, 0x8800) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002640)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x1}, {}, {0x7, 0x10}}, [{0x8, 0xb, 0x1a80ac85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) recvmmsg(r2, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000040)=0x2, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m27.081757083s ago: executing program 0 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x80}, 0xa) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m26.984535693s ago: executing program 3 (id=407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "558edb33", "7c5cec21291a43fe"}, 0x38) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) 2m25.826577859s ago: executing program 0 (id=409): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1a, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04040a00000000"], 0xd) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0xfffffffe}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000280)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@acl}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x38, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x7, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xe868, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x10000, 0x2, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x100, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) 2m24.85047625s ago: executing program 3 (id=410): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) close_range(r0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.466861247s ago: executing program 0 (id=412): syz_open_dev$sndpcmc(0x0, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) fanotify_init(0x3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0), 0x0) 2m24.246057222s ago: executing program 3 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2m23.315416736s ago: executing program 0 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') 2m23.130361419s ago: executing program 0 (id=416): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x64000400) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 2m22.600023551s ago: executing program 3 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 2m19.903543235s ago: executing program 0 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-4\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m19.901867568s ago: executing program 3 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x193) msgsnd(r1, 0x0, 0x3f9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 2m13.025613717s ago: executing program 32 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='+tcp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000400)="80000028123456780000000000000002000186a300000003000000000000000700"/44, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2m12.932252769s ago: executing program 33 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14000040}, 0x8800) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002640)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x1}, {}, {0x7, 0x10}}, [{0x8, 0xb, 0x1a80ac85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) recvmmsg(r2, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000040)=0x2, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m4.65931691s ago: executing program 34 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8008, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-4\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x8008, @loopback}, 0x10) sendto(r4, &(0x7f00000002c0)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m4.551631561s ago: executing program 35 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x193) msgsnd(r1, 0x0, 0x3f9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 47.486942649s ago: executing program 1 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 45.970438713s ago: executing program 1 (id=620): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0xc}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 44.29156815s ago: executing program 1 (id=625): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0d3f29d3a3e5f363b6c5b5a86e58d8bcb59df71412241710c408c1ee5a9052389db85fd81e04d2358cdbda0e63"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@empty, @empty}, &(0x7f0000000600)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 40.357866037s ago: executing program 1 (id=632): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0x1a8, 0x805, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendmmsg$inet(r3, &(0x7f0000006ac0), 0x0, 0x20008004) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000540)=0x7b1) 37.519973609s ago: executing program 1 (id=636): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) userfaultfd(0x801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, 0xfffffe49, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x20000a0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) 34.848923207s ago: executing program 1 (id=639): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f", 0xbd}], 0x1) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10122, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) umount2(0x0, 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0xf7, 0x20400) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x9, 0x4, 0x34565348, 0x47524247, [0x8, 0x80000000], [0xc4b, 0x7fffffff], 0x1efc4f83722bd8f6}}) 24.078137945s ago: executing program 2 (id=654): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 19.521710141s ago: executing program 36 (id=639): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f", 0xbd}], 0x1) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10122, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) umount2(0x0, 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0xf7, 0x20400) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x9, @vbi={0x9, 0x4, 0x34565348, 0x47524247, [0x8, 0x80000000], [0xc4b, 0x7fffffff], 0x1efc4f83722bd8f6}}) 19.423114661s ago: executing program 6 (id=658): r0 = socket$kcm(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 18.504202556s ago: executing program 2 (id=660): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 17.451977594s ago: executing program 7 (id=661): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@empty, @empty}, &(0x7f0000000600)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 16.339994529s ago: executing program 8 (id=662): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1a, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04040a00000000"], 0xd) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0xfffffffe}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000280)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@acl}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x38, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r3, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x7, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xe868, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x10000, 0x2, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x100, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) 15.283076649s ago: executing program 6 (id=663): r0 = socket(0x24, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1000, 0x4, {{0x5, 0x4, 0x2, 0x17, 0x14, 0x67, 0x0, 0x35, 0x2f, 0x0, @multicast2, @loopback}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) 15.213052967s ago: executing program 9 (id=664): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$alg(0x26, 0x5, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$l2tp6(0xa, 0x2, 0x73) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x9b) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 15.015897669s ago: executing program 7 (id=665): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe0d, 0x0, &(0x7f0000000740)="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", 0x0, 0x5, 0x0, 0x3}, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_open_procfs(0x0, 0x0) 13.636995282s ago: executing program 6 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) shutdown(r8, 0x1) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) 12.116648328s ago: executing program 9 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x85) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11.836347204s ago: executing program 8 (id=668): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)={r1}) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) 11.229669024s ago: executing program 2 (id=669): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0080000000b20000"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r2, r2, 0x7fff, 0x0, 0x0, 0x6, 0x4c, 0x96c0, 0x9, 0x0, 0x3, 0x9, 'syz0\x00'}) 10.935041688s ago: executing program 7 (id=670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001c006500000002"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x2000405, &(0x7f0000000540), 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) 10.649955577s ago: executing program 9 (id=671): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r4, 0x0, 0x3b) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) 8.512390472s ago: executing program 8 (id=672): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000000380)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002400)={{r6, 0xffffffffffffffff}, &(0x7f00000023c0), &(0x7f0000002440)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x6, 0x2, 0x400, 0x2189b, r1, 0xff, '\x00', 0x0, r1, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x7b, &(0x7f00000004c0)=""/123, 0x41000, 0x8, '\x00', 0x0, @fallback=0x33, r1, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000700)=[r4, r1, r6, r1, r1, r1, r8], &(0x7f0000000740)=[{0x4, 0x4, 0xe, 0x8}, {0x4, 0x2, 0x8}], 0x10, 0x7f1b}, 0x94) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$PPPIOCGFLAGS1(r2, 0x40047452, 0x0) 8.509914607s ago: executing program 9 (id=673): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x2) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x4900, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') 8.376625946s ago: executing program 7 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='romfs\x00', 0x200000, 0x0) 7.332620347s ago: executing program 6 (id=675): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) userfaultfd(0x80001) socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000680), 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7.316444476s ago: executing program 7 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 7.00335058s ago: executing program 8 (id=677): shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01018f97aee9c1bd2fd8c669a7a9a810fcbd85d5940f6af500372fcff310d483aaf515be1900000000000004020000030000000000060400000020725eb3daf1411b9c5bbc06d7eac1652ec62788910be28f41f287aaee73fb3b6438d6762741796d70b8b696b625426f3272155cfb84b76c67150a5a949276f2"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x8000000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 6.999938481s ago: executing program 9 (id=678): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00074002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 6.873100749s ago: executing program 6 (id=679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407f04ffff000000008001090224000100000000090400000903000000092100000001222900090581030000000000b3bd6e00e0a137d8ec190ac1c1d5b47658424f46cdca9a787cd3945a08cdae48cacf1c6a9a78d49056cc39171092452cc1abb2fbe131f1d7bd9da1d7858f5dddf30794109492389fcd4c8126aa5678b59f6b98f1d5e21c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300010000ff0f000000000007000000", @ANYRES32=r2, @ANYBLOB="80010000091004000c001a800800058004"], 0x2c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xfff, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r6, 0x5412, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x23, 0x76, {0x76, 0xc, "d7861c14dc370cfa767ccbfcd59091f56d79fb1a86db31300fc5665cdcac0847e8af70d0fac07628cb8b64bb34ada58eae09a0c2859bad0a3c440190125223c7a7674d5cdbeae4c52fb727a340a03bed4fc8d197f741689b64cd550b9d10470c6b56e8f9dd229f985c64daa0f7d8f49c0674d21e"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x1, 0x1, "efdc1845", "4b62cbda"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x5, 0x28, 0x4, 0x6, 0x9}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="40dacc000000a6bdb7c7359d00d6f23975d143bba425412445f6d7166f1006fba187ee02e90fd65bbbe6f731d0e9b929ac8b23665be0200f1c08fa9bf186468ac76ff54a0ae486ddb7ec58ae63d27177ae3b2bbd827d3ef109903984ba976bcf4d11621b656281e8d49026ba9cb9ef65226f1067e2ac2e62f62eef4cb0ab24a2975d4afe5f7e671c66d24ec70892d0e4d1c566d849c28e0b10ea51afc1a3a4025645fa5cc9c220aec101ccd481447cf6c495c2b1ffc7cd619e4bdca0000000"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0xe0, 0x8}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x821c}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000680)={0x40, 0xb, 0x2, "931c"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x19, 0x2, "9b13"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x1c, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x53}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 4.847000044s ago: executing program 8 (id=680): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000100)) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc01c586a, &(0x7f0000000500)={r1, &(0x7f00000003c0)=',(()@\x00', 0x101000, 0x0, 0xd50, &(0x7f0000000440), 0x0}) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000580)={@empty, @loopback, 0x1, "437552168f9a6185d58af88daf4cbadf3cdf853fab0c4b873dd74b6d877bd99d", 0x6, 0xe93, 0x5, 0x7}, 0x3c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000004f0c00"/25], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 4.024325342s ago: executing program 2 (id=681): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000080100001040007", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaa290000"], 0x48}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000caf70000008400000002000000040041007fffffff00000000", @ANYRES32=0x0], 0x20, 0x4048800}, 0x0) 3.250169831s ago: executing program 7 (id=682): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') userfaultfd(0x0) writev(r0, &(0x7f0000000200), 0x2) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r1, 0x1, &(0x7f0000000fc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, 0xffffffffffffffff, 0x0}]) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c0000000000010902"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101102, 0x0) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = syz_usb_connect(0x4, 0x3ac, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000001100)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x310, 0x7, 0xe, 0x6, 0x20, 0x3}, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000001080)=@string={0x2}}]}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.697268319s ago: executing program 2 (id=683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x533863bace190a0, 0x2) 2.41520087s ago: executing program 9 (id=684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c864) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.322980093s ago: executing program 8 (id=685): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) 585.668211ms ago: executing program 2 (id=686): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) lseek(0xffffffffffffffff, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0xfffffea0, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") 0s ago: executing program 6 (id=687): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x2, 0xffff, 0x7ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) dup3(r2, r4, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 79.077837][ T5608] cgroup: Unknown subsys name 'net' [ 79.208026][ T5608] cgroup: Unknown subsys name 'cpuset' [ 