last executing test programs: 11m24.775188996s ago: executing program 32 (id=41): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) rmdir(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000340)={0x3, 0xb264, 0x0, 0x3, 0x0, 0xe}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000740), 0x0, 0x8000, 0x0, 0x0) close(r0) 11m17.57050755s ago: executing program 33 (id=47): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x64) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r2, 0x0, 0x3f9, 0x0) write$sndseq(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000002f000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) memfd_create(0x0, 0x1) 10m26.712191163s ago: executing program 34 (id=135): socket$pppoe(0x18, 0x1, 0x0) 7m35.700233175s ago: executing program 2 (id=779): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x9840) ioctl$SG_IO(r4, 0x2285, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7m34.347698775s ago: executing program 2 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(0x0, 0x44) 7m30.887311211s ago: executing program 2 (id=789): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x13, '\x00', @a}) 7m30.264634441s ago: executing program 2 (id=791): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) unshare(0x2040400) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 7m26.26355598s ago: executing program 2 (id=800): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$eJzs3d1rZGcZAPDnTGbysRudqL2oQutiC7tFNx9d2waR7grilQWlCt6tMTsbwk4ySzLpbkKRLP4BgogWvNErbwT/AEH2wnuLULD3YkVZdKugF9oj52M2HzvTZLOZzHby+8E75z3nvGee551JzndyAji1zkXElYgYiYgXIqJeTq+UJbaLkrV7//6bi1lJIk1f/3sSSTkta5aUJXO2XGy8GHS1vrl1Y6HZbKyV4zPtlZsz65tbF5dXFpYaS43VS5fmXp5/Zf6l+dlj6WfWr1e/+pef/PCXX3v1t1+49aerf7vw/SzfyXJ+px/HrfhMatln8UA1Itb6EWwARsr+1KLzAgDAkyzbx/9kRHwu3/+vRy3fm+ttdFc96Xt2AAAAwHFIL0/Gf5OIdJekunccAAAA+Gir5PfAJpXp8l6AyahUpqeLe3ifijOVZmu9/fnrrY3Va8W9slNRq1xfbjZmI87Vi/EkG597cEahGH8xn5eVZM89wD+uT+TzpxdbzWuDOOEBAAAAp9DZfcf//6oXx/8P+foAkgMAAACOz9SgEwAAAAD6zvE/AAAADL8jHP+P9iMPAAAAoC++8dprWUk7z7++9sbmxo3WGxevNdZvTK9sLE4vttZuTi+1WkvNdCxi5aD3a7ZaN78Yqxu3Z9qN9fbM+ubW1ZXWxmr76vKeR2ADAAAAJ+gTn737bhIR21+ayEtEpbi2P9JjAX8rAEOjcsh2afbyXn9zAU5Wr808MPyqHz7bbb4wxGrFIBl0HsDgHLQCGO/V4u2ImOhHRgAAwHE7/+m776bJ7uv/xUm/6s65AWBIHfb6PzB8elz/T+snnQhw4g64/g8MsZo7AOHUO/j6fw9v569XDo6Qpge+FwAA0FeTeUkq0+W1wMmo/CctxFTUkuvLzcZsRHw8Iv5Yr41l43P5kok/GgAAAAAAAAAAAAAAAAAAAAAAAACAQ0rTJNIjqB5pKQAAAGAQIip/Tcrnf52vPz+55+TA6E71gzRNb/3s9Z/eXmi31+YiRpN/1DtN2m+V01888dMXAAAAwC6dp/wXx+m1AWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLB6//6bi51yknHvfSUiprrFr8Z4PhyPWkSc+WcS1V3LJRExcgzxt+9EJZ7uFj/J0oqpMov98SsRMZFn8djx44D4z6Rp2jX+2ceODqfb3Wz9c+Wh37/RnRbdf/+rRbn8uPF7r/8qD9Z/I/vjV4v138cOGeMz7/x6Ztfot3eqY8X8avf1Tyd+0mP9+1y3YNWHJ333W1tbvXJLfxFxvuv2J9kTa6a9cnNmfXPr4vLKwlJjqbF66dLcy/OvzL80PztzfXmskb02G7NdY/zomd980Cv+vd9FnCnjd770tNywTBWDL5f9X9jf/+ezSq3XO+/43zu373+qqBatR3Y6eO/OaFx4rvv3/3Q+7Pr5//zfaS7fDmTzz5fbhGS7qEfEuU7jZ3/1h2d79v/OeFl79O//wsFdz73wzR/8+ZBNAYATsL65dWOh2Wys9bPyvVsRzbfSND3cUtle6eFDJBHbnSmVKCrZDtYx92IiInrM6h4rDvvOT/VM9b2JiP5/O0eqXH6UxunYI/2wJdtPQAdPUaVzHq0zZTT/gfz9dwa5XgIAAI7fzmHAoDMBAAAAAAAAAAAAAAAAAACA0+sk/sHY/pjbg+kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCH+n8AAAD///s2zRI=") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x210145b, 0x0) mount$9p_xen(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) 7m23.118833512s ago: executing program 2 (id=807): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x200000000000001a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700)={0x4, 0x0, [{0x5000, 0x4b, &(0x7f0000000340)=""/75}, {0xa000, 0xc2, &(0x7f0000001500)=""/194}, {0xe000, 0x1000, &(0x7f0000001d00)=""/4096}, {0x0, 0x4f, &(0x7f0000001680)=""/79}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m6.091476148s ago: executing program 35 (id=807): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x200000000000001a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700)={0x4, 0x0, [{0x5000, 0x4b, &(0x7f0000000340)=""/75}, {0xa000, 0xc2, &(0x7f0000001500)=""/194}, {0xe000, 0x1000, &(0x7f0000001d00)=""/4096}, {0x0, 0x4f, &(0x7f0000001680)=""/79}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m31.54218947s ago: executing program 6 (id=888): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 6m25.639831037s ago: executing program 6 (id=895): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7179, 0x100, 0xb, 0x3c1}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m22.243014436s ago: executing program 6 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0x4, 0x5, 0x7, 0x2, 0xe, '\x00\x00\x00\t\x00'}) 6m19.883776571s ago: executing program 6 (id=902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x2c, 0x2007, @fd, 0xc000000, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1e}) io_uring_enter(r3, 0x32dc, 0x0, 0xe, 0x0, 0x0) 6m18.332816708s ago: executing program 6 (id=904): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 6m16.403521524s ago: executing program 6 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) 6m0.389503206s ago: executing program 36 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) 5m39.653652898s ago: executing program 0 (id=947): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcae9, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 5m35.484132122s ago: executing program 0 (id=950): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r3 = socket(0x11, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fremovexattr(r2, 0x0) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x22) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) 5m33.215488734s ago: executing program 0 (id=952): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x2ab}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x8000000, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5m31.14314785s ago: executing program 0 (id=954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$kcm(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m27.684125444s ago: executing program 0 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m26.603413896s ago: executing program 0 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 5m10.438324642s ago: executing program 37 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 4m48.60417208s ago: executing program 5 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x0, 0x8004}, 0x14}}, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8000) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000808}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m40.20538219s ago: executing program 5 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000003b00)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r5, &(0x7f0000000900), 0x0) 4m38.784390594s ago: executing program 5 (id=1002): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @remote, @void, {@llc={0x4, {@snap={0x0, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 4m32.382517035s ago: executing program 5 (id=1007): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0x38, 0x0, &(0x7f0000000240), &(0x7f0000000480)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000005c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r1, 0x0, 0x240480c3) r3 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000008c0)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e24, 0x4, @empty, 0x3}}}, 0x38) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 4m32.066256843s ago: executing program 5 (id=1008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102400, 0x19000) syz_open_dev$sndpcmp(0x0, 0x0, 0x62302) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000080)={@my=0x1, 0x4}) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 4m30.280478775s ago: executing program 5 (id=1009): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r3 = openat$sndseq(0xffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYBLOB="0000000000e2ffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 4m14.845892516s ago: executing program 38 (id=1009): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r3 = openat$sndseq(0xffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYBLOB="0000000000e2ffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 1m8.799935675s ago: executing program 8 (id=1460): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = open(0x0, 0x0, 0x21) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffffff, 0x0, 0x0) 1m7.418794512s ago: executing program 8 (id=1463): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.320353266s ago: executing program 8 (id=1467): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), 0x200400, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f737761702c003ce0f70c270594f04ad050590d65d0263dbd758268560b9dcc6cd9bcde53004717db35d21a3cf3bd65d7aac8fca180cb0815d017d79b4b41"]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x24048894) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a25000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6d7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m5.983706937s ago: executing program 8 (id=1469): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x10010) fallocate(r6, 0x0, 0x0, 0x1001f0) fallocate(r6, 0x3, 0x1000, 0x10000) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040), 0x4) 1m3.073761056s ago: executing program 8 (id=1473): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0x7}, 0x0) 59.240330916s ago: executing program 8 (id=1477): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf1"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x48810) close_range(r2, 0xffffffffffffffff, 0x0) 43.800025408s ago: executing program 39 (id=1477): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf1"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x48810) close_range(r2, 0xffffffffffffffff, 0x0) 29.817030004s ago: executing program 4 (id=1522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x1, 0x8000000, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xb, 0xb}, {0x0, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0x1000007, 0xb, 0x1, 0x8000, 0xffff, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 23.949177253s ago: executing program 4 (id=1528): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) fanotify_mark(r3, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000010a3af10000400000088e17fe1b2b36ca9a903d99eeec7b64a165c39c6141cdfb726e163890c4fc971f43254683011ef5cec7e920a5aa650b3ed6964f0299fbf0b2667995197688f7ebf1e4364dddd5943f30db2323bc27db98fbe53646ee058604d698cc0c093d7562989180cce2b2d645fbefb6f0700dfd121d25ad7eb84f31f70b3a39cc21e4b8e5436dc06cffef3069f9dd865506149e461288d64b8519a75191bd8e78bfa56a6"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0x40000018}) close(0xffffffffffffffff) r7 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x3b, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) 22.035402222s ago: executing program 4 (id=1529): landlock_create_ruleset(0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140), 0x1, 0x50f3, &(0x7f0000005140)="$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") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000eeff0000", @ANYRES16=r2, @ANYRES32, @ANYBLOB="0a000600080211000000000020005080080007000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x5, 0x6, 0xf, 0x2, 0xff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 20.312600881s ago: executing program 9 (id=1533): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) alarm(0x38) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_SET_TIME(r3, 0x40187014, 0x0) 18.768783243s ago: executing program 9 (id=1534): sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x8000000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18.698848768s ago: executing program 7 (id=1535): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0xc172, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x7, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x3, 0x33b9, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x3, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x2, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x3, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x3, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a37247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r2, &(0x7f0000000040)=""/117, 0x75) 17.423262724s ago: executing program 3 (id=1537): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)="87", 0x1}) 17.383367197s ago: executing program 1 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 16.11293272s ago: executing program 3 (id=1539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) 15.917370522s ago: executing program 7 (id=1540): syslog(0x4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {}, {@gid}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x10000}}, {@keep_last_dots}, {@namecase}, {@discard}, {@utf8}, {@sys_tz}]}, 0x1, 0x1539, &(0x7f00000049c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x366) 14.035594651s ago: executing program 3 (id=1541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$kcm(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.835983066s ago: executing program 9 (id=1542): memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) 13.739913061s ago: executing program 4 (id=1543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 12.192451803s ago: executing program 1 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11.003108018s ago: executing program 7 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clock_adjtime(0x5, &(0x7f0000000300)={0x10002, 0x1, 0x9, 0x47, 0x4, 0x100000001, 0x801, 0x7, 0x812, 0x81, 0x4, 0xb, 0xfffffffffffffff7, 0xffffffffffffffff, 0x1, 0x1000, 0x3, 0xfffffffffffffffb, 0x1000, 0x6, 0x1, 0x6, 0xb5, 0x4, 0x80000001, 0x1}) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409", 0xcb}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 10.982667973s ago: executing program 9 (id=1546): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 9.954900242s ago: executing program 1 (id=1547): add_key$user(&(0x7f0000000340), &(0x7f0000000440), &(0x7f00000000c0), 0x9, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4a, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x401}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) 9.533688758s ago: executing program 7 (id=1548): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 8.177760691s ago: executing program 1 (id=1549): bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.799663127s ago: executing program 1 (id=1550): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11fc, &(0x7f0000002140)=ANY=[@ANYBLOB="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"]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) setreuid(0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000001100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) 6.518883648s ago: executing program 4 (id=1551): socket$rds(0x15, 0x5, 0x0) io_setup(0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x88000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) r3 = add_key$fscrypt_v1(&(0x7f0000001000), 0x0, &(0x7f0000001080)={0x0, "ddbccf094c545fdf7a3f745794103016e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000008100000000a600", 0x1d}, 0x48, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r3) syz_usb_connect(0x0, 0x56, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB], 0x14}, 0x2, 0x34005, 0x0, 0x4008815}, 0x44) 6.343794099s ago: executing program 3 (id=1552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$kcm(0x2, 0x5, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x10, 0x2, @tid=0xffffffffffffffff}, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x6d95) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 5.13221656s ago: executing program 7 (id=1553): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket(0x1a, 0x4, 0xfffffffd) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 3.817171836s ago: executing program 3 (id=1554): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x8, 0x2, 0x5, 0x6, 0x9, @multicast}, 0x10) io_submit(0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 2.626831705s ago: executing program 7 (id=1555): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe3}}, './file2\x00'}) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket(0x8, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.299764792s ago: executing program 3 (id=1556): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x48c5, 0x0, &(0x7f00000006c0), &(0x7f0000000280)) syz_io_uring_setup(0x8007060, &(0x7f0000019400)={0x0, 0x4a2a, 0x4, 0x1, 0x321, 0x0, r0}, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x324c41, &(0x7f0000019300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@usrquota}, {@nodioread_nolock}, {@bsdgroups}], [{@dont_hash}, {@euid_gt}]}, 0x0, 0x291, &(0x7f00000196c0)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20054880) r4 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1.12400126s ago: executing program 9 (id=1557): r0 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x48, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) gettid() sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="c5d2dc3df405df68c9deaa5aa2", 