79.217364][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.698718][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.225314][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.237653][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.246298][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.254556][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.264936][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.265633][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.272350][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.280998][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.287027][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.296961][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.309586][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.317331][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.325931][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.335635][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.343978][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.345068][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.352194][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.359814][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.372203][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.382012][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.382681][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.389687][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.397223][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.404989][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.420469][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.438712][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.447496][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.455211][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.466697][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.476639][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.384816][ T4937] Bluetooth: hci0: command tx timeout [ 85.463420][ T51] Bluetooth: hci4: command tx timeout [ 85.469616][ T5637] Bluetooth: hci2: command tx timeout [ 85.469686][ T5630] Bluetooth: hci1: command tx timeout [ 85.475356][ T4937] Bluetooth: hci3: command tx timeout [ 85.543442][ T4937] Bluetooth: hci5: command tx timeout [ 85.691586][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.703547][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.711461][ T5622] bridge_slave_0: entered allmulticast mode [ 85.720243][ T5622] bridge_slave_0: entered promiscuous mode [ 85.779799][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.787119][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.794638][ T5622] bridge_slave_1: entered allmulticast mode [ 85.802116][ T5622] bridge_slave_1: entered promiscuous mode [ 85.941465][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.948745][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.956022][ T5635] bridge_slave_0: entered allmulticast mode [ 85.964033][ T5635] bridge_slave_0: entered promiscuous mode [ 86.000390][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.009915][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.018531][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.025922][ T5632] bridge_slave_0: entered allmulticast mode [ 86.034159][ T5632] bridge_slave_0: entered promiscuous mode [ 86.042947][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.051272][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.058791][ T5635] bridge_slave_1: entered allmulticast mode [ 86.066738][ T5635] bridge_slave_1: entered promiscuous mode [ 86.138979][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.146453][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.153728][ T5631] bridge_slave_0: entered allmulticast mode [ 86.161710][ T5631] bridge_slave_0: entered promiscuous mode [ 86.174944][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.184704][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.191945][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.199834][ T5632] bridge_slave_1: entered allmulticast mode [ 86.207999][ T5632] bridge_slave_1: entered promiscuous mode [ 86.256713][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.264713][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.272212][ T5631] bridge_slave_1: entered allmulticast mode [ 86.280343][ T5631] bridge_slave_1: entered promiscuous mode [ 86.325194][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.421795][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.466455][ T5622] team0: Port device team_slave_0 added [ 86.475287][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.526005][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.537686][ T5622] team0: Port device team_slave_1 added [ 86.558127][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.580533][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.589219][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.596603][ T5628] bridge_slave_0: entered allmulticast mode [ 86.604214][ T5628] bridge_slave_0: entered promiscuous mode [ 86.627750][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.663967][ T5635] team0: Port device team_slave_0 added [ 86.669920][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.677470][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.684832][ T5628] bridge_slave_1: entered allmulticast mode [ 86.692275][ T5628] bridge_slave_1: entered promiscuous mode [ 86.699514][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.707228][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.714830][ T5621] bridge_slave_0: entered allmulticast mode [ 86.722390][ T5621] bridge_slave_0: entered promiscuous mode [ 86.743234][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.750392][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.776629][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.803703][ T5635] team0: Port device team_slave_1 added [ 86.822060][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.829420][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.836883][ T5621] bridge_slave_1: entered allmulticast mode [ 86.844903][ T5621] bridge_slave_1: entered promiscuous mode [ 86.864637][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.871698][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.897806][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.912341][ T5632] team0: Port device team_slave_0 added [ 86.958502][ T5631] team0: Port device team_slave_0 added [ 86.974921][ T5632] team0: Port device team_slave_1 added [ 86.996200][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.020177][ T5631] team0: Port device team_slave_1 added [ 87.064691][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.071655][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.097789][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.111345][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.136154][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.148820][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.158824][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.166009][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.191934][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.215530][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.222517][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.248929][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.297395][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.304543][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.330605][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.342493][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.349483][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.375447][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.399470][ T5628] team0: Port device team_slave_0 added [ 87.447369][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.454658][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.481019][ T4937] Bluetooth: hci0: command tx timeout [ 87.481480][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.510035][ T5628] team0: Port device team_slave_1 added [ 87.522435][ T5622] hsr_slave_0: entered promiscuous mode [ 87.529258][ T5622] hsr_slave_1: entered promiscuous mode [ 87.538299][ T5621] team0: Port device team_slave_0 added [ 87.543609][ T51] Bluetooth: hci4: command tx timeout [ 87.544587][ T5630] Bluetooth: hci2: command tx timeout [ 87.549801][ T5637] Bluetooth: hci1: command tx timeout [ 87.561146][ T4937] Bluetooth: hci3: command tx timeout [ 87.566058][ T5621] team0: Port device team_slave_1 added [ 87.623852][ T5637] Bluetooth: hci5: command tx timeout [ 87.641404][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.648832][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.678978][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.773743][ T5635] hsr_slave_0: entered promiscuous mode [ 87.780273][ T5635] hsr_slave_1: entered promiscuous mode [ 87.786840][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 87.793203][ T5635] Cannot create hsr debugfs directory [ 87.799927][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.807416][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.833540][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.857241][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.864683][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.890672][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.937388][ T5632] hsr_slave_0: entered promiscuous mode [ 87.944070][ T5632] hsr_slave_1: entered promiscuous mode [ 87.950858][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 87.957431][ T5632] Cannot create hsr debugfs directory [ 87.964253][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.971199][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.997176][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.035910][ T5631] hsr_slave_0: entered promiscuous mode [ 88.042459][ T5631] hsr_slave_1: entered promiscuous mode [ 88.048894][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 88.054739][ T5631] Cannot create hsr debugfs directory [ 88.227389][ T5621] hsr_slave_0: entered promiscuous mode [ 88.234137][ T5621] hsr_slave_1: entered promiscuous mode [ 88.240305][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 88.246298][ T5621] Cannot create hsr debugfs directory [ 88.362573][ T5628] hsr_slave_0: entered promiscuous mode [ 88.369379][ T5628] hsr_slave_1: entered promiscuous mode [ 88.375665][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 88.381377][ T5628] Cannot create hsr debugfs directory [ 88.909661][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.922397][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.930611][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.941791][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.959448][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.970013][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.978412][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.989389][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.067319][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.078357][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.087196][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.097884][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.106727][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.118238][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.131345][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.141351][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.244598][ T5631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.256265][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.266529][ T5631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.276910][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.285352][ T5631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.295961][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.306378][ T5631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.317558][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.449536][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.464598][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.475926][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.485252][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.495763][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.504589][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.514503][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.522585][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.535435][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.544625][ T5637] Bluetooth: hci0: command tx timeout [ 89.601349][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.623573][ T5637] Bluetooth: hci1: command tx timeout [ 89.624265][ T51] Bluetooth: hci4: command tx timeout [ 89.633466][ T4937] Bluetooth: hci3: command tx timeout [ 89.636635][ T51] Bluetooth: hci2: command tx timeout [ 89.682327][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.689845][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.713468][ T51] Bluetooth: hci5: command tx timeout [ 89.732603][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.740194][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.750905][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.762133][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.770598][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.781784][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.790417][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.800933][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.821725][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.832503][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.849162][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.969043][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.981393][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.001685][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.013779][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.021906][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.033044][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.041584][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.051992][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.076083][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.126097][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.157545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.164784][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.219171][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.226399][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.268023][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.319035][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.326240][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.388878][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.396074][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.420185][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.498555][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.545237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.552414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.576865][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.609067][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.616259][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.698008][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.761216][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.768416][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.836457][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.843658][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.878312][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.999705][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.052706][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.097383][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.104615][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.161797][ T9] cfg80211: failed to load regulatory.db [ 91.191112][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.198313][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.470594][ T5622] veth0_vlan: entered promiscuous mode [ 91.541662][ T5622] veth1_vlan: entered promiscuous mode [ 91.624909][ T51] Bluetooth: hci0: command tx timeout [ 91.707287][ T51] Bluetooth: hci3: command tx timeout [ 91.708943][ T5637] Bluetooth: hci1: command tx timeout [ 91.712904][ T51] Bluetooth: hci2: command tx timeout [ 91.718434][ T4937] Bluetooth: hci4: command tx timeout [ 91.784409][ T4937] Bluetooth: hci5: command tx timeout [ 91.818202][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.839815][ T5622] veth0_macvtap: entered promiscuous mode [ 91.895389][ T5622] veth1_macvtap: entered promiscuous mode [ 92.024060][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.074489][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.122403][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.186958][ T3362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215054][ T3362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.249394][ T3362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.260703][ T3362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.301645][ T5635] veth0_vlan: entered promiscuous mode [ 92.347968][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.470060][ T5635] veth1_vlan: entered promiscuous mode [ 92.645849][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.662797][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.670413][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.734262][ T5632] veth0_vlan: entered promiscuous mode [ 92.773095][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.784916][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.801602][ T5632] veth1_vlan: entered promiscuous mode [ 92.817117][ T5635] veth0_macvtap: entered promiscuous mode [ 92.859956][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.880271][ T5635] veth1_macvtap: entered promiscuous mode [ 92.906541][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.978493][ T5621] veth0_vlan: entered promiscuous mode [ 93.017075][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.040217][ T5631] veth0_vlan: entered promiscuous mode [ 93.076327][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.103019][ T5632] veth0_macvtap: entered promiscuous mode [ 93.119326][ T5631] veth1_vlan: entered promiscuous mode [ 93.140221][ T3290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.151521][ T3290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.162790][ T5621] veth1_vlan: entered promiscuous mode [ 93.190000][ T5632] veth1_macvtap: entered promiscuous mode [ 93.201207][ T3290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.213045][ T3290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.320219][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.380125][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.425346][ T5631] veth0_macvtap: entered promiscuous mode [ 93.451622][ T3362] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464006][ T3362] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.481081][ T5631] veth1_macvtap: entered promiscuous mode [ 93.517921][ T3362] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.532327][ T3362] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.587051][ T5621] veth0_macvtap: entered promiscuous mode [ 93.588560][ T5862] loop3: detected capacity change from 0 to 512 [ 93.598503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.614989][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.623909][ T5862] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.671404][ T5621] veth1_macvtap: entered promiscuous mode [ 93.688167][ T5862] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.7: inode has both inline data and extents flags [ 93.715084][ T5862] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.716852][ T5862] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7: couldn't read orphan inode 15 (err -117) [ 93.717254][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.726361][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 93.752708][ C0] EXT4-fs (loop3): initial error at time 1785171655: ext4_orphan_get:1399: inode 15 [ 93.762166][ C0] EXT4-fs (loop3): last error at time 1785171655: ext4_orphan_get:1399: inode 15 [ 93.774998][ T5862] loop3: lost filesystem error report for type 5 error -117 [ 93.779981][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.808417][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.816622][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.839301][ T5862] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 93.839898][ T5628] veth0_vlan: entered promiscuous mode [ 93.862660][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.908022][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.956552][ T5628] veth1_vlan: entered promiscuous mode [ 93.967848][ T3362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.991332][ T3362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.012338][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.050732][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.077076][ T3362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.152483][ T3362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.207672][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.215978][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.228870][ T5772] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.246526][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.259045][ T1341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286056][ T5772] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.340232][ T1341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.366940][ T3362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578830][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.607294][ T5628] veth0_macvtap: entered promiscuous mode [ 94.617688][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.711259][ T5628] veth1_macvtap: entered promiscuous mode [ 94.817602][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.859991][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.891608][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.996249][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.026344][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.042563][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.070861][ T3362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.099223][ T3362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.168773][ T3362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.247856][ T3362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.278710][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.300559][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.315682][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.325938][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.543012][ T3290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.586323][ T3290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.652713][ T5887] loop2: detected capacity change from 0 to 16 [ 95.682572][ T5887] erofs (device loop2): DAX unsupported by block device. Turning off DAX. [ 95.788217][ T3290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.837156][ T3290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.966860][ T5893] loop3: detected capacity change from 0 to 512 [ 96.011962][ T5893] ======================================================= [ 96.011962][ T5893] WARNING: The mand mount option has been deprecated and [ 96.011962][ T5893] and is ignored by this kernel. Remove the mand [ 96.011962][ T5893] option from the mount to silence this warning. [ 96.011962][ T5893] ======================================================= [ 96.131081][ T5894] Zero length message leads to an empty skb [ 96.171656][ T5893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.247217][ T5893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.360351][ T5887] erofs (device loop2): mounted with root inode @ nid 36. [ 96.432116][ T5893] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.586706][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.788706][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 97.843994][ T29] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 97.872652][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 97.923222][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.182877][ T5928] loop4: detected capacity change from 0 to 32768 [ 98.194273][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 98.204385][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41619, setting to 1024 [ 98.215944][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 98.226945][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 98.242487][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.266252][ T5928] xfs: Deprecated parameter 'ikeep' [ 98.272103][ T5928] XFS: ikeep mount option is deprecated. [ 98.285212][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.303030][ T29] usb 4-1: SerialNumber: syz [ 98.350494][ T5924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.356729][ T5893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.368011][ T5928] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.410300][ T5893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.442588][ T5893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.512441][ T5928] XFS (loop4): Ending clean mount [ 98.528408][ T5928] XFS (loop4): Quotacheck needed: Please wait. [ 98.546470][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.669229][ T5928] XFS (loop4): Quotacheck: Done. [ 98.770451][ T5928] evm: overlay not supported [ 98.865977][ T992] usb 4-1: USB disconnect, device number 2 [ 98.900168][ T5948] loop1: detected capacity change from 0 to 128 [ 99.048812][ T5948] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.081645][ T5948] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.332290][ T5953] loop5: detected capacity change from 0 to 8192 [ 99.377322][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 99.517291][ T5948] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.715211][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.834532][ T5628] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.076108][ T5977] capability: warning: `syz.3.25' uses deprecated v2 capabilities in a way that may be insecure [ 100.185969][ T5979] loop5: detected capacity change from 0 to 1024 [ 100.242736][ T5979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.401844][ T5979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.431298][ T5987] syz_tun: entered allmulticast mode [ 100.463911][ T5979] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.662892][ T5979] syz.5.27 uses obsolete (PF_INET,SOCK_PACKET) [ 100.918772][ T5999] fuse: fd is not a fuse device [ 101.012325][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.271860][ T6015] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.433149][ T6038] loop0: detected capacity change from 0 to 8 [ 102.482983][ T6038] unable to read id index table [ 102.603718][ T5740] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.793352][ T5740] usb 6-1: Using ep0 maxpacket: 16 [ 102.831014][ T5740] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 102.870102][ T5740] usb 6-1: config 0 has no interface number 0 [ 102.898177][ T5740] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.933329][ T5740] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 102.959833][ T5740] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 102.978668][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 102.990617][ T5740] usb 6-1: Product: syz [ 103.002125][ T5740] usb 6-1: SerialNumber: syz [ 103.017966][ T5740] usb 6-1: config 0 descriptor?? [ 103.035546][ T5740] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 103.075703][ T4937] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 103.085808][ T4937] Bluetooth: hci5: Injecting HCI hardware error event [ 103.092352][ T5740] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input5 [ 103.094298][ T4937] Bluetooth: hci5: hardware error 0x00 [ 103.516273][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.518361][ T5772] usb 6-1: USB disconnect, device number 2 [ 103.523271][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 103.619165][ T5772] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 103.621220][ T5739] udevd[5739]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 103.710524][ T6062] binder: 6061:6062 ioctl c0306201 0 returned -14 [ 104.786383][ T6074] loop3: detected capacity change from 0 to 8192 [ 105.236267][ T4937] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 105.674992][ T992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.680090][ T6087] fuse: fd is not a fuse device [ 105.875370][ T992] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 105.893187][ T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.909753][ T992] usb 6-1: Product: syz [ 105.937409][ T992] usb 6-1: Manufacturer: syz [ 106.032113][ T6091] configfs-gadget.g1 gadget.0: HOST MAC da:f0:31:da:67:62 [ 106.063093][ T6091] configfs-gadget.g1 gadget.0: MAC ba:a9:1b:aa:e7:52 [ 106.343559][ T5763] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.528654][ T5763] usb 1-1: Dual-Role OTG device on HNP port [ 106.548983][ T992] speedtch 6-1:1.0: speedtch_bind: wrong device class 0 [ 106.570067][ T5763] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 106.576633][ T992] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 106.615379][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.630811][ T992] usb 6-1: USB disconnect, device number 3 [ 106.910584][ T5763] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 22:99:dd:ec:03:04 [ 107.038230][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 109.179941][ T6139] loop5: detected capacity change from 0 to 32768 [ 109.570591][ T6139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.75 (6139) [ 110.065169][ T6160] syz_tun: entered allmulticast mode [ 110.082721][ T6159] syz_tun: left allmulticast mode [ 110.162049][ T6164] binder_alloc: 6162: binder_alloc_buf, no vma [ 110.211232][ T6139] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.266901][ T6139] BTRFS info (device loop5): using crc32c checksum algorithm [ 110.344197][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 110.346271][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 110.367407][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 110.475597][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 110.542694][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 110.573066][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 110.591220][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 110.603697][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 110.620965][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 110.641646][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 110.652070][ T6139] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 110.724661][ T6139] BTRFS error (device loop5): open_ctree failed: -12 [ 111.830406][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 111.904836][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 111.940402][ T6191] ceph: No mds server is up or the cluster is laggy [ 111.991197][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 112.035133][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 112.473417][ T6213] loop0: detected capacity change from 0 to 32768 [ 112.480791][ T6213] btrfs: Deprecated parameter 'usebackuproot' [ 112.486990][ T6213] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 112.508159][ T6213] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.91 (6213) [ 112.581864][ T6213] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.592045][ T6213] BTRFS info (device loop0): using crc32c checksum algorithm [ 112.655640][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 112.692029][ T6213] BTRFS error (device loop0): failed to load root extent [ 112.699169][ T6213] BTRFS warning (device loop0): try to load backup roots slot 1 [ 112.707458][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 112.792437][ T6213] BTRFS warning (device loop0): couldn't read tree root [ 112.800581][ T6213] BTRFS warning (device loop0): try to load backup roots slot 2 [ 112.812853][ T12] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 112.902293][ T6213] BTRFS warning (device loop0): couldn't read tree root [ 112.910956][ T6213] BTRFS warning (device loop0): try to load backup roots slot 3 [ 112.938381][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 112.989030][ T6213] BTRFS info (device loop0): rebuilding free space tree [ 113.058037][ T6213] BTRFS info (device loop0): disabling free space tree [ 113.065209][ T6213] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.075149][ T6213] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.099154][ T6213] BTRFS info (device loop0): checking UUID tree [ 113.106118][ T6213] BTRFS info (device loop0): enabling ssd optimizations [ 113.113068][ T6213] BTRFS info (device loop0): turning on async discard [ 113.120619][ T6213] BTRFS info (device loop0): force clearing of disk cache [ 113.127771][ T6213] BTRFS info (device loop0): enabling auto defrag [ 113.134198][ T6213] BTRFS info (device loop0): trying to use backup root at mount time [ 113.142253][ T6213] BTRFS info (device loop0): use zstd compression, level 3 [ 113.769174][ T5621] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.413307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.556027][ T4937] Bluetooth: hci1: connection err: -111 [ 114.753300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 115.043309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.082871][ T31] audit: type=1326 audit(1785171677.