0xd}, {&(0x7f0000000540)="f56c1003c0a0f4d6eff2713b46698e120a4a3300d2c0e67726a5f82f9e7a1c79f6d5e9d61aa39feca0a7e9ec2ab31f093ccf36a2e4fbf80d4cfde4a0182a27743ea387cc2ec69cabbcb7d13edcea76b3dc53efa8af1dee135dead20d8277871c611d81b34f6e5029849aed6e97110c1cd3a6ece7c3fa3dcf6785c01e737fa6343ec99069d25a2eb3e9ee709be9860b5e6c", 0x91}, {&(0x7f0000000600)}, {&(0x7f0000000740)}], 0x4}}, {{&(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="1f3ed08a1ea06780855ce67e8b6369c88c2308f2d57f31262871c02ba9c9fb94cedfaf28091957186f7871c395f2aae06a5f39b44d31d56c0c7dc6fe2c14b95ae24e3a97e32b307ba32bea0c3fe18fa15d411b9aa37cb15df12dbe55573d48a7e3d9c47a563ed927ef9ae679978ef42ba91154fced13dcce", 0x78}], 0x1, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x18}}], 0x2, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a936", 0x1b}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x24, 0x0, "698e86252c563a2eb894ac1de863c518984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.089428873s ago: executing program 4 (id=1558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.061782637s ago: executing program 1 (id=1559): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) fanotify_mark(r2, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000010a3af10000400000088e17fe1b2b36ca9a903d99eeec7b64a165c39c6141cdfb726e163890c4fc971f43254683011ef5cec7e920a5aa650b3ed6964f0299fbf0b2667995197688f7ebf1e4364dddd5943f30db2323bc27db98fbe53646ee058604d698cc0c093d7562989180cce2b2d645fbefb6f0700dfd121d25ad7eb84f31f70b3a39cc21e4b8e5436dc06cffef3069f9dd865506149e461288d64b8519a75191bd8e78bfa56a6"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0x40000018}) close(0xffffffffffffffff) r6 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r7 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB]) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x3b, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) 0s ago: executing program 9 (id=1560): lstat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) kernel console output (not intermixed with test programs): tered promiscuous mode [ 551.479319][T10112] debugfs: 'hsr0' already exists in 'hsr' [ 551.485863][T10112] Cannot create hsr debugfs directory [ 551.886351][T10163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.935348][T10163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.965342][T10095] hsr_slave_0: entered promiscuous mode [ 551.971927][T10095] hsr_slave_1: entered promiscuous mode [ 551.978680][T10095] debugfs: 'hsr0' already exists in 'hsr' [ 551.984692][T10095] Cannot create hsr debugfs directory [ 552.043740][T10163] team0: Port device team_slave_0 added [ 552.129392][T10163] team0: Port device team_slave_1 added [ 552.138031][ T6027] bridge_slave_1: left allmulticast mode [ 552.144707][ T6027] bridge_slave_1: left promiscuous mode [ 552.150578][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.166921][ T6027] bridge_slave_0: left allmulticast mode [ 552.180075][ T6027] bridge_slave_0: left promiscuous mode [ 553.891954][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.905080][ T6027] bridge_slave_1: left allmulticast mode [ 553.910756][ T6027] bridge_slave_1: left promiscuous mode [ 553.916955][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.961409][ T6027] bridge_slave_0: left allmulticast mode [ 553.976407][ T6027] bridge_slave_0: left promiscuous mode [ 553.982278][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.997614][ T6027] bridge_slave_1: left allmulticast mode [ 554.003296][ T6027] bridge_slave_1: left promiscuous mode [ 554.015999][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.027393][ T6027] bridge_slave_0: left allmulticast mode [ 554.033056][ T6027] bridge_slave_0: left promiscuous mode [ 554.040441][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.055246][ T6027] bridge_slave_1: left allmulticast mode [ 554.060999][ T6027] bridge_slave_1: left promiscuous mode [ 554.164286][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.196164][ T6027] bridge_slave_0: left allmulticast mode [ 554.204292][ T6027] bridge_slave_0: left promiscuous mode [ 554.220524][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.153464][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.167096][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.180064][ T6027] bond0 (unregistering): Released all slaves [ 555.315691][T10270] Bluetooth: MGMT ver 1.23 [ 555.320185][T10270] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 555.421257][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.935410][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.949945][ T6027] bond0 (unregistering): Released all slaves [ 556.137380][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 556.159701][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 556.172749][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 556.197069][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 556.233300][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.696168][ T6027] bond1 (unregistering): (slave gretap1): Releasing active interface [ 557.091078][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.116931][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.316059][T10286] loop7: detected capacity change from 0 to 32768 [ 557.327016][T10286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1004 (10286) [ 557.343098][T10286] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.353305][T10286] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 557.377785][ T6027] bond0 (unregistering): Released all slaves [ 557.467679][T10286] BTRFS info (device loop7): enabling ssd optimizations [ 557.475262][T10286] BTRFS info (device loop7): turning on async discard [ 557.482025][T10286] BTRFS info (device loop7): enabling free space tree [ 557.700421][ T6027] bond1 (unregistering): Released all slaves [ 558.329998][ T6743] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.361329][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.411092][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.428753][ T6027] bond0 (unregistering): Released all slaves [ 560.228044][ T5847] Bluetooth: hci5: command tx timeout [ 561.525238][ T6027] tipc: Left network mode [ 561.584629][T10163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.604271][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.664341][T10163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.910865][T10163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.931891][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.980820][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.294181][ T5847] Bluetooth: hci5: command tx timeout [ 564.374000][ T5847] Bluetooth: hci5: command tx timeout [ 564.618755][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'. [ 565.151338][ T6027] hsr_slave_0: left promiscuous mode [ 565.159774][ T6027] hsr_slave_1: left promiscuous mode [ 565.166028][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.179088][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.205272][ T6027] hsr_slave_0: left promiscuous mode [ 565.214400][ T6027] hsr_slave_1: left promiscuous mode [ 565.220502][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.241656][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.574000][ T5847] Bluetooth: hci5: command tx timeout [ 566.968471][ T6027] hsr_slave_0: left promiscuous mode [ 566.988741][ T6027] hsr_slave_1: left promiscuous mode [ 567.023000][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.059769][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.086858][ T6027] hsr_slave_0: left promiscuous mode [ 567.104675][ T6027] hsr_slave_1: left promiscuous mode [ 567.110746][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.132983][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.507787][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.525345][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.639608][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 567.673650][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 569.845872][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 569.884056][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 574.736150][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 574.803032][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 576.227095][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 576.269995][T10359] loop7: detected capacity change from 0 to 1024 [ 576.282273][T10359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.289085][T10359] ext4: Unknown parameter 'seclabel' [ 576.610275][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 578.477558][T10163] hsr_slave_0: entered promiscuous mode [ 578.493987][T10163] hsr_slave_1: entered promiscuous mode [ 579.611428][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.619415][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.628297][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.636759][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.694625][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.026164][T10112] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 580.053276][T10112] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 580.101565][T10112] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 580.437177][T10112] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 581.604781][T10387] loop7: detected capacity change from 0 to 64 [ 581.616606][T10387] hfs: Unknown parameter 'qui' [ 581.686859][T10387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.701771][ T5847] Bluetooth: hci2: command tx timeout [ 583.071713][T10279] chnl_net:caif_netlink_parms(): no params data found [ 583.756526][T10279] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.763696][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.792931][T10279] bridge_slave_0: entered allmulticast mode [ 583.815987][T10279] bridge_slave_0: entered promiscuous mode [ 583.912716][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.935447][T10279] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.942823][T10279] bridge_slave_1: entered allmulticast mode [ 585.613974][ T5847] Bluetooth: hci2: command tx timeout [ 585.655857][T10279] bridge_slave_1: entered promiscuous mode [ 585.681194][T10374] chnl_net:caif_netlink_parms(): no params data found [ 585.839699][T10279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.865865][T10279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.040076][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.051716][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.059887][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.068541][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.076272][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.199390][T10279] team0: Port device team_slave_0 added [ 586.264421][T10279] team0: Port device team_slave_1 added [ 586.353031][T10163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 586.378498][T10163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 586.399077][T10163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 586.443712][T10163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 586.571395][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.584304][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.591554][T10374] bridge_slave_0: entered allmulticast mode [ 586.616759][T10374] bridge_slave_0: entered promiscuous mode [ 586.635312][T10279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.642297][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.676945][T10279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.708496][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.717060][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.724935][T10374] bridge_slave_1: entered allmulticast mode [ 586.737611][T10374] bridge_slave_1: entered promiscuous mode [ 586.773156][T10279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.793363][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.821768][T10279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.475318][ T5847] Bluetooth: hci2: command tx timeout [ 588.475374][ T5842] Bluetooth: hci1: command tx timeout [ 588.570882][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.664073][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.710012][T10374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.813230][T10279] hsr_slave_0: entered promiscuous mode [ 588.823195][T10279] hsr_slave_1: entered promiscuous mode [ 588.830935][T10279] debugfs: 'hsr0' already exists in 'hsr' [ 588.837098][T10279] Cannot create hsr debugfs directory [ 588.867762][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.888423][T10374] team0: Port device team_slave_0 added [ 588.900379][T10374] team0: Port device team_slave_1 added [ 589.120236][ T6027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.278609][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.285802][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.297671][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.304821][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.331424][T10374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.339796][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.383340][T10374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.938705][T10436] 9p: Bad value for 'rfdno' [ 589.994367][T10436] loop7: detected capacity change from 0 to 512 [ 590.910271][ T5842] Bluetooth: hci2: command tx timeout [ 590.915781][ T5842] Bluetooth: hci1: command tx timeout [ 590.966129][T10436] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1026: inode has both inline data and extents flags [ 590.979785][T10436] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1026: couldn't read orphan inode 15 (err -117) [ 590.993587][T10436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.150122][ T6743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.221961][ T6027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.289039][T10374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.304190][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.364103][T10374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.399673][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.410155][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.420231][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 591.437456][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 591.445416][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 591.566622][ T6027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.679124][T10413] chnl_net:caif_netlink_parms(): no params data found [ 591.868290][ T6027] bond0: (slave netdevsim0): Releasing backup interface [ 591.880872][ T6027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.913587][T10374] hsr_slave_0: entered promiscuous mode [ 591.922635][T10374] hsr_slave_1: entered promiscuous mode [ 591.931198][T10374] debugfs: 'hsr0' already exists in 'hsr' [ 591.937302][T10374] Cannot create hsr debugfs directory [ 592.934247][ T5847] Bluetooth: hci1: command tx timeout [ 592.968059][T10449] loop7: detected capacity change from 0 to 32768 [ 592.986379][T10449] jfs: Unknown parameter 'iocharse' [ 593.071072][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.089081][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.131287][T10413] bridge_slave_0: entered allmulticast mode [ 593.158799][T10413] bridge_slave_0: entered promiscuous mode [ 593.260784][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.273781][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.284243][T10413] bridge_slave_1: entered allmulticast mode [ 593.291702][T10413] bridge_slave_1: entered promiscuous mode [ 593.503670][T10413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.558364][T10413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.655524][T10163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.679608][T10413] team0: Port device team_slave_0 added [ 593.720851][ T5847] Bluetooth: hci3: command tx timeout [ 593.723359][T10413] team0: Port device team_slave_1 added [ 593.990676][T10413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.011666][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.043622][T10413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.198917][T10413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.236386][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.269965][T10413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.428796][ T6027] bridge_slave_1: left allmulticast mode [ 594.434646][ T6027] bridge_slave_1: left promiscuous mode [ 594.440441][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.451545][ T6027] bridge_slave_0: left allmulticast mode [ 594.479338][ T6027] bridge_slave_0: left promiscuous mode [ 594.505317][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.546733][ T6027] bridge_slave_1: left allmulticast mode [ 594.552434][ T6027] bridge_slave_1: left promiscuous mode [ 594.576941][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.593562][ T6027] bridge_slave_0: left allmulticast mode [ 594.599399][ T6027] bridge_slave_0: left promiscuous mode [ 594.605622][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.743119][T10464] loop7: detected capacity change from 0 to 16 [ 594.810603][T10464] erofs (device loop7): mounted with root inode @ nid 36. [ 594.912561][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.942380][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.961273][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.978552][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.991058][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.025746][ T5847] Bluetooth: hci1: command tx timeout [ 595.702117][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.712395][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.726928][ T6027] bond0 (unregistering): Released all slaves [ 595.734119][ T5842] Bluetooth: hci3: command tx timeout [ 595.850364][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.862444][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.873488][ T6027] bond0 (unregistering): Released all slaves [ 595.888877][T10163] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.957248][T10442] chnl_net:caif_netlink_parms(): no params data found [ 595.972415][ T6027] tipc: Left network mode [ 596.131314][T10413] hsr_slave_0: entered promiscuous mode [ 596.142287][T10413] hsr_slave_1: entered promiscuous mode [ 596.149455][T10413] debugfs: 'hsr0' already exists in 'hsr' [ 596.155809][T10413] Cannot create hsr debugfs directory [ 596.491550][ T6027] hsr_slave_0: left promiscuous mode [ 596.498140][ T6027] hsr_slave_1: left promiscuous mode [ 596.504826][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.512207][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.520728][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.529104][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.540819][ T6027] hsr_slave_0: left promiscuous mode [ 596.546833][ T6027] hsr_slave_1: left promiscuous mode [ 596.552680][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.561005][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.585055][ T6027] veth1_macvtap: left promiscuous mode [ 596.590569][ T6027] veth0_macvtap: left promiscuous mode [ 596.596517][ T6027] veth1_vlan: left promiscuous mode [ 596.601825][ T6027] veth0_vlan: left promiscuous mode [ 597.176919][ T5842] Bluetooth: hci4: command tx timeout [ 597.205459][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 597.246984][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 597.824064][ T5842] Bluetooth: hci3: command tx timeout [ 597.899552][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 597.932154][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 598.116987][T10279] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 598.129325][T10279] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 598.247639][T10279] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 598.269439][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.278913][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.289994][T10442] bridge_slave_0: entered allmulticast mode [ 598.306166][T10442] bridge_slave_0: entered promiscuous mode [ 598.321888][T10279] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 598.398450][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.406373][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.413603][T10442] bridge_slave_1: entered allmulticast mode [ 598.421532][T10442] bridge_slave_1: entered promiscuous mode [ 598.588939][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.643303][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.579224][ T5842] Bluetooth: hci4: command tx timeout [ 599.599942][T10442] team0: Port device team_slave_0 added [ 599.710271][T10442] team0: Port device team_slave_1 added [ 599.749011][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.756295][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.815465][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.846574][T10462] chnl_net:caif_netlink_parms(): no params data found [ 599.865814][ T30] IPVS: starting estimator thread 0... [ 599.868403][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.893779][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.940883][ T5847] Bluetooth: hci3: command tx timeout [ 599.949464][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.973995][T10485] IPVS: using max 26 ests per chain, 62400 per kthread [ 600.017178][T10442] hsr_slave_0: entered promiscuous mode [ 600.036306][T10442] hsr_slave_1: entered promiscuous mode [ 600.043287][T10442] debugfs: 'hsr0' already exists in 'hsr' [ 600.051854][T10442] Cannot create hsr debugfs directory [ 600.294543][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.302349][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.309959][T10462] bridge_slave_0: entered allmulticast mode [ 600.318226][T10462] bridge_slave_0: entered promiscuous mode [ 600.344990][T10462] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.352148][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.359614][T10462] bridge_slave_1: entered allmulticast mode [ 600.367503][T10462] bridge_slave_1: entered promiscuous mode [ 600.467891][T10462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.510478][T10374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 600.525614][T10462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.564418][T10374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.623287][T10374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.662260][T10374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.676982][T10462] team0: Port device team_slave_0 added [ 600.806802][T10462] team0: Port device team_slave_1 added [ 600.993234][T10279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.025054][T10462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.032018][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.061002][T10462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.110128][T10462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.117482][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.144863][T10462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.237656][T10462] hsr_slave_0: entered promiscuous mode [ 601.245026][T10462] hsr_slave_1: entered promiscuous mode [ 601.251273][T10462] debugfs: 'hsr0' already exists in 'hsr' [ 601.257566][T10462] Cannot create hsr debugfs directory [ 601.336544][T10279] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.466329][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.473818][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.534860][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.542088][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.654189][ T5847] Bluetooth: hci4: command tx timeout [ 601.859341][T10374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.873554][ T6027] bridge_slave_1: left allmulticast mode [ 601.879674][ T6027] bridge_slave_1: left promiscuous mode [ 601.885514][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.895594][ T6027] bridge_slave_0: left allmulticast mode [ 601.901279][ T6027] bridge_slave_0: left promiscuous mode [ 601.907930][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.919169][ T6027] bridge_slave_1: left allmulticast mode [ 601.925136][ T6027] bridge_slave_1: left promiscuous mode [ 601.930947][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.942396][ T6027] bridge_slave_0: left allmulticast mode [ 601.948551][ T6027] bridge_slave_0: left promiscuous mode [ 601.954969][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.966582][ T6027] bridge_slave_1: left allmulticast mode [ 601.972228][ T6027] bridge_slave_1: left promiscuous mode [ 601.979353][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.988401][ T6027] bridge_slave_0: left allmulticast mode [ 601.995174][ T6027] bridge_slave_0: left promiscuous mode [ 602.000887][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.343385][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.356737][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.367526][ T6027] bond0 (unregistering): Released all slaves [ 602.625638][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.639367][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.649898][ T6027] bond0 (unregistering): Released all slaves [ 602.802768][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.814846][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.825354][ T6027] bond0 (unregistering): Released all slaves [ 602.894823][T10374] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.997111][ T1937] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.004378][ T1937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.100345][ T6027] hsr_slave_0: left promiscuous mode [ 603.135692][ T6027] hsr_slave_1: left promiscuous mode [ 603.142173][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.156936][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.195740][ T6027] hsr_slave_0: left promiscuous mode [ 603.202766][ T6027] hsr_slave_1: left promiscuous mode [ 603.211600][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.225337][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.237533][ T6027] hsr_slave_0: left promiscuous mode [ 603.243448][ T6027] hsr_slave_1: left promiscuous mode [ 603.250226][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.258340][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.508485][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 603.539572][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 603.756737][ T5847] Bluetooth: hci4: command tx timeout [ 604.066021][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 604.642791][T10504] 9p: Bad value for 'rfdno' [ 604.700332][T10504] loop7: detected capacity change from 0 to 512 [ 605.646000][T10504] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1035: inode has both inline data and extents flags [ 605.660205][T10504] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1035: couldn't read orphan inode 15 (err -117) [ 605.678731][T10504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.789221][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 605.793341][ T6743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.481465][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 606.522557][T10509] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 606.535497][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 607.366248][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.373417][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.462179][T10413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 607.512081][T10413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 607.583923][T10413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 607.622533][T10374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 607.633182][T10374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.646396][T10413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 607.863527][T10279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.078331][T10279] veth0_vlan: entered promiscuous mode [ 609.092225][T10279] veth1_vlan: entered promiscuous mode [ 609.199405][T10537] loop7: detected capacity change from 0 to 128 [ 609.259528][T10537] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 609.290311][T10537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.765233][T10413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.010523][T10279] veth0_macvtap: entered promiscuous mode [ 610.037281][T10279] veth1_macvtap: entered promiscuous mode [ 610.052027][T10413] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.096009][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.103222][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.113809][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.120988][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.191235][T10374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.246586][T10462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 610.291764][T10462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 610.349945][T10462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 610.401375][T10462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 610.402230][T10540] loop7: detected capacity change from 0 to 32768 [ 610.448723][T10540] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.457201][T10540] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.464765][T10279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.503604][T10540] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 610.516506][ T793] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.524962][ T793] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 610.611435][ T793] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 610.624226][ T793] gfs2: fsid=syz:syz.0: jid=0: Done [ 610.629488][T10540] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 610.642933][T10279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.768611][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.810385][T10442] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 610.870650][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.896594][T10442] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 610.923361][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.950088][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.012075][T10442] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 611.082203][T10442] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 611.346692][T10374] veth0_vlan: entered promiscuous mode [ 611.438342][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.461973][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.497190][T10374] veth1_vlan: entered promiscuous mode [ 611.567152][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.583927][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.622264][T10413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.708947][T10462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.748888][T10374] veth0_macvtap: entered promiscuous mode [ 611.805169][T10374] veth1_macvtap: entered promiscuous mode [ 611.847986][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.880235][T10462] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.917314][ T1937] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.924570][ T1937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.597917][T10374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.638688][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.645896][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.672041][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.786460][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.793651][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.829905][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.837149][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.887638][T10374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.002423][ T6400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.061932][ T6400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.175378][ T6400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.256227][ T6400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.501629][T10442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.550604][T10442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.588084][T10462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.697996][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.738312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.747135][T10413] veth0_vlan: entered promiscuous mode [ 614.863787][T10413] veth1_vlan: entered promiscuous mode [ 614.981990][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.015016][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.060265][T10588] comedi: No check for data length of config insn id 6 is implemented [ 615.068596][T10588] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 615.078003][T10588] comedi: Assuming n=419 is correct [ 615.899923][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.974235][T10413] veth0_macvtap: entered promiscuous mode [ 616.052352][T10413] veth1_macvtap: entered promiscuous mode [ 616.217162][T10413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.261407][T10605] Cannot find add_set index 0 as target [ 616.282205][T10413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.425777][ T6400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.480088][ T6400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.519360][ T6400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.564462][ T6400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.949087][T10462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.756824][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.805169][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.993337][T10629] comedi comedi3: pcl816: I/O port conflict (0x8001,16) [ 619.012781][T10629] overlayfs: missing 'lowerdir' [ 620.389493][T10637] loop1: detected capacity change from 0 to 32768 [ 620.538629][T10636] loop8: detected capacity change from 0 to 128 [ 620.587201][T10637] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 620.631626][T10637] XFS (loop1): Ending clean mount [ 620.636203][T10462] veth0_vlan: entered promiscuous mode [ 620.642025][T10637] XFS (loop1): Quotacheck needed: Please wait. [ 620.664637][T10636] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 620.729595][T10462] veth1_vlan: entered promiscuous mode [ 620.748222][T10636] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 620.804758][T10637] XFS (loop1): Quotacheck: Done. [ 622.117697][ T1937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.096511][ T1937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.729287][ T6400] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 623.762448][T10442] veth0_vlan: entered promiscuous mode [ 623.777890][T10374] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 623.964771][T10442] veth1_vlan: entered promiscuous mode [ 623.982476][T10462] veth0_macvtap: entered promiscuous mode [ 624.092058][T10462] veth1_macvtap: entered promiscuous mode [ 624.334926][T10442] veth0_macvtap: entered promiscuous mode [ 626.617755][T10462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.236847][T10462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.990871][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.017037][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.029666][T10442] veth1_macvtap: entered promiscuous mode [ 629.113002][ T6027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.664519][ T5933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 629.912093][ T6027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.013704][ T5933] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 630.072576][ T6027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.174720][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 630.391248][ T5933] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.407577][ T6027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.565573][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 630.753017][ T5933] usb 2-1: Product: syz [ 630.784293][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.827106][ T5933] usb 2-1: Manufacturer: syz [ 630.920229][ T5933] usb 2-1: SerialNumber: syz [ 632.743722][ T5933] usb 2-1: config 0 descriptor?? [ 633.871552][ T5933] usb 2-1: selecting invalid altsetting 0 [ 633.885407][T10685] loop4: detected capacity change from 0 to 4096 [ 634.563158][ T5933] usb 2-1: USB disconnect, device number 4 [ 635.118808][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.405849][ T6386] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.579229][ T6386] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.606429][ T6386] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.645263][ T6386] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.719621][T10701] udevd[10701]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.217561][ T7504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.252293][ T7504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.753912][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 636.911922][ T7504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.950421][ T7504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.060035][ T6292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.081626][ T6292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.398064][ T7504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.433966][ T7504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.609562][T10736] loop7: detected capacity change from 0 to 32768 [ 638.725057][T10736] (syz.7.1060,10736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 638.739205][T10736] (syz.7.1060,10736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 638.887680][T10736] JBD2: Ignoring recovery information on journal [ 639.394006][T10736] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 640.728675][ T31] audit: type=1800 audit(1769132459.768:8): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1060" name="file2" dev="loop7" ino=16978 res=0 errno=0 [ 643.019381][ T6743] ocfs2: Unmounting device (7,7) on (node local) [ 643.475816][T10762] loop7: detected capacity change from 0 to 2048 [ 643.584595][T10762] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 643.742771][T10762] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 643.878452][T10762] UDF-fs: Scanning with blocksize 512 failed [ 644.594872][T10762] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2047, location=2047 [ 644.713445][T10762] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 644.824561][T10762] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 644.929382][T10762] UDF-fs: Scanning with blocksize 1024 failed [ 644.995543][ C0] Unknown status report in ack skb [ 645.028230][T10762] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2047, location=2047 [ 645.093706][T10762] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 645.114188][T10782] loop4: detected capacity change from 0 to 1024 [ 645.146929][T10762] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 645.205472][T10762] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 645.207787][T10782] hfsplus: invalid file type 0113366 for inode 2 [ 645.260534][T10762] UDF-fs: Scanning with blocksize 2048 failed [ 645.296351][T10762] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2047, location=2047 [ 645.301499][T10782] hfsplus: failed to load root directory [ 645.328795][T10762] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 645.380678][T10762] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 645.452509][T10762] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 645.515862][T10762] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 645.717748][T10762] UDF-fs: Scanning with blocksize 4096 failed [ 646.139118][T10762] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 646.539994][T10769] loop1: detected capacity change from 0 to 32768 [ 652.063956][ T6026] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 652.360969][T10835] loop1: detected capacity change from 0 to 2048 [ 652.472262][T10835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.314128][ T6026] usb 5-1: device descriptor read/64, error -71 [ 653.895035][ T6026] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 654.244316][ T6026] usb 5-1: device descriptor read/64, error -71 [ 654.364459][ T6026] usb usb5-port1: attempt power cycle [ 654.764023][ T6026] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 654.797626][T10854] loop3: detected capacity change from 0 to 1024 [ 654.820542][T10854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.898078][T10854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 655.040483][T10854] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 655.843638][T10854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.130315][T10867] bond0: (slave bond_slave_1): Releasing backup interface [ 656.181788][T10869] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 656.306031][T10869] loop1: detected capacity change from 0 to 2048 [ 656.451415][T10869] NILFS (loop1): ifile inode (checkpoint number=2) corrupted [ 656.515036][T10869] NILFS (loop1): error -5 while loading last checkpoint (checkpoint number=2) [ 656.533419][T10462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.198028][T10874] usb usb8: usbfs: process 10874 (syz.3.1097) did not claim interface 0 before use [ 657.677849][ T6026] usb 5-1: device descriptor read/8, error -71 [ 657.711987][ T5847] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 657.874042][ T5931] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 657.923106][T10889] loop3: detected capacity change from 0 to 256 [ 657.983209][T10889] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 658.036046][ T5931] usb 10-1: device descriptor read/64, error -71 [ 658.081573][T10889] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 658.183106][T10894] loop1: detected capacity change from 0 to 512 [ 658.273966][ T5931] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 658.284712][T10894] EXT4-fs: Ignoring removed i_version option [ 658.333609][T10894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.380234][T10898] loop8: detected capacity change from 0 to 1024 [ 658.385499][T10894] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.419166][T10894] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 658.419287][T10894] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 658.419306][T10894] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1102: Failed to acquire dquot type 0 [ 658.433963][ T5931] usb 10-1: device descriptor read/64, error -71 [ 658.548133][ T5931] usb usb10-port1: attempt power cycle [ 658.641348][T10374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.652640][T10905] SET target dimension over the limit! [ 659.003972][ T5931] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 659.024587][ T5931] usb 10-1: device descriptor read/8, error -71 [ 659.244888][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 659.294429][ T5931] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 659.367513][ T5931] usb 10-1: device descriptor read/8, error -71 [ 659.443960][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 659.462581][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.476027][ T30] usb 2-1: config 141 has an invalid interface number: 221 but max is 0 [ 659.491987][ T30] usb 2-1: config 141 has no interface number 0 [ 659.499548][ T30] usb 2-1: config 141 interface 221 altsetting 247 has an endpoint descriptor with address 0x15, changing to 0x5 [ 659.519504][ T30] usb 2-1: config 141 interface 221 altsetting 247 bulk endpoint 0x5 has invalid maxpacket 64 [ 659.539960][T10920] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 659.547276][T10920] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 659.564386][ T5931] usb usb10-port1: unable to enumerate USB device [ 659.598750][T10920] vhci_hcd vhci_hcd.0: Device attached [ 659.618386][ T30] usb 2-1: config 141 interface 221 has no altsetting 0 [ 659.632818][ T30] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000f, bcdDevice=4d.4a [ 659.642381][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.663966][ T30] usb 2-1: Product: syz [ 659.668239][ T30] usb 2-1: Manufacturer: syz [ 659.684958][ T30] usb 2-1: SerialNumber: syz [ 659.701971][T10910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 659.778598][T10920] netlink: 'syz.4.1110': attribute type 9 has an invalid length. [ 659.830269][ T6221] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 659.936893][T10920] netlink: 'syz.4.1110': attribute type 11 has an invalid length. [ 660.011915][ T30] kvaser_usb 2-1:141.221: error -ENODEV: Cannot get usb endpoint(s) [ 660.033158][ T30] usb 2-1: bad CDC descriptors [ 660.048012][T10924] vhci_hcd: connection reset by peer [ 660.064933][ T30] usb 2-1: USB disconnect, device number 5 [ 660.088341][T10920] netlink: 'syz.4.1110': attribute type 12 has an invalid length. [ 660.117315][ T6233] vhci_hcd vhci_hcd.4: stop threads [ 660.131349][T10920] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1110'. [ 660.142876][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 660.172849][ T6233] vhci_hcd vhci_hcd.4: release socket [ 660.213923][ T6233] vhci_hcd vhci_hcd.4: disconnect device [ 661.922809][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 665.408902][ T6221] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 665.469199][T10949] loop7: detected capacity change from 0 to 4096 [ 665.567487][T10949] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 665.742873][T10949] ntfs3(loop7): ino=19, mi_enum_attr [ 666.071968][T10967] loop3: detected capacity change from 0 to 256 [ 666.223058][T10967] FAT-fs (loop3): Directory bread(block 64) failed [ 666.274173][T10967] FAT-fs (loop3): Directory bread(block 65) failed [ 666.283355][T10967] FAT-fs (loop3): Directory bread(block 66) failed [ 666.291040][T10973] loop1: detected capacity change from 0 to 256 [ 666.304012][T10967] FAT-fs (loop3): Directory bread(block 67) failed [ 666.310696][T10967] FAT-fs (loop3): Directory bread(block 68) failed [ 666.385415][T10967] FAT-fs (loop3): Directory bread(block 69) failed [ 666.390697][T10976] loop7: detected capacity change from 0 to 256 [ 666.392710][T10967] FAT-fs (loop3): Directory bread(block 70) failed [ 666.454875][T10967] FAT-fs (loop3): Directory bread(block 71) failed [ 666.461871][T10967] FAT-fs (loop3): Directory bread(block 72) failed [ 666.508361][T10973] FAT-fs (loop1): Directory bread(block 64) failed [ 666.516410][T10967] FAT-fs (loop3): Directory bread(block 73) failed [ 666.547420][T10973] FAT-fs (loop1): Directory bread(block 65) failed [ 666.585291][T10973] FAT-fs (loop1): Directory bread(block 66) failed [ 666.591877][T10973] FAT-fs (loop1): Directory bread(block 67) failed [ 666.608539][T10976] FAT-fs (loop7): Directory bread(block 64) failed [ 666.659784][T10976] FAT-fs (loop7): Directory bread(block 65) failed [ 666.698634][T10973] FAT-fs (loop1): Directory bread(block 68) failed [ 666.781904][T10976] FAT-fs (loop7): Directory bread(block 66) failed [ 666.782086][T10976] FAT-fs (loop7): Directory bread(block 67) failed [ 666.782634][T10976] FAT-fs (loop7): Directory bread(block 68) failed [ 666.782782][T10976] FAT-fs (loop7): Directory bread(block 69) failed [ 666.783341][T10976] FAT-fs (loop7): Directory bread(block 70) failed [ 666.783566][T10976] FAT-fs (loop7): Directory bread(block 71) failed [ 666.789301][T10976] FAT-fs (loop7): Directory bread(block 72) failed [ 666.789491][T10976] FAT-fs (loop7): Directory bread(block 73) failed [ 666.852589][T10973] FAT-fs (loop1): Directory bread(block 69) failed [ 666.852710][T10973] FAT-fs (loop1): Directory bread(block 70) failed [ 666.852740][T10973] FAT-fs (loop1): Directory bread(block 71) failed [ 666.852825][T10973] FAT-fs (loop1): Directory bread(block 72) failed [ 666.852853][T10973] FAT-fs (loop1): Directory bread(block 73) failed [ 667.872565][T10961] loop8: detected capacity change from 0 to 40427 [ 667.900483][T10961] F2FS-fs: heap/no_heap options were deprecated [ 667.962421][T10961] F2FS-fs (loop8): build fault injection rate: 23 [ 667.979177][T10961] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 668.033180][T10961] F2FS-fs (loop8): invalid crc value [ 668.150376][T10961] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x659/0xa00 [ 668.197838][T10999] loop1: detected capacity change from 0 to 8 [ 668.210660][T11000] loop7: detected capacity change from 0 to 256 [ 668.266111][T11000] vfat: Deprecated parameter 'posix' [ 668.304840][T11000] FAT-fs: "posix" option is obsolete, not supported now [ 668.451634][T10997] loop9: detected capacity change from 0 to 4096 [ 668.671929][T10997] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 668.732879][T10961] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 668.793418][T10997] ntfs3(loop9): ino=5, "/" indx_read [ 669.053993][T10442] ntfs3(loop9): ino=9, ntfs_sync_fs failed, -22. [ 669.564137][T11029] sock: sock_timestamping_bind_phc: sock not bind to device [ 669.618667][T10813] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 670.295004][T10813] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 670.366975][T10813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.437928][T10813] usb 2-1: Product: syz [ 670.442230][T10813] usb 2-1: Manufacturer: syz [ 670.486936][T10813] usb 2-1: SerialNumber: syz [ 670.528691][T10813] usb 2-1: config 0 descriptor?? [ 670.577545][T10813] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 670.677036][T11045] geneve2: entered promiscuous mode [ 671.017389][T10813] gspca_stk1135: reg_w 0x0 err -71 [ 671.024174][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.047768][T11052] loop7: detected capacity change from 0 to 128 [ 671.064201][T10813] gspca_stk1135: Sensor write failed [ 671.090277][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.143266][T10813] gspca_stk1135: Sensor write failed [ 671.171432][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.212354][ T31] audit: type=1800 audit(1769132490.508:9): pid=11052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1150" name="bus" dev="loop7" ino=1048727 res=0 errno=0 [ 671.239706][T10813] gspca_stk1135: Sensor read failed [ 671.247867][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.254496][T10813] gspca_stk1135: Sensor read failed [ 671.259816][T10813] gspca_stk1135: Detected sensor type unknown (0x0) [ 671.266639][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.273036][T10813] gspca_stk1135: Sensor read failed [ 671.278366][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.287235][T10813] gspca_stk1135: Sensor read failed [ 671.299174][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.312549][T10813] gspca_stk1135: Sensor write failed [ 671.327133][T10813] gspca_stk1135: serial bus timeout: status=0x00 [ 671.345231][T10813] gspca_stk1135: Sensor write failed [ 671.353031][T10813] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 671.358722][T11059] loop8: detected capacity change from 0 to 764 [ 671.376763][T10813] usb 2-1: USB disconnect, device number 6 [ 671.496149][T11060] bond1: Removing last arp target with arp_interval on [ 671.518602][T11059] rock: directory entry would overflow storage [ 671.598201][T11059] rock: sig=0x5850, size=36, remaining=7 [ 672.290512][T11087] loop3: detected capacity change from 0 to 1024 [ 673.070042][T11096] loop9: detected capacity change from 0 to 256 [ 673.325323][T11099] random: crng reseeded on system resumption [ 673.418268][T11087] hfsplus: xattr searching failed [ 673.469862][T11096] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 674.146351][ T6233] hfsplus: b-tree write err: -5, ino 4 [ 674.153081][T11106] loop1: detected capacity change from 0 to 2048 [ 674.286391][T11106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.433043][T11106] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #12: block 2: comm syz.1.1165: lblock 0 mapped to illegal pblock 2 (length 1) [ 674.687422][T11120] usb usb8: usbfs: process 11120 (syz.8.1169) did not claim interface 0 before use [ 674.747110][T10374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.128853][T11131] loop9: detected capacity change from 0 to 256 [ 675.275647][T11131] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 675.360495][T11136] SET target dimension over the limit! [ 676.884857][T11155] loop1: detected capacity change from 0 to 2048 [ 676.938520][T11155] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 676.963393][T11158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.232379][T11165] loop3: detected capacity change from 0 to 4096 [ 677.325961][T11165] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 677.490509][T11165] ntfs3(loop3): ino=19, mi_enum_attr [ 677.546847][T11165] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 677.774101][ T5976] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 678.701411][T11187] Cannot find add_set index 0 as target [ 678.707128][ T5976] usb 10-1: Using ep0 maxpacket: 16 [ 678.774959][ T5976] usb 10-1: config 0 interface 0 altsetting 59 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.823888][ T5976] usb 10-1: config 0 interface 0 has no altsetting 0 [ 679.034247][ T5976] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 679.043513][ T5976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.057149][ T5976] usb 10-1: config 0 descriptor?? [ 680.184853][ T5976] elecom 0003:056E:00E6.000B: hidraw0: USB HID v0.0a Device [HID 056e:00e6] on usb-dummy_hcd.9-1/input0 [ 680.260730][ T5976] usb 10-1: USB disconnect, device number 6 [ 680.401907][T11212] loop1: detected capacity change from 0 to 128 [ 680.534954][T11203] 9p: Bad value for 'rfdno' [ 680.555301][T11203] loop7: detected capacity change from 0 to 512 [ 680.822446][T11212] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 680.955535][T11212] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 681.017901][T11203] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1193: inode has both inline data and extents flags [ 681.031604][T11203] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1193: couldn't read orphan inode 15 (err -117) [ 681.046363][T11203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.129792][T11213] fido_id[11213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 681.370256][T11209] loop8: detected capacity change from 0 to 4096 [ 682.133503][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 682.149614][ T50] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 682.214170][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 682.417836][T11209] ntfs3(loop8): failed to convert "0080" to cp737 [ 682.490956][T11209] ntfs3(loop8): failed to convert name for inode 1e. [ 682.526721][T11209] ntfs3(loop8): ino=1f, mi_enum_attr [ 682.537348][T11209] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 683.640956][ T6743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.814036][T11244] Cannot find add_set index 0 as target [ 685.185102][T11259] loop9: detected capacity change from 0 to 512 [ 685.329548][T11259] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1213: inode has both inline data and extents flags [ 685.427693][T11267] loop8: detected capacity change from 0 to 4096 [ 685.446481][T11259] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1213: couldn't read orphan inode 15 (err -117) [ 685.508189][T11259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.556590][T11267] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 685.874853][T10442] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.525507][T11275] 9p: Bad value for 'rfdno' [ 686.576375][T11275] loop1: detected capacity change from 0 to 512 [ 687.602664][T11275] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1220: inode has both inline data and extents flags [ 687.624865][T11275] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1220: couldn't read orphan inode 15 (err -117) [ 687.639833][T11275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.815134][T10374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.419075][T11296] loop8: detected capacity change from 0 to 128 [ 689.524525][T11296] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 689.618046][T11296] hpfs: filesystem error: improperly stopped [ 689.645061][T11296] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 689.662596][T11296] hpfs: You really don't want any checks? You are crazy... [ 689.687818][T11296] hpfs: hpfs_map_sector(): read error [ 689.729381][T11300] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 689.750132][T11296] hpfs: code page support is disabled [ 689.796247][T11296] hpfs: hpfs_map_4sectors(): unaligned read [ 689.802505][T11296] hpfs: hpfs_map_4sectors(): unaligned read [ 689.873702][T11296] hpfs: filesystem error: unable to find root dir [ 689.960912][T11296] hpfs: hpfs_map_4sectors(): unaligned read [ 690.011133][T11296] hpfs: hpfs_map_sector(): read error [ 690.673723][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.688759][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.055257][T11306] SET target dimension over the limit! [ 691.159629][T11315] loop3: detected capacity change from 0 to 128 [ 691.269749][T11315] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 691.379483][T11318] loop4: detected capacity change from 0 to 2048 [ 691.416991][T11315] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 691.706572][T11318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.480283][T11330] loop8: detected capacity change from 0 to 512 [ 692.526711][T11330] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 692.553432][T11333] loop3: detected capacity change from 0 to 16 [ 692.636029][T10413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.638163][T11333] erofs (device loop3): mounted with root inode @ nid 36. [ 694.552878][T11366] loop8: detected capacity change from 0 to 1024 [ 694.713975][T10945] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 694.884157][T10945] usb 4-1: Using ep0 maxpacket: 32 [ 694.890012][ T135] hfsplus: b-tree write err: -5, ino 4 [ 694.916684][T10945] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 694.944412][T10945] usb 4-1: config 0 has no interface number 0 [ 694.961075][T10945] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 695.023797][T10945] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 695.043935][ T5844] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 695.061763][T10945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.092107][T10945] usb 4-1: Product: syz [ 695.107550][T10945] usb 4-1: Manufacturer: syz [ 695.112200][T10945] usb 4-1: SerialNumber: syz [ 695.166957][T10945] usb 4-1: config 0 descriptor?? [ 695.178632][T11373] Cannot find add_set index 0 as target [ 695.184856][T11364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 695.223984][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 695.275407][ T5844] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.304609][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 695.346382][ T5844] usb 5-1: SerialNumber: syz [ 695.462528][T11364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 695.748065][T11380] loop8: detected capacity change from 0 to 128 [ 695.821655][T11380] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 695.898506][T11380] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 696.208240][ T5844] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 696.222370][ T5844] usb 5-1: USB disconnect, device number 6 [ 697.026206][T11361] loop1: detected capacity change from 0 to 40427 [ 697.044688][T11361] F2FS-fs: heap/no_heap options were deprecated [ 697.140104][T11361] F2FS-fs (loop1): build fault injection rate: 23 [ 697.179902][T11361] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 697.263058][T11361] F2FS-fs (loop1): invalid crc value [ 697.355980][T11361] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x659/0xa00 [ 697.584339][T11399] loop7: detected capacity change from 0 to 256 [ 697.593346][T11400] loop4: detected capacity change from 0 to 47 [ 697.728477][T11399] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 699.589524][T11361] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 699.639683][T10945] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 699.653140][T10945] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 699.666744][T10945] asix 4-1:0.188: probe with driver asix failed with error -71 [ 699.745286][T10945] usb 4-1: USB disconnect, device number 2 [ 699.844716][T11410] random: crng reseeded on system resumption [ 701.250207][T11422] Cannot find add_set index 0 as target [ 701.503284][T11425] loop7: detected capacity change from 0 to 128 [ 701.852548][T11431] loop4: detected capacity change from 0 to 128 [ 701.872114][T11431] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 701.941252][T11431] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 701.963965][T10945] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 702.153977][T10945] usb 10-1: Using ep0 maxpacket: 8 [ 702.236273][T10945] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 702.263918][T10945] usb 10-1: config 0 has no interface number 0 [ 702.727137][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 702.913972][T10945] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 702.934724][T10945] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 702.946490][T10945] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.003960][T10945] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 703.054362][T10945] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 703.084733][T10945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.145338][T10945] usb 10-1: config 0 descriptor?? [ 703.212093][T10945] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 703.520077][T11448] loop1: detected capacity change from 0 to 512 [ 703.675990][T10945] usb 10-1: USB disconnect, device number 7 [ 703.695736][T10945] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 703.717184][T11448] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 703.769072][T11448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 705.614505][T11448] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 705.623510][T11448] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 705.764008][T11448] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1261: Failed to acquire dquot type 1 [ 705.927648][T11471] loop8: detected capacity change from 0 to 64 [ 705.988131][T11448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1261: bg 0: block 40: padding at end of block bitmap is not set [ 706.343957][T11448] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 706.621195][T11486] lo speed is unknown, defaulting to 1000 [ 706.629214][T11486] lo speed is unknown, defaulting to 1000 [ 706.632525][T11448] EXT4-fs (loop1): 1 truncate cleaned up [ 707.259349][T11486] lo speed is unknown, defaulting to 1000 [ 707.271935][T11487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1271'. [ 707.365943][T11448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 707.377435][T11486] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 707.674690][T11486] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 707.892423][T10374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.913466][T11486] lo speed is unknown, defaulting to 1000 [ 707.976065][T11486] lo speed is unknown, defaulting to 1000 [ 707.983661][T11486] lo speed is unknown, defaulting to 1000 [ 708.291705][T11486] lo speed is unknown, defaulting to 1000 [ 708.332330][T11486] lo speed is unknown, defaulting to 1000 [ 708.374950][T11486] lo speed is unknown, defaulting to 1000 [ 708.408421][T11486] lo speed is unknown, defaulting to 1000 [ 708.919663][T11520] loop4: detected capacity change from 0 to 512 [ 708.975945][T11520] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 709.033100][T11524] Cannot find add_set index 0 as target [ 709.077857][ T31] audit: type=1800 audit(1769132528.378:10): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1279" name="file1" dev="loop4" ino=1048738 res=0 errno=0 [ 709.104309][ T5990] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 709.199737][T11520] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 709.217767][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 709.245059][T11520] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 709.265234][ T31] audit: type=1800 audit(1769132528.378:11): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1279" name="file1" dev="loop4" ino=1048738 res=0 errno=0 [ 709.297036][T11520] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 709.328366][ T5990] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.391297][ T5990] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 709.441450][ T5990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.489139][ T5990] usb 10-1: config 0 descriptor?? [ 709.518577][ T5990] pwc: Askey VC010 type 2 USB webcam detected. [ 709.703375][T11538] loop3: detected capacity change from 0 to 2048 [ 709.825949][T11544] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.890293][T11546] trusted_key: encrypted_key: insufficient parameters specified [ 709.924832][T11546] loop4: detected capacity change from 0 to 256 [ 710.045859][T11546] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 710.066658][ T5990] pwc: recv_control_msg error -32 req 02 val 2b00 [ 710.738255][ T5990] pwc: recv_control_msg error -32 req 02 val 2700 [ 710.978679][ T5990] pwc: recv_control_msg error -71 req 04 val 1000 [ 711.029688][ T5990] pwc: recv_control_msg error -71 req 04 val 1300 [ 711.087996][ T5990] pwc: recv_control_msg error -71 req 04 val 1400 [ 711.118471][ T5990] pwc: recv_control_msg error -71 req 02 val 2000 [ 711.148857][ T5990] pwc: recv_control_msg error -71 req 02 val 2100 [ 711.180299][ T5990] pwc: recv_control_msg error -71 req 04 val 1500 [ 711.212432][ T5990] pwc: recv_control_msg error -71 req 02 val 2500 [ 711.245803][ T5990] pwc: recv_control_msg error -71 req 02 val 2400 [ 711.276851][ T5990] pwc: recv_control_msg error -71 req 02 val 2600 [ 711.305814][ T5990] pwc: recv_control_msg error -71 req 02 val 2900 [ 711.320165][T11559] loop3: detected capacity change from 0 to 256 [ 711.339774][ T5990] pwc: recv_control_msg error -71 req 02 val 2800 [ 711.368468][ T5990] pwc: recv_control_msg error -71 req 04 val 1100 [ 711.408190][ T5990] pwc: recv_control_msg error -71 req 04 val 1200 [ 711.656053][ T5990] pwc: Registered as video103. [ 711.667015][ T5990] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input19 [ 712.436168][ T5990] usb 10-1: USB disconnect, device number 8 [ 712.437960][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1293'. [ 712.737872][T11578] tipc: Started in network mode [ 712.762082][T11578] tipc: Node identity f0, cluster identity 4711 [ 712.796471][T11581] loop3: detected capacity change from 0 to 512 [ 712.817351][T11578] tipc: Node number set to 240 [ 712.889214][T11583] SET target dimension over the limit! [ 712.901015][T11581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 712.934134][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 713.064354][T11581] EXT4-fs (loop3): 1 truncate cleaned up [ 713.076402][T11581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.210326][T11595] sctp: [Deprecated]: syz.9.1299 (pid 11595) Use of int in max_burst socket option deprecated. [ 713.210326][T11595] Use struct sctp_assoc_value instead [ 713.559496][T11606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1305'. [ 713.601200][T10462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.610922][T11609] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1305'. [ 713.687243][T11606] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1305'. [ 714.033140][T11621] loop9: detected capacity change from 0 to 512 [ 714.088240][T11621] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 714.174838][T11621] EXT4-fs (loop9): 1 truncate cleaned up [ 714.210528][T11621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.456976][T11621] fscrypt (loop9, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 714.642735][T11640] input: syz1 as /devices/virtual/input/input20 [ 716.302960][T10442] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.694114][ T6221] hid_parser_main: 159 callbacks suppressed [ 716.694144][ T6221] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 716.816270][ T6221] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 