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.0.100" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30d539de99 code=0x0 [ 115.161207][ T6272] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.248528][ T6275] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 115.943310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.052299][ T5762] udevd[5762]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 117.955372][ T6315] loop4: detected capacity change from 0 to 1024 [ 117.979642][ T6319] file system registered [ 118.026701][ T3290] rpcbind: server 127.0.0.1 not responding, timed out [ 118.352113][ T6315] EXT4-fs: Mount option(s) incompatible with ext3 [ 119.201943][ T6329] fuse: fd is not a fuse device [ 119.384731][ T5622] ffs_data_put(): freeing [ 119.779006][ T4937] Bluetooth: hci4: connection err: -111 [ 119.809218][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 119.853295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.953298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.023323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.207435][ T6342] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 120.276133][ T31] audit: type=1326 audit(1785171682.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.1.121" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 120.366696][ T6340] loop5: detected capacity change from 0 to 512 [ 120.392641][ T31] audit: type=1326 audit(1785171682.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.2.125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b2779de99 code=0x0 [ 120.422809][ T6346] syzkaller0: entered promiscuous mode [ 120.444971][ T6346] syzkaller0: entered allmulticast mode [ 121.263672][ T5754] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.337954][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 121.403917][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.581549][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.615072][ T5754] usb 5-1: device descriptor read/64, error -32 [ 122.021582][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.055813][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.103361][ T5754] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.293337][ T5754] usb 5-1: Using ep0 maxpacket: 16 [ 122.309449][ T5754] usb 5-1: config 0 has no interfaces? [ 122.315696][ T5754] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 122.431782][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.264008][ T5754] usb 5-1: config 0 descriptor?? [ 123.605306][ T5754] usb 5-1: USB disconnect, device number 3 [ 124.493320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 124.543306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.639431][ T6419] loop5: detected capacity change from 0 to 32768 [ 124.664208][ T6419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.142 (6419) [ 124.696030][ T6419] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.706254][ T6419] BTRFS info (device loop5): using crc32c checksum algorithm [ 124.857454][ T6419] BTRFS info (device loop5): setting nodatasum [ 124.865274][ T6419] BTRFS info (device loop5): setting nodatacow [ 124.871431][ T6419] BTRFS info (device loop5): turning on async discard [ 124.873331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.878266][ T6419] BTRFS info (device loop5): enabling free space tree [ 124.893199][ T6419] BTRFS info (device loop5): max_inline set to 0 [ 124.928103][ T6413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.140'. [ 125.092837][ T31] audit: type=1326 audit(1785171687.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.5.142" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c7d9de99 code=0x0 [ 125.612894][ T5631] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.067068][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 127.951518][ T4937] Bluetooth: hci4: connection err: -111 [ 128.348525][ T6502] syzkaller0: entered promiscuous mode [ 128.370651][ T31] audit: type=1326 audit(1785171690.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.159" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 128.402459][ T6502] syzkaller0: entered allmulticast mode [ 129.964502][ T5754] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.074675][ T5763] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.183876][ T5754] usb 6-1: Using ep0 maxpacket: 16 [ 130.266239][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.266350][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.266376][ T5754] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.266423][ T5754] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.266447][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.293616][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 130.328324][ T5763] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 130.328355][ T5763] usb 5-1: config 0 has no interface number 0 [ 130.328433][ T5763] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 130.371333][ T5763] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 130.373479][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.374037][ T5763] usb 5-1: Product: syz [ 130.374712][ T5763] usb 5-1: Manufacturer: syz [ 130.376298][ T5763] usb 5-1: SerialNumber: syz [ 130.869738][ T5754] usb 6-1: config 0 descriptor?? [ 130.874038][ T5763] usb 5-1: config 0 descriptor?? [ 130.875259][ T6519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.086797][ T6519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.301260][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 131.318705][ T6540] loop3: detected capacity change from 0 to 512 [ 131.329960][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 131.351513][ T6540] EXT4-fs: Ignoring removed orlov option [ 131.353069][ T6518] loop5: detected capacity change from 0 to 164 [ 131.374290][ T6540] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 131.441258][ T6540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 131.468700][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.491199][ T6540] System zones: 1-12 [ 131.497011][ T6540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.505241][ T6540] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.171: invalid indirect mapped block 2 (level 2) [ 131.521726][ T6540] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 131.523381][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 131.539031][ C1] EXT4-fs (loop3): initial error at time 1785171693: ext4_free_branches:1023: inode 11 [ 131.548749][ C1] EXT4-fs (loop3): last error at time 1785171693: ext4_free_branches:1023: inode 11 [ 131.553441][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.566048][ T6540] EXT4-fs (loop3): Remounting filesystem read-only [ 131.574798][ T6540] EXT4-fs (loop3): 1 truncate cleaned up [ 131.586845][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 131.652380][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.680736][ T6540] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 131.699761][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.741981][ T6540] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 131.744510][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.783563][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.802219][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.802317][ T6540] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 131.816420][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.843047][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.845109][ T6549] 9pnet: p9_errstr2errno: server reported unknown error [ 131.872642][ T5754] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 131.884614][ T6553] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 131.955258][ T5754] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input8 [ 131.966041][ T6555] netlink: 'syz.1.177': attribute type 39 has an invalid length. [ 132.011263][ T6540] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 132.067653][ T6553] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 132.116434][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.125895][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.155859][ T5754] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 132.306782][ T6540] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 132.525777][ T6553] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 132.714765][ T5754] usb 6-1: USB disconnect, device number 4 [ 133.034070][ T6564] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 133.388421][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 133.459677][ T6566] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 133.549482][ T5763] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 134.625678][ T6563] fido_id[6563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 135.002531][ T5763] asix 5-1:0.188: probe with driver asix failed with error -71 [ 135.023028][ T5763] usb 5-1: USB disconnect, device number 4 [ 135.218060][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 135.302780][ T6577] Unsupported ieee802154 address type: 0 [ 135.723058][ T6583] syzkaller0: entered promiscuous mode [ 135.751434][ T6583] syzkaller0: entered allmulticast mode [ 135.840851][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 135.942430][ T31] audit: type=1800 audit(1785171698.070:7): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.187" name="bus" dev="tmpfs" ino=228 res=0 errno=0 [ 135.979092][ T6596] netlink: 'syz.4.186': attribute type 10 has an invalid length. [ 136.011342][ T6596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.186'. [ 136.317351][ T6594] bridge1: port 1(dummy0) entered blocking state [ 136.338717][ T6600] fuse: fd is not a fuse device [ 136.346750][ T6594] bridge1: port 1(dummy0) entered disabled state [ 136.370345][ T6594] dummy0: entered allmulticast mode [ 136.419777][ T6594] dummy0: entered promiscuous mode [ 136.495268][ T6596] bridge1: port 1(dummy0) entered blocking state [ 136.502340][ T6596] bridge1: port 1(dummy0) entered forwarding state [ 136.658263][ T6596] dummy0: left allmulticast mode [ 136.706885][ T6596] bridge1: port 1(dummy0) entered disabled state [ 137.453554][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.713422][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 138.727177][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.745609][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.755746][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.766857][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.860385][ T30] usb 5-1: config 0 descriptor?? [ 138.896545][ T30] hub 5-1:0.0: USB hub found [ 139.084962][ T30] hub 5-1:0.0: 1 port detected [ 139.289400][ T30] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 139.324830][ T30] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 139.392113][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 139.407022][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.470868][ T30] usb 5-1: USB disconnect, device number 5 [ 139.843185][ T6658] loop0: detected capacity change from 0 to 4096 [ 139.864502][ T6658] EXT4-fs: inline encryption not supported [ 139.898599][ T6658] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.944914][ T6658] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.003715][ T6658] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 140.073609][ T6658] System zones: 0-5 [ 140.112571][ T6658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.264278][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.206'. [ 140.706104][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.641148][ T6685] loop0: detected capacity change from 0 to 256 [ 143.571732][ T6720] syz_tun: refused to change device tx_queue_len [ 143.601323][ T6720] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 146.303529][ T5637] Bluetooth: hci1: connection err: -111 [ 146.329476][ T6750] netlink: 'syz.4.226': attribute type 11 has an invalid length. [ 146.568872][ T6749] loop0: detected capacity change from 0 to 32768 [ 146.593144][ T6749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.227 (6749) [ 146.630428][ T6749] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.640628][ T6749] BTRFS info (device loop0): using crc32c checksum algorithm [ 146.797584][ T6749] BTRFS info (device loop0): setting nodatasum [ 146.804014][ T6749] BTRFS info (device loop0): setting nodatacow [ 146.810202][ T6749] BTRFS info (device loop0): turning on async discard [ 146.817015][ T6749] BTRFS info (device loop0): enabling free space tree [ 146.824482][ T6749] BTRFS info (device loop0): max_inline set to 0 [ 146.948460][ T31] audit: type=1326 audit(1785171709.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.0.227" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30d539de99 code=0x0 [ 147.321974][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 147.390320][ T5621] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.897382][ T6796] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 149.807051][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.237'. [ 151.260271][ T5637] Bluetooth: hci1: connection err: -111 [ 151.620937][ T6831] loop0: detected capacity change from 0 to 32768 [ 151.865185][ T6831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.244 (6831) [ 151.925964][ T6831] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.936243][ T6831] BTRFS info (device loop0): using crc32c checksum algorithm [ 152.311906][ T6831] BTRFS info (device loop0): setting nodatasum [ 152.318608][ T6831] BTRFS info (device loop0): setting nodatacow [ 152.324857][ T6831] BTRFS info (device loop0): turning on async discard [ 152.331648][ T6831] BTRFS info (device loop0): enabling free space tree [ 152.338574][ T6831] BTRFS info (device loop0): max_inline set to 0 [ 152.520406][ T31] audit: type=1326 audit(1785171714.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.0.244" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30d539de99 code=0x0 [ 152.897979][ T5621] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.798986][ T6890] warning: `syz.3.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.175076][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.375069][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.414454][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.478136][ T29] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 154.522097][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.578187][ T6902] binder_alloc: 6900: binder_alloc_buf, no vma [ 154.591136][ T29] usb 4-1: Product: syz [ 154.611356][ T29] usb 4-1: Manufacturer: syz [ 154.649238][ T29] usb 4-1: SerialNumber: syz [ 155.045781][ T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 155.105441][ T29] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 155.139410][ T5637] Bluetooth: hci3: connection err: -111 [ 155.590466][ T31] audit: type=1326 audit(1785171717.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.261" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b2779de99 code=0x0 [ 155.729579][ T29] usb 4-1: USB disconnect, device number 3 [ 155.933715][ T6927] fuse: fd is not a fuse device [ 157.266212][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.630537][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 157.672007][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.742353][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.472463][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 159.689020][ T6985] binder_alloc: 6978: binder_alloc_buf, no vma [ 162.467813][ T7012] 0x000000000006-0x000000020000 : "" [ 162.582559][ T7012] ftl_cs: FTL header corrupt! [ 163.173891][ T7017] Bluetooth: MGMT ver 1.23 [ 167.139197][ T7053] loop5: detected capacity change from 0 to 256 [ 168.939789][ T7071] syzkaller0: entered promiscuous mode [ 168.958331][ T7071] syzkaller0: entered allmulticast mode [ 170.266436][ T7093] syzkaller0: entered promiscuous mode [ 170.276072][ T7093] syzkaller0: entered allmulticast mode [ 174.733730][ T7124] loop3: detected capacity change from 0 to 32768 [ 174.773747][ T7124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.324 (7124) [ 174.807839][ T7124] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.818031][ T7124] BTRFS info (device loop3): using crc32c checksum algorithm [ 174.950967][ T7124] BTRFS info (device loop3): setting nodatasum [ 174.957254][ T7124] BTRFS info (device loop3): setting nodatacow [ 174.963463][ T7124] BTRFS info (device loop3): turning on async discard [ 174.970251][ T7124] BTRFS info (device loop3): enabling free space tree [ 174.977163][ T7124] BTRFS info (device loop3): max_inline set to 0 [ 175.224155][ T31] audit: type=1326 audit(1785171737.