716.955937][T11657] loop8: detected capacity change from 0 to 16 [ 717.065757][T11657] erofs (device loop8): mounted with root inode @ nid 36. [ 717.120091][T11657] bio_check_eod: 4 callbacks suppressed [ 717.120113][T11657] syz.8.1319: attempt to access beyond end of device [ 717.120113][T11657] loop8: rw=8912896, sector=36, nr_sectors = 1 limit=16 [ 717.209964][T11657] syz.8.1319: attempt to access beyond end of device [ 717.209964][T11657] loop8: rw=8912896, sector=131156, nr_sectors = 1 limit=16 [ 717.294824][T11657] syz.8.1319: attempt to access beyond end of device [ 717.294824][T11657] loop8: rw=8912896, sector=36, nr_sectors = 1 limit=16 [ 717.333028][T11657] syz.8.1319: attempt to access beyond end of device [ 717.333028][T11657] loop8: rw=8912896, sector=131157, nr_sectors = 1 limit=16 [ 717.434015][T11657] syz.8.1319: attempt to access beyond end of device [ 717.434015][T11657] loop8: rw=8912896, sector=41, nr_sectors = 1 limit=16 [ 717.494686][T11657] syz.8.1319: attempt to access beyond end of device [ 717.494686][T11657] loop8: rw=8912896, sector=65623, nr_sectors = 1 limit=16 [ 717.564696][T11657] syz.8.1319: attempt to access beyond end of device [ 717.564696][T11657] loop8: rw=8912896, sector=46, nr_sectors = 1 limit=16 [ 717.637176][T11657] syz.8.1319: attempt to access beyond end of device [ 717.637176][T11657] loop8: rw=8912896, sector=131168, nr_sectors = 1 limit=16 [ 717.682000][T11657] syz.8.1319: attempt to access beyond end of device [ 717.682000][T11657] loop8: rw=8912896, sector=86, nr_sectors = 1 limit=16 [ 717.724309][T11657] syz.8.1319: attempt to access beyond end of device [ 717.724309][T11657] loop8: rw=8912896, sector=65637, nr_sectors = 1 limit=16 [ 717.846516][T11657] erofs (device loop8): failed to readdir of logical block 0 of nid 36 [ 718.056574][T11205] Bluetooth: hci3: command 0x0406 tx timeout [ 718.824355][T11685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1325'. [ 718.993933][ T5990] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 719.172715][ T5990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.204016][ T5990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.257523][ T5990] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 719.293992][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.352736][ T5990] usb 9-1: config 0 descriptor?? [ 719.778384][T11703] loop1: detected capacity change from 0 to 512 [ 719.812477][ T5990] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 719.896470][ T5990] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.000D/input/input21 [ 719.943957][T11703] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 720.156795][T11677] loop7: detected capacity change from 0 to 40427 [ 720.197919][T11677] F2FS-fs: heap/no_heap options were deprecated [ 720.254249][T11677] F2FS-fs (loop7): build fault injection rate: 19 [ 720.301629][T11677] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 720.335642][T11677] F2FS-fs (loop7): invalid crc value [ 720.385396][ T5990] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 720.430403][T11677] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x659/0xa00 [ 720.464426][ T5990] usb 9-1: USB disconnect, device number 10 [ 720.605179][ T6292] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 720.742185][T11711] fido_id[11711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 720.828892][T11677] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 720.912654][T11677] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 722.558850][T11677] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 723.426656][T11735] loop1: detected capacity change from 0 to 128 [ 723.453668][T11735] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 723.759055][T11741] loop3: detected capacity change from 0 to 256 [ 723.954259][T11744] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1338'. [ 724.022867][T11744] gretap0: entered promiscuous mode [ 724.080987][T11748] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1338'. [ 724.126773][T11748] 0ªî{X¹¦: renamed from gretap0 [ 724.214032][T11748] 0ªî{X¹¦: left promiscuous mode [ 724.224114][T11748] 0ªî{X¹¦: entered allmulticast mode [ 724.258125][T11748] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 726.607798][T11771] loop3: detected capacity change from 0 to 128 [ 726.665702][T11771] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 726.787698][T11771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 727.864500][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 728.001936][ T6184] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.314336][ T6184] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.702900][T11800] loop4: detected capacity change from 0 to 256 [ 728.729384][ T6184] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.799204][T11800] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 728.860318][T11205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.873444][T11205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.882504][T11205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 728.896436][T11205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 728.906577][T11205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.975473][T11800] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 729.056179][ T31] audit: type=1800 audit(1769132548.358:12): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1359" name="file1" dev="loop4" ino=1048747 res=0 errno=0 [ 729.210334][ T6184] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.934036][ T5847] Bluetooth: hci0: command tx timeout [ 731.082873][T11803] lo speed is unknown, defaulting to 1000 [ 731.111913][T11791] loop9: detected capacity change from 0 to 32768 [ 731.240214][T11791] XFS (loop9): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 731.630073][T11791] XFS (loop9): Starting recovery (logdev: internal) [ 731.825664][T11791] XFS (loop9): Ending recovery (logdev: internal) [ 731.957666][ T6184] bridge_slave_1: left allmulticast mode [ 731.963736][ T6184] bridge_slave_1: left promiscuous mode [ 731.971435][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.077307][T10442] XFS (loop9): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 732.125422][ T6184] bridge_slave_0: left allmulticast mode [ 732.144763][ T6184] bridge_slave_0: left promiscuous mode [ 732.152285][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.836232][T11851] loop3: detected capacity change from 0 to 16 [ 732.880976][T11852] loop4: detected capacity change from 0 to 128 [ 732.936809][T11851] erofs (device loop3): mounted with root inode @ nid 36. [ 732.942471][T11852] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 733.008608][T11852] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 733.024517][ T5847] Bluetooth: hci0: command tx timeout [ 734.004772][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 734.027232][T11859] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 736.251111][ T5847] Bluetooth: hci0: command tx timeout [ 736.355079][T11878] loop3: detected capacity change from 0 to 4096 [ 736.480738][T11878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.784402][ T31] audit: type=1800 audit(1769132556.088:13): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1374" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 736.929284][T10462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.291229][ T6184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.390231][ T6184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.436705][ T6184] bond0 (unregistering): Released all slaves [ 737.819768][T11900] loop3: detected capacity change from 0 to 4096 [ 738.294001][ T5847] Bluetooth: hci0: command tx timeout [ 738.359693][T11912] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 738.443753][T11912] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 739.474882][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 739.528080][T11935] Cannot find add_set index 0 as target [ 739.639005][T11939] loop3: detected capacity change from 0 to 1024 [ 739.685640][T11939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 739.703104][T11939] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.868093][T11803] chnl_net:caif_netlink_parms(): no params data found [ 741.356131][T11939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 741.605919][ T6184] hsr_slave_0: left promiscuous mode [ 741.642056][ T6184] hsr_slave_1: left promiscuous mode [ 741.676077][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.713936][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.768539][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.814019][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.860352][T11974] loop3: detected capacity change from 0 to 128 [ 741.881570][T11974] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 741.924947][T11974] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 741.968667][ T6184] veth1_macvtap: left promiscuous mode [ 742.013985][ T6184] veth0_macvtap: left promiscuous mode [ 742.029125][ T6184] veth1_vlan: left promiscuous mode [ 742.052185][ T6184] veth0_vlan: left promiscuous mode [ 743.652510][T12001] loop4: detected capacity change from 0 to 16 [ 743.665640][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 743.756618][T12001] erofs (device loop4): mounted with root inode @ nid 36. [ 744.898032][T12004] loop3: detected capacity change from 0 to 131072 [ 744.923994][T12004] F2FS-fs (loop3): invalid crc value [ 745.034177][T12004] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 745.049426][T12004] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 745.104426][ T31] audit: type=1800 audit(1769132564.408:14): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1401" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 745.553562][ T31] audit: type=1800 audit(1769132564.848:15): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1400" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 746.226612][T12022] SET target dimension over the limit! [ 746.869288][ T6184] team0 (unregistering): Port device team_slave_1 removed [ 746.973391][ T6184] team0 (unregistering): Port device team_slave_0 removed [ 747.355306][T12026] loop7: detected capacity change from 0 to 32768 [ 747.415036][T12026] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 747.516515][T12026] XFS (loop7): Ending clean mount [ 747.602590][ T6743] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 749.407308][ T6221] lo speed is unknown, defaulting to 1000 [ 749.434576][ T6221] infiniband syz0: ib_query_port failed (-19) [ 749.757572][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.816105][T12061] loop3: detected capacity change from 0 to 128 [ 749.825225][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.832522][T11803] bridge_slave_0: entered allmulticast mode [ 749.862078][T11803] bridge_slave_0: entered promiscuous mode [ 749.868545][T12061] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 749.878265][T11803] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.919261][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.932947][T11803] bridge_slave_1: entered allmulticast mode [ 749.941297][T11803] bridge_slave_1: entered promiscuous mode [ 749.988902][T12061] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 750.009242][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.023073][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.083969][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 750.284489][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 750.308795][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.360528][ T30] usb 2-1: config 0 has no interfaces? [ 750.369390][T11803] team0: Port device team_slave_0 added [ 750.388307][T11803] team0: Port device team_slave_1 added [ 750.405312][ T30] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 750.437989][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.472913][ T30] usb 2-1: config 0 descriptor?? [ 750.592015][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.719860][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.756931][ T30] usb 2-1: USB disconnect, device number 7 [ 750.775899][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.896955][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.947593][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.047998][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.263646][T11803] hsr_slave_0: entered promiscuous mode [ 751.270848][T11803] hsr_slave_1: entered promiscuous mode [ 751.294024][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 751.474043][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 751.494054][ T30] usb 5-1: config 0 has no interfaces? [ 751.520449][ T30] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 751.563656][ T30] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 751.595263][ T30] usb 5-1: Product: syz [ 751.599480][ T30] usb 5-1: Manufacturer: syz [ 751.623963][ T30] usb 5-1: SerialNumber: syz [ 751.643099][ T30] usb 5-1: config 0 descriptor?? [ 751.834443][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.840873][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.908024][ T31] audit: type=1800 audit(1769132571.128:16): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1414" name="file1" dev="fuse" ino=3 res=0 errno=0 [ 751.939817][T11205] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 752.005815][ T5933] usb 5-1: USB disconnect, device number 7 [ 752.078200][T12105] lec:lec_atm_send: lec0: Unknown message type 1717991472 [ 752.779013][T12088] lec:lec_atm_close: lec0: Shut down! [ 752.842498][T12110] Cannot find add_set index 0 as target [ 752.897988][T12084] loop7: detected capacity change from 0 to 40427 [ 753.108728][T12084] F2FS-fs (loop7): invalid crc value [ 754.300184][T12084] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 754.350634][T12123] binder: 12121:12123 ioctl c0306201 200000000280 returned -14 [ 754.359535][T12084] F2FS-fs (loop7): Start checkpoint disabled! [ 754.377440][T12084] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 754.415940][T12084] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 754.577853][T12133] loop9: detected capacity change from 0 to 128 [ 754.596812][T12133] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 754.662711][T12133] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 756.416192][T11803] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 756.496840][T11803] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 756.721129][T11803] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 756.783335][T11803] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 756.998239][ T5931] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 757.006995][T12168] SET target dimension over the limit! [ 757.313957][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 757.332904][ T5931] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 757.350262][ T5931] usb 2-1: config 0 has no interface number 0 [ 757.369777][T11803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.392102][ T5931] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.096482][ T5931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 758.106481][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 758.114945][ T5931] usb 2-1: Product: syz [ 758.123173][ T5931] usb 2-1: config 0 descriptor?? [ 758.148732][ T5931] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 758.219072][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.220448][T12179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 758.308991][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.316283][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.390973][ T793] usb 2-1: USB disconnect, device number 8 [ 758.397142][ C1] iowarrior 2-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 758.418487][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.425727][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.810172][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.861341][T11803] veth0_vlan: entered promiscuous mode [ 761.097788][T11803] veth1_vlan: entered promiscuous mode [ 761.948247][T11803] veth0_macvtap: entered promiscuous mode [ 762.026834][T11803] veth1_macvtap: entered promiscuous mode [ 762.110717][T11803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.149185][T11803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.247908][T12243] Cannot find add_set index 0 as target [ 762.285789][ T3414] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.355113][ T3414] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.706719][ T3414] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.993049][ T3414] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.335050][T12251] loop4: detected capacity change from 0 to 128 [ 763.440060][T12251] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 763.475107][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.495234][T12251] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 763.540501][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.662140][ T3814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.671073][T12251] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 