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaae79de99 code=0x0 [ 176.177501][ T5622] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.092712][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 177.115824][ T7155] process 'syz.4.330' launched './file0' with NULL argv: empty string added [ 177.144985][ T7159] fuse: fd is not a fuse device [ 177.156300][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 177.554812][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 177.819922][ T24] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 177.896336][ T24] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 65 [ 177.980815][ T7166] syzkaller0: entered promiscuous mode [ 177.985648][ T24] usb 4-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 178.046381][ T7166] syzkaller0: entered allmulticast mode [ 178.069603][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.148771][ T24] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 178.192567][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.202436][ T7175] loop0: detected capacity change from 0 to 512 [ 178.262835][ T7175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 178.279472][ T24] usb 4-1: config 0 descriptor?? [ 178.339928][ T24] usb-storage 4-1:0.0: USB Mass Storage device detected [ 178.351427][ T7175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.429253][ T24] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 178.457713][ T7183] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 178.468988][ T7175] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.508638][ T7183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.339'. [ 178.577375][ T7175] EXT4-fs (loop0): 1 truncate cleaned up [ 178.637825][ T7175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.673770][ T24] usb 4-1: USB disconnect, device number 4 [ 179.091875][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.395299][ T7196] loop3: detected capacity change from 0 to 128 [ 179.614473][ T7196] loop3: detected capacity change from 128 to 64 [ 179.681509][ T7196] loop3: p1 [ 179.692851][ T37] FAT-fs (loop3): unable to read inode block for updating (i_pos 1056) [ 179.707290][ T7196] loop3: p1 size 393216 extends beyond EOD, truncated [ 179.796505][ T7202] FAT-fs (loop3): unable to read inode block for updating (i_pos 1056) [ 179.838694][ T7202] FAT-fs (loop3): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 181.096801][ T7211] loop5: detected capacity change from 0 to 40427 [ 181.104728][ T7211] F2FS-fs: heap/no_heap options were deprecated [ 181.118846][ T7211] F2FS-fs (loop5): build fault injection rate: 19 [ 181.125860][ T7211] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 181.154083][ T7211] F2FS-fs (loop5): invalid crc value [ 181.240290][ T7211] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 181.323936][ T7211] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 181.343715][ T7211] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.357361][ T7211] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 181.660070][ T7211] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 181.791279][ T7224] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 181.807460][ T7224] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 182.320087][ T7211] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0 [ 182.398655][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.407683][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.647892][ T5631] syz-executor: attempt to access beyond end of device [ 182.647892][ T5631] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.731189][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 182.731223][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.731237][ T5631] Call Trace: [ 182.731246][ T5631] [ 182.731257][ T5631] dump_stack_lvl+0xe8/0x150 [ 182.731299][ T5631] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 182.731339][ T5631] f2fs_write_end_io+0x124b/0x1710 [ 182.731400][ T5631] __submit_merged_bio+0x258/0x6a0 [ 182.731435][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.731466][ T5631] ? rcu_is_watching+0x15/0xb0 [ 182.731500][ T5631] __submit_merged_write_cond+0x3c9/0x4e0 [ 182.731536][ T5631] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 182.731576][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.731610][ T5631] f2fs_write_data_pages+0x2a27/0x36f0 [ 182.731682][ T5631] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.731761][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.731796][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.731837][ T5631] ? __pfx___schedule+0x10/0x10 [ 182.731861][ T5631] ? irqentry_exit+0x218/0x8f0 [ 182.731901][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.731929][ T5631] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.731963][ T5631] ? preempt_schedule_common+0x82/0xd0 [ 182.731990][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732025][ T5631] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.732065][ T5631] do_writepages+0x338/0x560 [ 182.732112][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732147][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732180][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732207][ T5631] ? do_raw_spin_unlock+0xf5/0x210 [ 182.732240][ T5631] filemap_fdatawrite+0x1e9/0x2f0 [ 182.732270][ T5631] ? check_noncircular+0xda/0x150 [ 182.732291][ T5631] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 182.732370][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732402][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732427][ T5631] ? do_raw_spin_unlock+0xf5/0x210 [ 182.732453][ T5631] f2fs_sync_dirty_inodes+0x30e/0x830 [ 182.732509][ T5631] f2fs_write_checkpoint+0xa3d/0x2710 [ 182.732545][ T5631] ? __lock_acquire+0x13e8/0x2cf0 [ 182.732603][ T5631] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 182.732637][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732726][ T5631] kill_f2fs_super+0x2f6/0x700 [ 182.732760][ T5631] ? __pfx_kill_f2fs_super+0x10/0x10 [ 182.732808][ T5631] ? call_rcu+0x64b/0x8b0 [ 182.732831][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732857][ T5631] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.732880][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.732913][ T5631] deactivate_locked_super+0xbc/0x130 [ 182.732950][ T5631] cleanup_mnt+0x3d3/0x460 [ 182.732980][ T5631] task_work_run+0x1d9/0x270 [ 182.733007][ T5631] ? __pfx_task_work_run+0x10/0x10 [ 182.733039][ T5631] exit_to_user_mode_loop+0x1fa/0x730 [ 182.733064][ T5631] ? rcu_is_watching+0x15/0xb0 [ 182.733083][ T5631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.733118][ T5631] do_syscall_64+0x353/0x580 [ 182.733145][ T5631] ? trace_irq_disable+0x3b/0x140 [ 182.733183][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.733203][ T5631] RIP: 0033:0x7f62c7d9f0d7 [ 182.733220][ T5631] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 182.733234][ T5631] RSP: 002b:00007ffc47712dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.733255][ T5631] RAX: 0000000000000000 RBX: 00007f62c7e3330a RCX: 00007f62c7d9f0d7 [ 182.733272][ T5631] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc47712e80 [ 182.733287][ T5631] RBP: 00007ffc47712e80 R08: 00007ffc47713e80 R09: 00000000ffffffff [ 182.733304][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc47713f10 [ 182.733318][ T5631] R13: 00007f62c7e3330a R14: 000000000002c827 R15: 00007ffc47713f50 [ 182.733355][ T5631] [ 183.162942][ T7235] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 183.382503][ T5631] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 183.910200][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 184.732882][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.825385][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.991613][ T31] audit: type=1326 audit(1785171747.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.3.359" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feaae79de99 code=0x0 [ 188.499103][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 189.828099][ T969] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.849277][ T969] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.893438][ T969] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.935052][ T969] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.315848][ T7289] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 191.601493][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 191.670238][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 191.838566][ T7322] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 191.872073][ T7323] loop5: detected capacity change from 0 to 256 [ 192.366029][ T7338] read descriptors [ 192.465268][ T5628] ffs_data_put(): freeing [ 192.800610][ T31] audit: type=1800 audit(1785171752.923:13): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.386" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 193.305006][ T5637] Bluetooth: hci3: connection err: -111 [ 193.545981][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.552390][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.895864][ T31] audit: type=1326 audit(1785171756.013:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7353 comm="syz.2.389" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b2779de99 code=0x0 [ 198.160427][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.168229][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.662356][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.740863][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.478820][ T7378] tipc: Enabling of bearer rejected, failed to enable media [ 200.507289][ T6386] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.546459][ T6386] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.580603][ T6386] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.614638][ T6386] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.926649][ T7405] ffs_data_put(): freeing [ 203.270758][ T5637] Bluetooth: hci1: connection err: -111 [ 203.506476][ T7435] loop0: detected capacity change from 0 to 32768 [ 203.528397][ T31] audit: type=1326 audit(1785171763.643:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.1.408" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 203.564950][ T7435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.409 (7435) [ 203.588842][ T7435] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.599030][ T7435] BTRFS info (device loop0): using crc32c checksum algorithm [ 203.741466][ T7435] BTRFS info (device loop0): setting nodatasum [ 203.748418][ T7435] BTRFS info (device loop0): setting nodatacow [ 203.754654][ T7435] BTRFS info (device loop0): turning on async discard [ 203.761454][ T7435] BTRFS info (device loop0): enabling free space tree [ 203.768431][ T7435] BTRFS info (device loop0): max_inline set to 0 [ 204.049730][ T31] audit: type=1326 audit(1785171763.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.409" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30d539de99 code=0x0 [ 204.487094][ T5621] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.868100][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 205.868832][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 205.874260][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 205.882240][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 205.886386][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 210.710880][ T51] Bluetooth: hci4: connection err: -111 [ 211.082785][ T31] audit: type=1326 audit(1785171771.203:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.1.424" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 216.167743][ T7547] netlink: 'syz.1.437': attribute type 12 has an invalid length. [ 216.186318][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 216.342934][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.359228][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.366173][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.380796][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.386190][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.400664][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.410728][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.420121][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.420324][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.439285][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.302595][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 218.597097][ T5623] Bluetooth: hci7: command tx timeout [ 218.604855][ T5623] Bluetooth: hci6: command tx timeout [ 219.047382][ T7592] fuse: fd is not a fuse device [ 220.301027][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.308491][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.318574][ T7552] bridge_slave_0: entered allmulticast mode [ 220.327577][ T7552] bridge_slave_0: entered promiscuous mode [ 220.361026][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.372450][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.385951][ T7552] bridge_slave_1: entered allmulticast mode [ 220.409289][ T7552] bridge_slave_1: entered promiscuous mode [ 220.663527][ T5630] Bluetooth: hci6: command tx timeout [ 220.669401][ T5623] Bluetooth: hci7: command tx timeout [ 221.164910][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.200314][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.416794][ T7549] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.433952][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.454463][ T7549] bridge_slave_0: entered allmulticast mode [ 221.473419][ T7549] bridge_slave_0: entered promiscuous mode [ 221.533771][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.542463][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.563721][ T7549] bridge_slave_1: entered allmulticast mode [ 221.585969][ T7549] bridge_slave_1: entered promiscuous mode [ 221.622183][ T7552] team0: Port device team_slave_0 added [ 221.632869][ T7552] team0: Port device team_slave_1 added [ 221.680925][ T7549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.690276][ T7629] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.742779][ T7549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.755542][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.762596][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.788914][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.822370][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.829824][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.856372][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.941135][ T7549] team0: Port device team_slave_0 added [ 221.973069][ T7549] team0: Port device team_slave_1 added [ 222.021296][ T7552] hsr_slave_0: entered promiscuous mode [ 222.029479][ T7552] hsr_slave_1: entered promiscuous mode [ 222.042161][ T7552] debugfs: 'hsr0' already exists in 'hsr' [ 222.048855][ T7552] Cannot create hsr debugfs directory [ 222.085310][ T7549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.092326][ T7549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.132951][ T7549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.150329][ T7549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.157394][ T7549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.189680][ T7549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.300108][ T7549] hsr_slave_0: entered promiscuous mode [ 222.306981][ T7549] hsr_slave_1: entered promiscuous mode [ 222.313368][ T7549] debugfs: 'hsr0' already exists in 'hsr' [ 222.319155][ T7549] Cannot create hsr debugfs directory [ 222.625482][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 222.703841][ T7552] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.716774][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.725368][ T7552] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.737050][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.744642][ T5623] Bluetooth: hci7: command tx timeout [ 222.744684][ T5630] Bluetooth: hci6: command tx timeout [ 222.754437][ T7552] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.771716][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.780188][ T7552] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.794199][ T7552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.891546][ T7549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.904281][ T7549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.912721][ T7549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.925146][ T7549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.937298][ T7549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.949398][ T7549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.964732][ T7549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.976578][ T7549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.132227][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.188883][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.211411][ T7549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.222753][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.230015][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.282001][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.289323][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.312970][ T7549] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.374293][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.381475][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.435857][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.443157][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.791690][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 224.804281][ T5623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 224.814543][ T5623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 224.823440][ T5623] Bluetooth: hci7: command tx timeout [ 224.825483][ T4937] Bluetooth: hci6: command tx timeout [ 224.835202][ T4937] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 224.848659][ T4937] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 224.892862][ T4937] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 224.914959][ T4937] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 224.926931][ T4937] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 224.945215][ T4937] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 224.955264][ T4937] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 225.379120][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.047069][ T4937] Bluetooth: hci8: command tx timeout [ 227.063444][ T4937] Bluetooth: hci9: command tx timeout [ 228.644334][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.708701][ T7549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.727319][ T4937] Bluetooth: hci4: connection err: -111 [ 229.086050][ T4937] Bluetooth: hci8: command tx timeout [ 229.146273][ T4937] Bluetooth: hci9: command tx timeout [ 229.157272][ T31] audit: type=1326 audit(1785171789.283:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.1.472" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 230.941163][ T7766] bridge0: port 3(vxlan0) entered blocking state [ 230.950420][ T7766] bridge0: port 3(vxlan0) entered disabled state [ 230.957449][ T7766] vxlan0: entered allmulticast mode [ 230.965162][ T7766] vxlan0: entered promiscuous mode [ 231.148260][ T4937] Bluetooth: hci8: command tx timeout [ 231.223719][ T4937] Bluetooth: hci9: command tx timeout [ 231.656409][ T7773] overlayfs: failed to clone upperpath [ 231.906285][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.913659][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.921037][ T7681] bridge_slave_0: entered allmulticast mode [ 231.929644][ T7681] bridge_slave_0: entered promiscuous mode [ 231.939263][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.947849][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.955522][ T7681] bridge_slave_1: entered allmulticast mode [ 231.963631][ T7681] bridge_slave_1: entered promiscuous mode [ 232.026900][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.034470][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.041889][ T7676] bridge_slave_0: entered allmulticast mode [ 232.051581][ T7676] bridge_slave_0: entered promiscuous mode [ 232.074551][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.090603][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.102693][ T7676] bridge_slave_1: entered allmulticast mode [ 232.113824][ T7676] bridge_slave_1: entered promiscuous mode [ 232.181606][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.210999][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.295970][ T7681] team0: Port device team_slave_0 added [ 232.332544][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.345453][ T7681] team0: Port device team_slave_1 added [ 232.452587][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.969170][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.977576][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.007232][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.032170][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.047746][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.087281][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.106752][ T7676] team0: Port device team_slave_0 added [ 233.117139][ T7676] team0: Port device team_slave_1 added [ 233.124065][ T7549] veth0_vlan: entered promiscuous mode [ 233.211557][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.218691][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.245767][ T4937] Bluetooth: hci8: command tx timeout [ 233.251404][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.281949][ T7552] veth0_vlan: entered promiscuous mode [ 233.290044][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.303842][ T4937] Bluetooth: hci9: command tx timeout [ 233.310782][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.363407][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.512493][ T7549] veth1_vlan: entered promiscuous mode [ 233.531706][ T7681] hsr_slave_0: entered promiscuous mode [ 233.538844][ T7681] hsr_slave_1: entered promiscuous mode [ 233.546934][ T7681] debugfs: 'hsr0' already exists in 'hsr' [ 233.552918][ T7681] Cannot create hsr debugfs directory [ 233.569050][ T7676] hsr_slave_0: entered promiscuous mode [ 233.577430][ T7676] hsr_slave_1: entered promiscuous mode [ 233.588633][ T7676] debugfs: 'hsr0' already exists in 'hsr' [ 233.595534][ T7676] Cannot create hsr debugfs directory [ 233.689067][ T7552] veth1_vlan: entered promiscuous mode [ 233.881965][ T4937] Bluetooth: hci3: connection err: -111 [ 234.277400][ T31] audit: type=1326 audit(1785171794.403:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7792 comm="syz.2.483" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b2779de99 code=0x0 [ 234.420368][ T7549] veth0_macvtap: entered promiscuous mode [ 234.479457][ T7549] veth1_macvtap: entered promiscuous mode [ 234.607366][ T7552] veth0_macvtap: entered promiscuous mode [ 234.639812][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.648133][ T7552] veth1_macvtap: entered promiscuous mode [ 234.704474][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.800341][ T7681] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 234.816844][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.826960][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.853558][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.877115][ T7681] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 234.890886][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.901431][ T7681] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 234.916178][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 234.929376][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.943873][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.957516][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.990905][ T7681] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 235.016621][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.094691][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.193760][ T7062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.233700][ T7062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.331151][ T7676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 235.345933][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.354908][ T7676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 235.366400][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.496191][ T1341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.517960][ T1341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.531801][ T7676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 235.571965][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.866998][ T7818] Invalid ELF header magic: != ELF [ 237.131771][ T7676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.155824][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.466810][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.497078][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.881320][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.910878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.967468][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.022092][ T7372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.062708][ T7372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.252390][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.297842][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.322521][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.329771][ T7062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.332249][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.413213][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.420468][ T7062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.674635][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.810248][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.877909][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.885167][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.002877][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.010091][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.038299][ T7866] loop6: detected capacity change from 0 to 1024 [ 240.528299][ T31] audit: type=1800 audit(1785171800.653:20): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.504" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 240.617586][ T31] audit: type=1800 audit(1785171800.693:21): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.504" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 243.508069][ C1] sd 0:0:1:0: [sda] tag#2086 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.518615][ C1] sd 0:0:1:0: [sda] tag#2086 CDB: Read(6) 08 00 00 00 00 00 [ 245.948076][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.515'. [ 246.283726][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.090474][ T7922] syz.7.516 (7922): drop_caches: 2 [ 247.602646][ T7935] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 247.671613][ T7935] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 247.761483][ T7936] input: syz1 as /devices/virtual/input/input11 [ 247.860190][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.160562][ T7681] veth0_vlan: entered promiscuous mode [ 249.227583][ T7681] veth1_vlan: entered promiscuous mode [ 249.421694][ T7681] veth0_macvtap: entered promiscuous mode [ 249.477021][ T7681] veth1_macvtap: entered promiscuous mode [ 249.568579][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.597747][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.613376][ T186] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.641221][ T6386] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.653043][ T6386] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.691916][ T7676] veth0_vlan: entered promiscuous mode [ 249.712545][ T6386] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.755185][ T6386] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.834583][ T186] usb 7-1: Using ep0 maxpacket: 16 [ 250.479487][ T186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.497755][ T186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.525389][ T7676] veth1_vlan: entered promiscuous mode [ 250.536405][ T7949] loop7: detected capacity change from 0 to 32768 [ 250.562740][ T186] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.624262][ T7966] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 250.634292][ T7966] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 250.644025][ T7966] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 250.663624][ T186] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.665222][ T31] audit: type=1800 audit(1785171810.743:22): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.517" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 250.749158][ T186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.831600][ T186] usb 7-1: config 0 descriptor?? [ 250.880508][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.923200][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.088025][ T7676] veth0_macvtap: entered promiscuous mode [ 251.180882][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.181427][ T7676] veth1_macvtap: entered promiscuous mode [ 251.206085][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.280516][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.297782][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.318314][ T186] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 251.345346][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.359251][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.376443][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.395991][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.411006][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.420624][ T6386] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.442546][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.461913][ T6386] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.468924][ T7976] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 251.474661][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.494547][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.498149][ T6386] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.522400][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.528409][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.562699][ T186] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 251.702083][ T186] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0003/input/input12 [ 251.903746][ T186] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 251.930174][ T6386] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.132684][ T186] usb 7-1: USB disconnect, device number 2 [ 252.430607][ T7983] fido_id[7983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 252.598272][ T4937] Bluetooth: hci4: connection err: -111 [ 252.606175][ T4937] Bluetooth: hci6: connection err: -111 [ 252.940719][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.994948][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.727241][ T8004] overlay: ./file0 is not a directory [ 254.997518][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.004000][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.291526][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.360916][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.471881][ T8012] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 258.174314][ T8025] loop7: detected capacity change from 0 to 8192 [ 261.883496][ T4937] Bluetooth: hci3: connection err: -111 [ 262.143120][ T8055] overlay: ./file0 is not a directory [ 263.078517][ T8054] loop9: detected capacity change from 0 to 1024 [ 263.189481][ T4937] Bluetooth: hci4: connection err: -111 [ 263.577021][ T8065] loop7: detected capacity change from 0 to 128 [ 269.634918][ T8086] hugetlbfs: syz.6.557 (8086): Using mlock ulimits for SHM_HUGETLB is obsolete [ 272.136703][ T8102] loop7: detected capacity change from 0 to 4096 [ 272.152468][ T8102] EXT4-fs: Ignoring removed orlov option [ 272.162288][ T8102] EXT4-fs (loop7): Test dummy encryption mode enabled [ 272.196258][ T8102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.308355][ T8102] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 273.404608][ T8113] overlayfs: overlapping lowerdir path [ 273.992328][ T8116] tipc: Started in network mode [ 274.008809][ T8116] tipc: Node identity 366f9b92e725, cluster identity 4711 [ 274.068193][ T8116] tipc: Enabled bearer , priority 0 [ 274.124949][ T8107] syzkaller0: entered promiscuous mode [ 274.169185][ T8107] syzkaller0: entered allmulticast mode [ 274.242575][ T4937] Bluetooth: hci6: connection err: -111 [ 274.333983][ T7552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.379727][ T8115] tipc: Resetting bearer [ 274.452276][ T8106] tipc: Resetting bearer [ 274.647129][ T8106] tipc: Disabling bearer [ 275.454876][ T8129] loop8: detected capacity change from 0 to 32768 [ 275.497200][ T8129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.572 (8129) [ 275.523049][ T8129] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.533225][ T8129] BTRFS info (device loop8): using crc32c checksum algorithm [ 275.677287][ T8129] BTRFS info (device loop8): setting nodatasum [ 275.684115][ T8129] BTRFS info (device loop8): setting nodatacow [ 275.690414][ T8129] BTRFS info (device loop8): turning on async discard [ 275.697770][ T8129] BTRFS info (device loop8): enabling free space tree [ 275.704947][ T8129] BTRFS info (device loop8): max_inline set to 0 [ 275.725160][ T5630] Bluetooth: hci9: connection err: -111 [ 275.950959][ T31] audit: type=1326 audit(1785171835.963:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.8.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecb639de99 code=0x0 [ 276.346025][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 276.519582][ T7676] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.038929][ T8118] loop6: detected capacity change from 0 to 32768 [ 277.110689][ T8118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.568 (8118) [ 277.500757][ T8159] loop7: detected capacity change from 0 to 4096 [ 277.557617][ T8159] EXT4-fs: inline encryption not supported [ 277.650030][ T8159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 277.702805][ T8159] EXT4-fs (loop7): Test dummy encryption mode enabled [ 277.759782][ T8159] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 278.643821][ T8159] System zones: 0-5 [ 278.747849][ T8159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.136242][ T8178] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 280.577915][ T31] audit: type=1800 audit(1785171840.583:24): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.576" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 281.522461][ T7552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.342639][ T8201] loop9: detected capacity change from 0 to 32768 [ 283.366625][ T8201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.587 (8201) [ 283.383374][ T8201] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.393566][ T8201] BTRFS info (device loop9): using crc32c checksum algorithm [ 284.435662][ T8202] netlink: 200 bytes leftover after parsing attributes in process `syz.7.584'. [ 284.737586][ T8201] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 284.738047][ T8201] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 284.747889][ T8201] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 284.757915][ T8201] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 284.782986][ T8201] BTRFS error (device loop9): open_ctree failed: -12 [ 284.998499][ T4937] Bluetooth: hci4: connection err: -111 [ 285.435523][ T31] audit: type=1326 audit(1785171845.553:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.1.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 285.513018][ T4937] Bluetooth: hci8: connection err: -111 [ 288.719368][ T4937] Bluetooth: hci4: connection err: -111 [ 289.461090][ T8251] overlayfs: failed lookup in lower (newroot/11, name='bus', err=-40): overlapping layers [ 291.770380][ T8261] loop8: detected capacity change from 0 to 512 [ 291.795251][ T186] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 291.811739][ T8261] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.930132][ T8261] EXT4-fs (loop8): 1 truncate cleaned up [ 293.118778][ T186] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 293.480421][ T186] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.494010][ T186] usb 10-1: Product: syz [ 293.503561][ T186] usb 10-1: Manufacturer: syz [ 293.516951][ T186] usb 10-1: SerialNumber: syz [ 293.525600][ T8261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.571514][ T186] usb 10-1: config 0 descriptor?? [ 293.745571][ T186] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -71 [ 293.781081][ T186] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 293.853372][ T186] usb 10-1: USB disconnect, device number 2 [ 294.288577][ T7676] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.384561][ T4937] Bluetooth: hci9: connection err: -111 [ 295.398150][ T4937] Bluetooth: hci8: connection err: -111 [ 295.638309][ T8280] loop9: detected capacity change from 0 to 32768 [ 295.691885][ T8280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.608 (8280) [ 295.719505][ T8280] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.729749][ T8280] BTRFS info (device loop9): using crc32c checksum algorithm [ 295.799060][ T8284] netlink: 44 bytes leftover after parsing attributes in process `syz.7.609'. [ 295.845520][ T8284] syzkaller0: entered promiscuous mode [ 295.857233][ T8284] syzkaller0: entered allmulticast mode [ 295.897818][ T8280] BTRFS info (device loop9): setting nodatasum [ 295.904116][ T8280] BTRFS info (device loop9): setting nodatacow [ 295.910315][ T8280] BTRFS info (device loop9): turning on async discard [ 295.917216][ T8280] BTRFS info (device loop9): enabling free space tree [ 295.924031][ T8280] BTRFS info (device loop9): max_inline set to 0 [ 296.090348][ T8284] tipc: Started in network mode [ 296.243682][ T31] audit: type=1326 audit(1785171856.313:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.9.608" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25dd79de99 code=0x0 [ 296.620856][ T8284] tipc: Node identity 7e11e4bbd261, cluster identity 4711 [ 296.718348][ T8284] tipc: Enabled bearer , priority 0 [ 296.769409][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.609'. [ 296.860517][ T8284] tipc: Resetting bearer [ 296.876024][ T7681] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.903988][ T8283] tipc: Resetting bearer [ 297.005449][ T8283] tipc: Disabling bearer [ 297.563415][ T31] audit: type=1800 audit(1785171857.573:27): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.610" name="idVendor" dev="configfs" ino=18068 res=0 errno=0 [ 298.521337][ T31] audit: type=1800 audit(1785171857.803:28): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.610" name="idProduct" dev="configfs" ino=18069 res=0 errno=0 [ 299.126365][ T8314] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[7552] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8314] [ 299.884439][ T8315] 0x000000000002-0x000000000004 : "" [ 300.465877][ T4937] Bluetooth: hci4: connection err: -111 [ 300.852324][ T8315] ftl_cs: FTL header corrupt! [ 300.932809][ T31] audit: type=1326 audit(1785171861.053:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.1.614" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841fb9de99 code=0x0 [ 302.301991][ T8335] overlayfs: failed to clone upperpath [ 303.093172][ T4937] Bluetooth: hci7: connection err: -111 [ 303.358925][ T8338] loop7: detected capacity change from 0 to 32768 [ 303.376486][ T8338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.618 (8338) [ 303.396908][ T8338] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.407088][ T8338] BTRFS info (device loop7): using crc32c checksum algorithm [ 303.487871][ T8338] BTRFS info (device loop7): setting nodatasum [ 303.494304][ T8338] BTRFS info (device loop7): setting nodatacow [ 303.500470][ T8338] BTRFS info (device loop7): turning on async discard [ 303.507356][ T8338] BTRFS info (device loop7): enabling free space tree [ 303.514173][ T8338] BTRFS info (device loop7): max_inline set to 0 [ 303.676338][ T31] audit: type=1326 audit(1785171863.803:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.7.618" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafdd79de99 code=0x0 [ 304.577764][ T7552] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.574612][ T4937] Bluetooth: hci9: connection err: -111 [ 306.868991][ T8378] loop9: detected capacity change from 0 to 32768 [ 306.898293][ T8378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.628 (8378) [ 306.967192][ T8378] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.977450][ T8378] BTRFS info (device loop9): using crc32c checksum algorithm [ 307.011656][ T4937] Bluetooth: hci6: connection err: -111 [ 308.226447][ T8386] loop6: detected capacity change from 0 to 32768 [ 308.265629][ T8386] BTRFS info: device /dev/loop6 (7:6) using temp-fsid dd391f6a-0641-4032-bf7f-5b0032a0ca81 [ 308.275914][ T8386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.629 (8386) [ 308.300223][ T8386] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.310368][ T8386] BTRFS info (device loop6): using crc32c checksum algorithm [ 308.789554][ T8378] BTRFS info (device loop9): setting nodatasum [ 308.795829][ T8378] BTRFS info (device loop9): setting nodatacow [ 308.802014][ T8378] BTRFS info (device loop9): turning on async discard [ 308.809158][ T8378] BTRFS info (device loop9): enabling free space tree [ 308.816165][ T8378] BTRFS info (device loop9): max_inline set to 0 [ 308.852491][ T4937] Bluetooth: hci7: connection err: -111 [ 309.136838][ T8408] loop7: detected capacity change from 0 to 32768 [ 309.293821][ T31] audit: type=1326 audit(1785171869.353:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.9.628" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25dd79de99 code=0x0 [ 309.342499][ T8408] BTRFS info: device /dev/loop7 (7:7) using temp-fsid a2bb0778-cef0-452b-9eae-3dd71738aa7c [ 309.352609][ T8408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.622 (8408) [ 309.437593][ T8408] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.447972][ T8408] BTRFS info (device loop7): using crc32c checksum algorithm [ 309.989611][ T7681] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 310.180916][ T4937] Bluetooth: hci3: connection err: -111 [ 310.857362][ T31] audit: type=1326 audit(1785171870.983:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.2.634" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b2779de99 code=0x0 [ 310.971299][ T8386] BTRFS error (device loop6): open_ctree failed: -4 [ 311.005998][ T8408] BTRFS info (device loop7): setting nodatasum [ 311.012241][ T8408] BTRFS info (device loop7): setting nodatacow [ 311.018648][ T8408] BTRFS info (device loop7): turning on async discard [ 311.025955][ T8408] BTRFS info (device loop7): enabling free space tree [ 311.032747][ T8408] BTRFS info (device loop7): max_inline set to 0 [ 311.337899][ T31] audit: type=1326 audit(1785171871.333:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.7.622" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafdd79de99 code=0x0 [ 312.158407][ T7552] BTRFS info (device loop7): last unmount of filesystem a2bb0778-cef0-452b-9eae-3dd71738aa7c [ 315.912320][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.8.640'. [ 318.146009][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.155660][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.836495][ T8507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.553532][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.653'. [ 329.811410][ T5630] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 329.823008][ T5630] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 329.833023][ T5630] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 330.049328][ T5630] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 330.101043][ T5630] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 331.530895][ T8538] loop6: detected capacity change from 0 to 512 [ 331.842237][ T8538] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 332.445490][ T5630] Bluetooth: hci10: command tx timeout [ 333.645237][ T5761] IPVS: starting estimator thread 0... [ 333.753422][ T8553] IPVS: using max 26 ests per chain, 62400 per kthread [ 333.868316][ T5630] Bluetooth: hci8: connection err: -111 [ 334.161515][ T8557] loop8: detected capacity change from 0 to 32768 [ 334.184579][ T8557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.662 (8557) [ 334.217723][ T8557] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.228270][ T8557] BTRFS info (device loop8): using crc32c checksum algorithm [ 334.509288][ T5630] Bluetooth: hci10: command tx timeout [ 335.424398][ T8557] BTRFS info (device loop8): setting nodatasum [ 335.430626][ T8557] BTRFS info (device loop8): setting nodatacow [ 335.436849][ T8557] BTRFS info (device loop8): turning on async discard [ 335.443664][ T8557] BTRFS info (device loop8): enabling free space tree [ 335.450518][ T8557] BTRFS info (device loop8): max_inline set to 0 [ 336.493418][ T31] audit: type=1326 audit(1785171896.613:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.8.662" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecb639de99 code=0x0 [ 336.673726][ T5630] Bluetooth: hci10: command tx timeout [ 337.972952][ T7676] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.340806][ T8603] loop7: detected capacity change from 0 to 512 [ 338.434278][ T8603] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 338.559187][ T8603] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 338.851638][ T4937] Bluetooth: hci10: command tx timeout [ 339.578492][ T4937] Bluetooth: hci7: command 0x0406 tx timeout [ 340.904350][ T8616] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 340.920894][ T8616] VFS: Can't find a romfs filesystem on dev nullb0. [ 340.920894][ T8616] [ 341.894116][ T8623] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 345.076362][ T5635] syz_tun (unregistering): left allmulticast mode [ 346.014907][ T992] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 346.473378][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.538462][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.640993][ T992] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.891166][ T992] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.356602][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 348.368413][ T992] usb 7-1: SerialNumber: syz [ 348.378261][ T992] usb 7-1: config 0 descriptor?? [ 348.487147][ T992] usb 7-1: can't set config #0, error -71 [ 348.496794][ T5747] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 349.041489][ T5747] usb 8-1: Using ep0 maxpacket: 32 [ 349.064899][ T992] usb 7-1: USB disconnect, device number 3 [ 349.080443][ T32] INFO: task syz.4.403:7414 blocked for more than 146 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.158157][ T5747] usb 8-1: config 0 has no interfaces? [ 349.224426][ T32] Not tainted syzkaller #0 [ 349.347741][ T5747] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 349.360296][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.369236][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.377757][ T32] task:syz.4.403 state:D stack:25872 pid:7414 tgid:7411 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 349.396413][ T32] Call Trace: [ 349.401073][ T32] [ 349.404130][ T32] __schedule+0x17d9/0x56c0 [ 349.408849][ T32] ? __pfx___schedule+0x10/0x10 [ 349.413822][ T32] ? schedule+0x90/0x2b0 [ 349.424835][ T5747] usb 8-1: config 0 descriptor?? [ 349.431667][ T32] schedule+0x164/0x2b0 [ 349.438379][ T32] schedule_preempt_disabled+0x13/0x30 [ 349.447202][ T32] __mutex_lock+0x7bf/0x1550 [ 349.462371][ T32] ? __mutex_lock+0x5d4/0x1550 [ 349.479594][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 349.507604][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 349.551232][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 349.606618][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.654298][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.697125][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.734012][ T32] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 349.765659][ T32] ? kasan_save_track+0x3e/0x80 [ 349.788263][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 349.810187][ T32] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 349.839824][ T32] ? __alloc_skb+0x2bd/0x7a0 [ 349.849159][ T32] ? netlink_dump+0x1e7/0xee0 [ 349.858509][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 