763.701438][ T3814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.876913][T10413] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 764.090252][T12271] loop4: detected capacity change from 0 to 8 [ 764.110898][T12269] netlink: 9 bytes leftover after parsing attributes in process `syz.8.1354'. [ 764.568733][T12280] SQUASHFS error: lzo decompression failed, data probably corrupt [ 764.577154][T12280] SQUASHFS error: Failed to read block 0x0: -5 [ 764.584053][T12280] SQUASHFS error: Failed to read block 0xff: -5 [ 764.593894][T12280] SQUASHFS error: lzo decompression failed, data probably corrupt [ 764.601958][T12280] SQUASHFS error: Failed to read block 0x0: -5 [ 764.647560][ T31] audit: type=1800 audit(1769132583.908:17): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1455" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 765.750250][T12290] loop8: detected capacity change from 0 to 1024 [ 765.818110][T12290] hfsplus: Bad value for 'gid' [ 766.449741][T12286] loop4: detected capacity change from 0 to 131072 [ 766.514725][T12286] F2FS-fs (loop4): invalid crc value [ 766.590532][T12286] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 766.614049][T12286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 768.213093][T12322] netlink: 'syz.7.1464': attribute type 3 has an invalid length. [ 768.283091][T12322] netlink: 'syz.7.1464': attribute type 3 has an invalid length. [ 768.402044][T12327] loop8: detected capacity change from 0 to 128 [ 768.457316][T12327] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 770.144349][T12327] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 770.180999][T12332] loop9: detected capacity change from 0 to 128 [ 770.346801][T12332] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 770.448386][T12332] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.134640][ T7504] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 772.028082][T10442] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 775.214160][ T6221] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 775.383919][ T6221] usb 10-1: Using ep0 maxpacket: 16 [ 775.396407][ T6221] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 775.456524][ T6221] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 775.505780][ T6221] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.544939][ T6221] usb 10-1: Product: syz [ 775.549412][ T6221] usb 10-1: Manufacturer: syz [ 775.569666][ T6221] usb 10-1: SerialNumber: syz [ 775.594732][ T6221] usb 10-1: config 0 descriptor?? [ 775.623109][ T6221] hub 10-1:0.0: bad descriptor, ignoring hub [ 775.643989][ T6221] hub 10-1:0.0: probe with driver hub failed with error -5 [ 775.679578][ T31] audit: type=1326 audit(1769132594.978:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 775.681708][ T6221] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.775622][ T31] audit: type=1326 audit(1769132595.008:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 775.892976][ T31] audit: type=1326 audit(1769132595.048:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.077514][ T31] audit: type=1326 audit(1769132595.048:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.306670][T12356] loop9: detected capacity change from 0 to 65536 [ 776.364020][ T31] audit: type=1326 audit(1769132595.048:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.390168][ T31] audit: type=1326 audit(1769132595.048:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.426280][ T31] audit: type=1326 audit(1769132595.048:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.457032][ T31] audit: type=1326 audit(1769132595.048:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.480069][ T31] audit: type=1326 audit(1769132595.048:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.503103][ T31] audit: type=1326 audit(1769132595.048:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f079acb9 code=0x7ffc0000 [ 776.532179][T12356] XFS (loop9): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 776.655416][T12374] loop4: detected capacity change from 0 to 1024 [ 776.840267][T12374] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 776.858378][T12374] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 776.868947][T12374] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 777.086066][T12356] XFS (loop9): Ending clean mount [ 777.360524][T12356] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 777.374703][T12356] XFS (loop9): Unmount and run xfs_repair [ 777.380452][T12356] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 777.391977][T12356] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 777.400938][T12356] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 777.410231][T12356] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 777.421714][T12356] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 777.432633][T12356] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 777.441574][T12356] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 777.450494][T12356] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 777.459563][T12356] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 777.468768][T12356] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74 [ 777.480261][T12356] XFS (loop9): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 777.494937][T12356] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 777.589406][ T5835] usb 10-1: USB disconnect, device number 9 [ 777.873645][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 778.120346][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1480'. [ 778.178888][T12389] loop1: detected capacity change from 0 to 32768 [ 778.221543][T12389] JBD2: Ignoring recovery information on journal [ 778.286249][T12389] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 778.377854][T10442] XFS (loop9): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 778.396669][T12391] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 778.419147][T12392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.733048][T12389] syz.1.1481 (12389) used greatest stack depth: 18648 bytes left [ 778.834403][ T5835] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 779.045094][T10374] ocfs2: Unmounting device (7,1) on (node local) [ 779.046019][ T5835] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 779.096317][ T5835] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.136425][ T5835] usb 9-1: config 0 has no interface number 0 [ 779.152897][ T5835] usb 9-1: config 0 interface 205 has no altsetting 0 [ 779.201099][ T5835] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 779.243958][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.252179][ T5835] usb 9-1: Product: syz [ 779.283940][ T5835] usb 9-1: Manufacturer: syz [ 779.288617][ T5835] usb 9-1: SerialNumber: syz [ 779.366375][ T5835] usb 9-1: config 0 descriptor?? [ 779.369213][T12409] loop7: detected capacity change from 0 to 128 [ 779.381888][ T5835] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 779.433936][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 779.481999][T12409] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 779.535224][ T5835] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 779.549209][ T5835] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 779.659663][ T5835] usb 9-1: media controller created [ 779.674970][T12409] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 779.707626][T12410] loop3: detected capacity change from 0 to 40427 [ 779.709595][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.716103][T12410] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 779.730475][T12410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 779.740062][T12410] F2FS-fs (loop3): invalid crc value [ 779.805711][T12412] loop4: detected capacity change from 0 to 256 [ 779.982936][T12412] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x28b7239b, utbl_chksum : 0xe619d30d) [ 780.007100][T12410] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 780.062954][T12410] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 780.070278][T12410] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 780.125251][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 780.131537][ T5835] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 780.868374][ T5835] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input22 [ 780.885592][ T65] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 780.918274][ T5835] dvb-usb: schedule remote query interval to 150 msecs. [ 780.980731][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 781.025500][ T5835] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 781.155114][ T5835] dvb-usb: bulk message failed: -22 (1/0) [ 781.184885][ T5835] dvb-usb: error while querying for an remote control event. [ 781.195391][T12427] loop1: detected capacity change from 0 to 1024 [ 781.344102][ T5835] dvb-usb: bulk message failed: -22 (1/0) [ 781.370518][ T5835] dvb-usb: error while querying for an remote control event. [ 781.564011][ T5835] dvb-usb: bulk message failed: -22 (1/0) [ 781.623273][ T5835] dvb-usb: error while querying for an remote control event. [ 781.652175][T12437] bio_check_eod: 44 callbacks suppressed [ 781.652200][T12437] syz.1.1483: attempt to access beyond end of device [ 781.652200][T12437] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 782.488139][ T6147] dvb-usb: bulk message failed: -22 (1/0) [ 782.553151][ T6147] dvb-usb: error while querying for an remote control event. [ 782.763685][ T6147] dvb-usb: bulk message failed: -22 (1/0) [ 782.780482][T12435] wg2: entered promiscuous mode [ 782.824497][ T6147] dvb-usb: error while querying for an remote control event. [ 782.843989][T12435] wg2: entered allmulticast mode [ 783.016384][ T6147] dvb-usb: bulk message failed: -22 (1/0) [ 783.061512][ T6147] dvb-usb: error while querying for an remote control event. [ 783.464557][ T6147] dvb-usb: bulk message failed: -22 (1/0) [ 783.470371][ T6147] dvb-usb: error while querying for an remote control event. [ 784.597318][ T6221] dvb-usb: bulk message failed: -22 (1/0) [ 784.604396][ T6221] dvb-usb: error while querying for an remote control event. [ 785.075095][ T6221] dvb-usb: bulk message failed: -22 (1/0) [ 785.164752][ T6221] dvb-usb: error while querying for an remote control event. [ 785.183399][T12477] MPI: mpi too large (130440 bits) [ 785.642059][T12469] loop3: detected capacity change from 0 to 2048 [ 785.661803][ T6147] dvb-usb: bulk message failed: -22 (1/0) [ 785.703914][ T6147] dvb-usb: error while querying for an remote control event. [ 785.726561][T12476] loop4: detected capacity change from 0 to 1024 [ 785.878767][T12484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 785.897903][T11277] dvb-usb: bulk message failed: -22 (1/0) [ 785.958548][T12469] comedi comedi3: pcl711: I/O port conflict (0x2,16) [ 787.315469][T11277] dvb-usb: error while querying for an remote control event. [ 787.323453][T12480] 9p: Bad value for 'rfdno' [ 787.334915][T12480] loop9: detected capacity change from 0 to 512 [ 787.376209][T12476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.397405][T12480] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1499: inode has both inline data and extents flags [ 787.422979][T12480] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1499: couldn't read orphan inode 15 (err -117) [ 787.447596][T12480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.588705][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 787.603980][ T5976] dvb-usb: error while querying for an remote control event. [ 787.777644][T10442] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.815474][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 787.821270][ T5976] dvb-usb: error while querying for an remote control event. [ 787.851018][T12484] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 787.903154][T10413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.957089][T12484] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 788.069209][T12484] Remounting filesystem read-only [ 788.071167][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 788.085087][T10462] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 788.104064][ T5976] dvb-usb: error while querying for an remote control event. [ 788.265856][ T6026] dvb-usb: bulk message failed: -22 (1/0) [ 788.292239][ T6026] dvb-usb: error while querying for an remote control event. [ 788.324103][ T5976] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 788.356667][T12508] loop3: detected capacity change from 0 to 128 [ 788.381997][T12508] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 788.473721][T12508] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 788.493983][ T6026] dvb-usb: bulk message failed: -22 (1/0) [ 788.752026][ T6026] dvb-usb: error while querying for an remote control event. [ 789.913208][ T3814] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 790.323994][ T6026] dvb-usb: bulk message failed: -22 (1/0) [ 790.331086][ T6026] dvb-usb: error while querying for an remote control event. [ 790.535285][ T6026] dvb-usb: bulk message failed: -22 (1/0) [ 791.286823][ T5976] usb 2-1: unable to get BOS descriptor or descriptor too short [ 792.001571][ T6026] dvb-usb: error while querying for an remote control event. [ 792.011081][ T5976] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 792.019325][ T5976] usb 2-1: can't read configurations, error -71 [ 792.583918][ T794] dvb-usb: bulk message failed: -22 (1/0) [ 792.591076][ T794] dvb-usb: error while querying for an remote control event. [ 793.894494][T11277] dvb-usb: bulk message failed: -22 (1/0) [ 793.900414][T11277] dvb-usb: error while querying for an remote control event. [ 794.336788][T11277] dvb-usb: bulk message failed: -22 (1/0) [ 794.342583][T11277] dvb-usb: error while querying for an remote control event. [ 794.552019][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 794.565462][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 794.576114][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 794.587120][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 794.663896][T12539] tipc: Failed to remove unknown binding: 66,1,1/0:2987812261/2987812263 [ 794.673110][T12539] tipc: Failed to remove unknown binding: 66,1,1/0:2987812261/2987812263 [ 795.110825][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 795.147570][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 795.153458][ T5976] dvb-usb: error while querying for an remote control event. [ 795.384453][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 795.415724][ T5976] dvb-usb: error while querying for an remote control event. [ 795.564426][ T5846] usb 9-1: USB disconnect, device number 11 [ 795.810566][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 797.434440][ T5847] Bluetooth: hci5: command tx timeout [ 797.975438][T12557] 9p: Bad value for 'rfdno' [ 799.484989][T12557] loop1: detected capacity change from 0 to 512 [ 799.518238][T12557] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1514: inode has both inline data and extents flags [ 799.677861][T12557] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1514: couldn't read orphan inode 15 (err -117) [ 799.692838][T12557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.942617][T10374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.976568][ T5847] Bluetooth: hci5: command tx timeout [ 801.045399][ T7504] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.278121][T12536] chnl_net:caif_netlink_parms(): no params data found [ 803.094973][ T5847] Bluetooth: hci5: command tx timeout [ 804.346127][ T7504] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.199134][ T5847] Bluetooth: hci5: command tx timeout [ 806.734285][T12606] tipc: Started in network mode [ 806.739219][T12606] tipc: Node identity 727cd35d8511, cluster identity 4711 [ 806.837704][T12606] tipc: Enabled bearer , priority 0 [ 806.896667][T12606] tipc: Resetting bearer [ 806.944825][T12608] syzkaller0: entered promiscuous mode [ 807.134934][T12608] syzkaller0: entered allmulticast mode [ 807.874769][T12600] tipc: Resetting bearer [ 809.697669][T12600] tipc: Disabling bearer [ 810.177265][ T7504] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.784593][T12638] 9p: Bad value for 'rfdno' [ 811.796104][T12638] loop4: detected capacity change from 0 to 512 [ 811.874389][T12638] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1528: inode has both inline data and extents flags [ 811.887937][T12638] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1528: couldn't read orphan inode 15 (err -117) [ 811.900083][T11205] Bluetooth: hci0: command 0x1003 tx timeout [ 811.914350][ T5847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 811.925882][T12638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.051815][T10945] tipc: Node number set to 4151169885 [ 812.103458][T12536] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.157384][T12536] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.180437][T10413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.241343][T12536] bridge_slave_0: entered allmulticast mode [ 812.278422][T12536] bridge_slave_0: entered promiscuous mode [ 812.725733][ T7504] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.802812][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.839726][T12536] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.885057][T12536] bridge_slave_1: entered allmulticast mode [ 812.922027][T12536] bridge_slave_1: entered promiscuous mode [ 813.078006][T12653] batman_adv: batadv0: Adding interface: gretap1 [ 813.084572][T12653] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.110016][T12653] batman_adv: batadv0: Interface activated: gretap1 [ 813.269315][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.278878][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.307656][T12536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.516054][T12536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.703466][T12536] team0: Port device team_slave_0 added [ 813.846693][T12536] team0: Port device team_slave_1 added [ 813.886731][T12674] syz_tun: entered allmulticast mode [ 813.998277][T12683] loop7: detected capacity change from 0 to 128 [ 814.062406][T12683] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 814.216180][T12683] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 814.218468][T12674] syz_tun: left allmulticast mode [ 815.214816][T12536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.454533][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.480931][T12536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.501852][ T9155] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 815.560666][T12536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.614214][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.698295][T12536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.807530][T12694] input: syz0 as /devices/virtual/input/input23 [ 815.824630][ T6147] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 815.902834][T12669] loop1: detected capacity change from 0 to 32768 [ 816.471754][T12669] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 816.494844][T12669] (syz.1.1531,12669,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 816.575069][T12669] (syz.1.1531,12669,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 816.923995][ T6147] usb 10-1: Using ep0 maxpacket: 8 [ 817.004240][ T7504] bridge_slave_1: left allmulticast mode [ 817.028384][ T7504] bridge_slave_1: left promiscuous mode [ 817.294180][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.078928][ T6147] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 818.101742][ T6147] usb 10-1: config 0 has no interface number 0 [ 818.105028][ T7504] bridge_slave_0: left allmulticast mode [ 818.190410][ T6147] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 818.194308][ T7504] bridge_slave_0: left promiscuous mode [ 818.242246][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.100806][ T6147] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 820.225615][ T6147] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.295762][ T6147] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 820.358229][ T6147] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 820.390719][ T6147] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.406867][T12724] loop7: detected capacity change from 0 to 256 [ 820.460916][T12724] exfat: Deprecated parameter 'namecase' [ 820.474471][ T6147] usb 10-1: config 0 descriptor?? [ 820.508928][T12724] exfat: Deprecated parameter 'utf8' [ 820.542307][ T6147] usb 10-1: can't set config #0, error -71 [ 820.736083][ T6147] usb 10-1: USB disconnect, device number 10 [ 820.930376][T12724] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 825.556153][T12748] block nbd1: shutting down sockets [ 827.154860][ T7504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.234033][ T7504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.263401][ T7504] bond0 (unregistering): Released all slaves [ 827.345166][T12536] hsr_slave_0: entered promiscuous mode [ 827.369857][T12536] hsr_slave_1: entered promiscuous mode [ 827.410282][T12536] debugfs: 'hsr0' already exists in 'hsr' [ 827.445541][T12536] Cannot create hsr debugfs directory [ 829.304120][T12794] input: syz1 as /devices/virtual/input/input24 [ 833.075320][T12806] loop7: detected capacity change from 0 to 16 [ 833.115944][T12806] erofs (device loop7): mounted with root inode @ nid 36. [ 833.208180][T12806] erofs (device loop7): read error -117 @ 8200 of nid 36 [ 834.167976][T12806] ================================================================== [ 834.176060][T12806] BUG: KASAN: slab-use-after-free in __list_lru_walk_one+0xfb/0x420 [ 834.184131][T12806] Read of size 8 at addr ffff88805458f078 by task syz.7.1555/12806 [ 834.192124][T12806] [ 834.194462][T12806] CPU: 1 UID: 0 PID: 12806 Comm: syz.7.1555 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.194490][T12806] Tainted: [L]=SOFTLOCKUP [ 834.194497][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 834.194513][T12806] Call Trace: [ 834.194549][T12806] [ 834.194559][T12806] dump_stack_lvl+0xe8/0x150 [ 834.194587][T12806] print_report+0xba/0x230 [ 834.194608][T12806] ? __list_lru_walk_one+0xfb/0x420 [ 834.194628][T12806] kasan_report+0x117/0x150 [ 834.194652][T12806] ? __list_lru_walk_one+0xfb/0x420 [ 834.194677][T12806] __list_lru_walk_one+0xfb/0x420 [ 834.194699][T12806] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 834.194730][T12806] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 834.194757][T12806] list_lru_walk_one+0x3c/0x50 [ 834.194780][T12806] gfs2_qd_shrink_scan+0x15d/0x340 [ 834.194806][T12806] ? list_lru_count_one+0x27/0x2c0 [ 834.194826][T12806] ? __pfx_gfs2_qd_shrink_scan+0x10/0x10 [ 834.194850][T12806] ? list_lru_count_one+0x27/0x2c0 [ 834.194872][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.194898][T12806] do_shrink_slab+0x6df/0x10d0 [ 834.194925][T12806] ? shrink_slab+0x130/0x1150 [ 834.194946][T12806] shrink_slab+0xdf2/0x1150 [ 834.194970][T12806] ? shrink_slab+0x130/0x1150 [ 834.194992][T12806] ? __pfx_shrink_slab+0x10/0x10 [ 834.195012][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.195034][T12806] ? mem_cgroup_iter+0x3b/0x450 [ 834.195061][T12806] ? mem_cgroup_iter+0x3e7/0x450 [ 834.195085][T12806] ? mem_cgroup_iter+0x3b/0x450 [ 834.195112][T12806] drop_slab+0x14a/0x290 [ 834.195136][T12806] drop_caches_sysctl_handler+0xc7/0x170 [ 834.195165][T12806] proc_sys_call_handler+0x4cb/0x700 [ 834.195193][T12806] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 834.195222][T12806] do_iter_readv_writev+0x619/0x8c0 [ 834.195247][T12806] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 834.195274][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.195303][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.195333][T12806] vfs_writev+0x33c/0x990 [ 834.195366][T12806] ? __pfx_vfs_writev+0x10/0x10 [ 834.195404][T12806] ? __fget_files+0x2a/0x420 [ 834.195434][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.195460][T12806] ? __fget_files+0x3a0/0x420 [ 834.195487][T12806] ? __fget_files+0x2a/0x420 [ 834.195517][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.195553][T12806] do_writev+0x154/0x2e0 [ 834.195582][T12806] ? __pfx_do_writev+0x10/0x10 [ 834.195617][T12806] do_syscall_64+0xe2/0xf80 [ 834.195650][T12806] ? rcu_is_watching+0x15/0xb0 [ 834.195677][T12806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.195703][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.195725][T12806] RIP: 0033:0x7f159fd9acb9 [ 834.195745][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.195764][T12806] RSP: 002b:00007f15a0c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 834.195786][T12806] RAX: ffffffffffffffda RBX: 00007f15a0015fa0 RCX: 00007f159fd9acb9 [ 834.195803][T12806] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 834.195818][T12806] RBP: 00007f159fe08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 834.195832][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.195851][T12806] R13: 00007f15a0016038 R14: 00007f15a0015fa0 R15: 00007fffc5f0b3c8 [ 834.195879][T12806] [ 834.195887][T12806] [ 834.527477][T12806] Allocated by task 8281: [ 834.531789][T12806] kasan_save_track+0x3e/0x80 [ 834.536480][T12806] __kasan_slab_alloc+0x6c/0x80 [ 834.541326][T12806] kmem_cache_alloc_noprof+0x370/0x6e0 [ 834.546791][T12806] qd_alloc+0x50/0x250 [ 834.550864][T12806] gfs2_quota_init+0x786/0x1220 [ 834.555890][T12806] gfs2_make_fs_rw+0x143/0x220 [ 834.560733][T12806] gfs2_fill_super+0x1b9a/0x21d0 [ 834.565697][T12806] get_tree_bdev_flags+0x431/0x4f0 [ 834.570810][T12806] gfs2_get_tree+0x51/0x1e0 [ 834.575299][T12806] vfs_get_tree+0x92/0x2a0 [ 834.579698][T12806] do_new_mount+0x329/0xa50 [ 834.584358][T12806] __se_sys_mount+0x31d/0x420 [ 834.589031][T12806] do_syscall_64+0xe2/0xf80 [ 834.593538][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.599418][T12806] [ 834.601727][T12806] Freed by task 15: [ 834.605517][T12806] kasan_save_track+0x3e/0x80 [ 834.610182][T12806] kasan_save_free_info+0x46/0x50 [ 834.615205][T12806] __kasan_slab_free+0x5c/0x80 [ 834.619963][T12806] kmem_cache_free+0x195/0x610 [ 834.624723][T12806] gfs2_qd_dealloc+0x70/0xe0 [ 834.629403][T12806] rcu_core+0xc9e/0x1750 [ 834.633739][T12806] handle_softirqs+0x22a/0x7c0 [ 834.638544][T12806] run_ksoftirqd+0x36/0x60 [ 834.642957][T12806] smpboot_thread_fn+0x541/0xa50 [ 834.647905][T12806] kthread+0x726/0x8b0 [ 834.651993][T12806] ret_from_fork+0x51b/0xa40 [ 834.656603][T12806] ret_from_fork_asm+0x1a/0x30 [ 834.661366][T12806] [ 834.663674][T12806] Last potentially related work creation: [ 834.669381][T12806] kasan_save_stack+0x3e/0x60 [ 834.674067][T12806] kasan_record_aux_stack+0xbd/0xd0 [ 834.679304][T12806] call_rcu+0xee/0x890 [ 834.683374][T12806] gfs2_quota_sync+0x322/0x470 [ 834.688160][T12806] gfs2_sync_fs+0x4c/0xb0 [ 834.692715][T12806] sync_filesystem+0xee/0x230 [ 834.697394][T12806] generic_shutdown_super+0x6f/0x2c0 [ 834.702683][T12806] kill_block_super+0x44/0x90 [ 834.707383][T12806] deactivate_locked_super+0xbc/0x130 [ 834.712759][T12806] cleanup_mnt+0x437/0x4d0 [ 834.717175][T12806] task_work_run+0x1d9/0x270 [ 834.721760][T12806] exit_to_user_mode_loop+0xed/0x480 [ 834.727041][T12806] do_syscall_64+0x2b7/0xf80 [ 834.731636][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.737526][T12806] [ 834.739836][T12806] The buggy address belongs to the object at ffff88805458f000 [ 834.739836][T12806] which belongs to the cache gfs2_quotad of size 272 [ 834.753890][T12806] The buggy address is located 120 bytes inside of [ 834.753890][T12806] freed 272-byte region [ffff88805458f000, ffff88805458f110) [ 834.767708][T12806] [ 834.770036][T12806] The buggy address belongs to the physical page: [ 834.776482][T12806] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805458f000 pfn:0x5458f [ 834.786545][T12806] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 834.793651][T12806] page_type: f5(slab) [ 834.797623][T12806] raw: 00fff00000000000 ffff88801c3a0b40 dead000000000122 0000000000000000 [ 834.806205][T12806] raw: ffff88805458f000 00000000800c000b 00000000f5000000 0000000000000000 [ 834.814783][T12806] page dumped because: kasan: bad access detected [ 834.821191][T12806] page_owner tracks the page as allocated [ 834.826912][T12806] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x52c50(GFP_NOFS|__GFP_RECLAIMABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8281, tgid 8279 (syz.6.554), ts 327379069614, free_ts 326085729632 [ 834.847756][T12806] post_alloc_hook+0x228/0x280 [ 834.852535][T12806] get_page_from_freelist+0x24dc/0x2580 [ 834.858074][T12806] __alloc_frozen_pages_noprof+0x18d/0x380 [ 834.863898][T12806] alloc_pages_mpol+0x232/0x4a0 [ 834.868771][T12806] allocate_slab+0x86/0x3a0 [ 834.873431][T12806] ___slab_alloc+0xd82/0x1760 [ 834.878112][T12806] __slab_alloc+0x65/0x100 [ 834.882543][T12806] kmem_cache_alloc_noprof+0x3fe/0x6e0 [ 834.888012][T12806] qd_alloc+0x50/0x250 [ 834.892172][T12806] gfs2_quota_init+0x786/0x1220 [ 834.897025][T12806] gfs2_make_fs_rw+0x143/0x220 [ 834.901781][T12806] gfs2_fill_super+0x1b9a/0x21d0 [ 834.906720][T12806] get_tree_bdev_flags+0x431/0x4f0 [ 834.911821][T12806] gfs2_get_tree+0x51/0x1e0 [ 834.916322][T12806] vfs_get_tree+0x92/0x2a0 [ 834.920732][T12806] do_new_mount+0x329/0xa50 [ 834.925330][T12806] page last free pid 6626 tgid 6626 stack trace: [ 834.931645][T12806] __free_frozen_pages+0xbb0/0xd10 [ 834.936754][T12806] __put_partials+0x146/0x170 [ 834.941428][T12806] __slab_free+0x294/0x320 [ 834.945849][T12806] qlist_free_all+0x97/0x100 [ 834.950435][T12806] kasan_quarantine_reduce+0x148/0x160 [ 834.955904][T12806] __kasan_slab_alloc+0x22/0x80 [ 834.960754][T12806] kmem_cache_alloc_noprof+0x370/0x6e0 [ 834.966296][T12806] getname_flags+0xb7/0x540 [ 834.970788][T12806] __x64_sys_unlink+0x3a/0x50 [ 834.975458][T12806] do_syscall_64+0xe2/0xf80 [ 834.979961][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.985881][T12806] [ 834.988189][T12806] Memory state around the buggy address: [ 834.993798][T12806] ffff88805458ef00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 835.001845][T12806] ffff88805458ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 835.009895][T12806] >ffff88805458f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 835.017944][T12806] ^ [ 835.025911][T12806] ffff88805458f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 835.033990][T12806] ffff88805458f100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 835.042179][T12806] ================================================================== [ 835.051680][T12806] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 835.058871][T12806] CPU: 1 UID: 0 PID: 12806 Comm: syz.7.1555 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.069800][T12806] Tainted: [L]=SOFTLOCKUP [ 835.074190][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.084226][T12806] Call Trace: [ 835.087486][T12806] [ 835.090392][T12806] vpanic+0x1e0/0x670 [ 835.094456][T12806] panic+0xc5/0xd0 [ 835.098175][T12806] ? __pfx_panic+0x10/0x10 [ 835.102579][T12806] ? __list_lru_walk_one+0xfb/0x420 [ 835.107856][T12806] ? __list_lru_walk_one+0xfb/0x420 [ 835.113038][T12806] check_panic_on_warn+0x89/0xb0 [ 835.117967][T12806] ? __list_lru_walk_one+0xfb/0x420 [ 835.123170][T12806] end_report+0x6f/0x140 [ 835.127424][T12806] kasan_report+0x128/0x150 [ 835.131951][T12806] ? __list_lru_walk_one+0xfb/0x420 [ 835.137151][T12806] __list_lru_walk_one+0xfb/0x420 [ 835.142182][T12806] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 835.147480][T12806] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 835.152870][T12806] list_lru_walk_one+0x3c/0x50 [ 835.157649][T12806] gfs2_qd_shrink_scan+0x15d/0x340 [ 835.162767][T12806] ? list_lru_count_one+0x27/0x2c0 [ 835.167878][T12806] ? __pfx_gfs2_qd_shrink_scan+0x10/0x10 [ 835.173511][T12806] ? list_lru_count_one+0x27/0x2c0 [ 835.178624][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.184265][T12806] do_shrink_slab+0x6df/0x10d0 [ 835.189038][T12806] ? shrink_slab+0x130/0x1150 [ 835.193713][T12806] shrink_slab+0xdf2/0x1150 [ 835.198220][T12806] ? shrink_slab+0x130/0x1150 [ 835.202898][T12806] ? __pfx_shrink_slab+0x10/0x10 [ 835.207947][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.213583][T12806] ? mem_cgroup_iter+0x3b/0x450 [ 835.218479][T12806] ? mem_cgroup_iter+0x3e7/0x450 [ 835.223470][T12806] ? mem_cgroup_iter+0x3b/0x450 [ 835.228341][T12806] drop_slab+0x14a/0x290 [ 835.232585][T12806] drop_caches_sysctl_handler+0xc7/0x170 [ 835.238220][T12806] proc_sys_call_handler+0x4cb/0x700 [ 835.243510][T12806] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 835.249426][T12806] do_iter_readv_writev+0x619/0x8c0 [ 835.254639][T12806] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 835.260465][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.266098][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.271732][T12806] vfs_writev+0x33c/0x990 [ 835.276067][T12806] ? __pfx_vfs_writev+0x10/0x10 [ 835.280922][T12806] ? __fget_files+0x2a/0x420 [ 835.285516][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.291154][T12806] ? __fget_files+0x3a0/0x420 [ 835.295829][T12806] ? __fget_files+0x2a/0x420 [ 835.300425][T12806] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.306174][T12806] do_writev+0x154/0x2e0 [ 835.310420][T12806] ? __pfx_do_writev+0x10/0x10 [ 835.315193][T12806] do_syscall_64+0xe2/0xf80 [ 835.319710][T12806] ? rcu_is_watching+0x15/0xb0 [ 835.324485][T12806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.330714][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.336617][T12806] RIP: 0033:0x7f159fd9acb9 [ 835.341025][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.360833][T12806] RSP: 002b:00007f15a0c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 835.369250][T12806] RAX: ffffffffffffffda RBX: 00007f15a0015fa0 RCX: 00007f159fd9acb9 [ 835.377304][T12806] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 835.385270][T12806] RBP: 00007f159fe08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 835.393239][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.401308][T12806] R13: 00007f15a0016038 R14: 00007f15a0015fa0 R15: 00007fffc5f0b3c8 [ 835.409287][T12806] [ 835.412851][T12806] Kernel Offset: disabled [ 835.417167][T12806] Rebooting in 86400 seconds..