349.868952][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 349.880083][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 349.894743][ T32] ? genl_rcv+0x28/0x40 [ 349.901868][ T32] ? netlink_unicast+0x7bb/0x940 [ 349.912359][ T32] ? netlink_sendmsg+0x813/0xb40 [ 349.923130][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 349.947549][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 349.953309][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 349.953725][ T5623] Bluetooth: hci9: command 0x0406 tx timeout [ 349.958488][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 350.013464][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 350.020430][ T32] ? do_syscall_64+0x174/0x580 [ 350.055251][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.073392][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 350.093449][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.099194][ T32] ? rcu_is_watching+0x15/0xb0 [ 350.113435][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.123364][ T32] ? trace_kmalloc+0x2a/0xf0 [ 350.133360][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.153325][ T32] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 350.161954][ T32] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 350.183332][ T32] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 350.191701][ T32] ? netlink_dump+0x1e7/0xee0 [ 350.203482][ T32] ? netlink_dump+0x1e7/0xee0 [ 350.213411][ T32] genl_dumpit+0x10b/0x1b0 [ 350.223382][ T32] netlink_dump+0x711/0xee0 [ 350.233391][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 350.253553][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.259451][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.273370][ T32] ? genl_start+0x497/0x6d0 [ 350.283416][ T32] __netlink_dump_start+0x589/0x7b0 [ 350.293372][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 350.305122][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 350.323367][ T32] ? genl_get_cmd+0x523/0x960 [ 350.329806][ T32] ? __pfx_genl_start+0x10/0x10 [ 350.337853][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 350.342853][ T32] ? __pfx_genl_done+0x10/0x10 [ 350.350276][ T32] ? __lock_acquire+0x683/0x2cf0 [ 350.355591][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 350.360743][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.366294][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 350.372881][ T32] netlink_rcv_skb+0x226/0x4a0 [ 350.377771][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.383080][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.388531][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.394428][ T32] ? down_read+0x2be/0x330 [ 350.399263][ T32] genl_rcv+0x28/0x40 [ 350.403475][ T32] netlink_unicast+0x7bb/0x940 [ 350.408500][ T32] netlink_sendmsg+0x813/0xb40 [ 350.413438][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.418959][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.424826][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.430070][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.436174][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.441985][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 350.448246][ T32] ____sys_sendmsg+0x54e/0x850 [ 350.453092][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.459008][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.465459][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.471169][ T32] ? import_iovec+0x73/0xa0 [ 350.476358][ T32] ___sys_sendmsg+0x2a5/0x360 [ 350.481581][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.488212][ T32] ? __lock_acquire+0x683/0x2cf0 [ 350.493675][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.498989][ T32] ? futex_wait+0x2a2/0x390 [ 350.504274][ T32] ? __fget_files+0x2a/0x420 [ 350.508967][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.515407][ T32] ? __fget_files+0x3a2/0x420 [ 350.520188][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 350.525806][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.531561][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.537655][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.543733][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.550482][ T32] do_syscall_64+0x174/0x580 [ 350.555668][ T32] ? trace_irq_disable+0x3b/0x140 [ 350.560796][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.567352][ T32] RIP: 0033:0x7f3e6ed9de99 [ 350.571835][ T32] RSP: 002b:00007f3e6cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.580847][ T32] RAX: ffffffffffffffda RBX: 00007f3e6f025fa0 RCX: 00007f3e6ed9de99 [ 350.592222][ T32] RDX: 0000000000008800 RSI: 0000200000000000 RDI: 0000000000000006 [ 350.600902][ T32] RBP: 00007f3e6ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 350.609433][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.617885][ T32] R13: 00007f3e6f026038 R14: 00007f3e6f025fa0 R15: 00007ffd805bb5f8 [ 350.626370][ T32] [ 350.629688][ T32] [ 350.629688][ T32] Showing all locks held in the system: [ 350.640047][ T32] 1 lock held by rcu_tasks_kthre/28: [ 350.645848][ T32] #0: ffffffff8eb5a608 (rcu_tasks.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xb2a/0xe20 [ 350.669270][ T32] 1 lock held by khungtaskd/32: [ 350.679759][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.689898][ T32] 5 locks held by kworker/u9:1/4937: [ 350.695614][ T32] #0: ffff88802b2a6140 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 350.706638][ T32] #1: ffffc9000efe7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 350.719403][ T32] #2: ffff8880522a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 350.729556][ T32] #3: ffff8880522a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 350.739438][ T32] #4: ffffffff901b4d20 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 350.749581][ T32] 2 locks held by getty/5376: [ 350.754916][ T32] #0: ffff8880323390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.764845][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 350.775393][ T32] 6 locks held by kworker/u9:5/5630: [ 350.780704][ T32] #0: ffff888079456940 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 350.791597][ T32] #1: ffffc9000439fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 350.804686][ T32] #2: ffff88807ba40ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 350.814699][ T32] #3: ffff88807ba400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 350.824805][ T32] #4: ffffffff901b4d20 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 350.834763][ T32] #5: ffff8880676a6af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 350.844442][ T32] 4 locks held by kworker/u8:11/6635: [ 350.849957][ T32] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 350.860664][ T32] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 350.869964][ T32] #2: ffff888051a207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 350.880445][ T32] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 350.891343][ T32] 3 locks held by syz.5.397/7377: [ 350.896491][ T32] #0: ffff888036552470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 350.906045][ T32] #1: ffff888035a56450 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 350.915616][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 350.924808][ T32] 3 locks held by syz.4.403/7414: [ 350.930111][ T32] #0: ffffffff9009e068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.938557][ T32] #1: ffff88807ae246e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 350.949362][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 350.960503][ T32] 3 locks held by syz.0.419/7494: [ 350.965659][ T32] #0: ffff88807a251270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 350.975077][ T32] #1: ffff88805366c450 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 350.984539][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 350.993826][ T32] 3 locks held by syz.0.419/7499: [ 350.998998][ T32] #0: ffff88807a2517b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 351.008277][ T32] #1: ffff88805366c450 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 351.017516][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 351.026904][ T32] 3 locks held by syz.0.419/7502: [ 351.032186][ T32] #0: ffff88807a251430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 351.041344][ T32] #1: ffff88805366c450 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 351.050784][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 351.060040][ T32] 2 locks held by syz.3.420/7498: [ 351.065810][ T32] #0: ffffffff9009e068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.074468][ T32] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 351.084665][ T32] 1 lock held by syz-executor/7549: [ 351.090021][ T32] #0: ffff888051b34ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 351.100156][ T32] 1 lock held by syz-executor/7676: [ 351.105566][ T32] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 351.116836][ T32] [ 351.126850][ T32] ============================================= [ 351.126850][ T32] [ 351.135701][ T32] NMI backtrace for cpu 1 [ 351.135720][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.135752][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 351.135767][ T32] Call Trace: [ 351.135776][ T32] [ 351.135786][ T32] dump_stack_lvl+0xe8/0x150 [ 351.135832][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 351.135870][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.135900][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.135941][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 351.135984][ T32] sys_info+0x135/0x170 [ 351.136017][ T32] watchdog+0xfd7/0x1030 [ 351.136058][ T32] ? watchdog+0x1c7/0x1030 [ 351.136097][ T32] kthread+0x388/0x470 [ 351.136137][ T32] ? __pfx_watchdog+0x10/0x10 [ 351.136171][ T32] ? __pfx_kthread+0x10/0x10 [ 351.136208][ T32] ret_from_fork+0x514/0xb70 [ 351.136249][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 351.136289][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.136317][ T32] ? __switch_to+0xc89/0x1420 [ 351.136352][ T32] ? __pfx_kthread+0x10/0x10 [ 351.136390][ T32] ret_from_fork_asm+0x1a/0x30 [ 351.136435][ T32] [ 351.136480][ T32] Sending NMI from CPU 1 to CPUs 0: [ 351.259333][ C0] NMI backtrace for cpu 0 [ 351.259354][ C0] CPU: 0 UID: 0 PID: 992 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 351.259378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 351.259393][ C0] Workqueue: events drain_vmap_area_work [ 351.259431][ C0] RIP: 0010:__lock_acquire+0x18fa/0x2cf0 [ 351.259469][ C0] Code: 14 25 ff 0f 00 00 39 05 30 19 d2 12 73 06 89 05 28 19 d2 12 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 d0 7d a2 [ 351.259488][ C0] RSP: 0018:ffffc900051c7240 EFLAGS: 00000006 [ 351.259506][ C0] RAX: ffffffff970416f8 RBX: 0000000000000111 RCX: 0000000000000002 [ 351.259520][ C0] RDX: ffffffff96f8f898 RSI: ffff888027918c68 RDI: 0000000000000111 [ 351.259536][ C0] RBP: a908d2e49ae696e9 R08: ffffc900051c7208 R09: 0000000000000020 [ 351.259551][ C0] R10: 0000000000000000 R11: ffffffff81a32270 R12: 0000000000000001 [ 351.259565][ C0] R13: ffffffff941640a8 R14: ffff888027918000 R15: ffffc900051c72d0 [ 351.259584][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 351.259604][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.259620][ C0] CR2: 0000001b34807ff8 CR3: 000000000e946000 CR4: 0000000000350ef0 [ 351.259638][ C0] Call Trace: [ 351.259646][ C0] [ 351.259658][ C0] ? __bfs+0x153/0x290 [ 351.259700][ C0] ? ktime_get+0x45/0x220 [ 351.259728][ C0] lock_acquire+0x106/0x350 [ 351.259760][ C0] ? ktime_get+0x45/0x220 [ 351.259796][ C0] ? ktime_get+0x45/0x220 [ 351.259823][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 351.259854][ C0] ? ktime_get+0x45/0x220 [ 351.259881][ C0] ktime_get+0x45/0x220 [ 351.259913][ C0] clockevents_program_event+0x290/0x630 [ 351.259940][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 351.259963][ C0] ? bad_range+0x8e/0x2a0 [ 351.259988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.260014][ C0] ? tick_program_event+0x8f/0x120 [ 351.260047][ C0] __hrtimer_rearm_deferred+0x26c/0x420 [ 351.260076][ C0] irqentry_exit+0x8b7/0x8f0 [ 351.260101][ C0] ? trace_irq_disable+0x3b/0x140 [ 351.260134][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.260157][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 351.260180][ C0] Code: f7 e8 ad bc cf f5 f7 c3 00 02 00 00 74 05 e8 20 a1 fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 d2 c0 f5 65 8b 05 ad 82 99 07 85 c0 74 18 5b 41 5e e9 7c a3 [ 351.260199][ C0] RSP: 0018:ffffc900051c7690 EFLAGS: 00000206 [ 351.260218][ C0] RAX: 0000000000000002 RBX: 0000000000000212 RCX: 0000000080000003 [ 351.260232][ C0] RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 [ 351.260252][ C0] RBP: 000000000000003f R08: ffffffff90579137 R09: 1ffffffff20af226 [ 351.260267][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: ffff8880b86410c0 [ 351.260284][ C0] R13: ffff88813fffb9b0 R14: ffff88813fffbf40 R15: 00000000000002c1 [ 351.260311][ C0] free_frozen_page_commit+0x662/0x1230 [ 351.260350][ C0] __free_frozen_pages+0x7d7/0xd10 [ 351.260385][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 351.260416][ C0] __apply_to_page_range+0xbd8/0x1420 [ 351.260447][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 351.260480][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 351.260504][ C0] ? smp_call_function_many_cond+0x126b/0x15f0 [ 351.260540][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.260568][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 351.260596][ C0] purge_vmap_node+0x220/0x960 [ 351.260632][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.260662][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 351.260693][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.260719][ C0] ? on_each_cpu_cond_mask+0x62/0x80 [ 351.260750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.260775][ C0] ? flush_tlb_kernel_range+0x350/0x460 [ 351.260811][ C0] __purge_vmap_area_lazy+0x783/0xb40 [ 351.260847][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 351.260874][ C0] drain_vmap_area_work+0x27/0x40 [ 351.260903][ C0] process_scheduled_works+0xa8e/0x14e0 [ 351.260948][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.260978][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.261003][ C0] ? assign_work+0x3cf/0x5d0 [ 351.261031][ C0] worker_thread+0xa47/0xfb0 [ 351.261059][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.261092][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.261118][ C0] ? __kthread_parkme+0x71/0x1f0 [ 351.261152][ C0] kthread+0x388/0x470 [ 351.261184][ C0] ? __pfx_worker_thread+0x10/0x10 [ 351.261210][ C0] ? __pfx_kthread+0x10/0x10 [ 351.261249][ C0] ret_from_fork+0x514/0xb70 [ 351.261284][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 351.261316][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.261341][ C0] ? __switch_to+0xc89/0x1420 [ 351.261370][ C0] ? __pfx_kthread+0x10/0x10 [ 351.261406][ C0] ret_from_fork_asm+0x1a/0x30 [ 351.261437][ C0] [ 351.964824][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 351.971718][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.980875][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 351.991033][ T32] Call Trace: [ 351.994498][ T32] [ 351.997428][ T32] vpanic+0x56c/0xa60 [ 352.001434][ T32] ? __pfx___schedule+0x10/0x10 [ 352.006300][ T32] ? __pfx_vpanic+0x10/0x10 [ 352.010823][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.016558][ T32] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 352.022747][ T32] panic+0xc5/0xd0 [ 352.026499][ T32] ? __pfx_panic+0x10/0x10 [ 352.031019][ T32] ? preempt_schedule_common+0x82/0xd0 [ 352.036489][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 352.041882][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 352.048067][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 352.054343][ T32] watchdog+0x1030/0x1030 [ 352.058713][ T32] ? watchdog+0x1c7/0x1030 [ 352.063166][ T32] kthread+0x388/0x470 [ 352.067255][ T32] ? __pfx_watchdog+0x10/0x10 [ 352.071942][ T32] ? __pfx_kthread+0x10/0x10 [ 352.076554][ T32] ret_from_fork+0x514/0xb70 [ 352.081167][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 352.086730][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.092372][ T32] ? __switch_to+0xc89/0x1420 [ 352.097094][ T32] ? __pfx_kthread+0x10/0x10 [ 352.101718][ T32] ret_from_fork_asm+0x1a/0x30 [ 352.106494][ T32] [ 352.109728][ T32] Kernel Offset: disabled [ 352.114034][ T32] Rebooting in 86400 seconds..