last executing test programs: 8m19.336739057s ago: executing program 1 (id=13): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 8m17.91141823s ago: executing program 1 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8m16.832110892s ago: executing program 1 (id=17): syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) 8m12.598803378s ago: executing program 1 (id=25): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r4}, 0x20) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c0014"], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) sendto$inet6(r6, &(0x7f0000000200)="7f895b63521b37a36ab0dae7c7cde9879160278ab56c32844fdc83709f838c4c0229532d571c741deeb5e03b0d5fdbeec6c2ff3e8c39d6432d602eed3f9b2556189b42db5b1898bb26e2756dbc225e38ef83caca3a35b33782fc197f27e46c847b7b655d0cced7f8d89102e0d0f976953be4e599a1c9bbf5b87035e5b645572bab95cc6cde327d2f67e66241e8378c2676e9b62e669e5e334c3962026ab3a6ea83a8a1e20d5908dd26ad2756dfc8ba105b327a18087b60ea68a05a24", 0xbc, 0x80, &(0x7f0000000180)={0xa, 0x4e20, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) ioctl$LOOP_SET_FD(r7, 0x4c05, r7) dup2(r6, r0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x3) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0) 8m11.160749582s ago: executing program 1 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1780, 0x4) 8m10.662872931s ago: executing program 1 (id=30): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@raw=[@generic={0x7, 0x5, 0xe, 0x3, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x3, 0x4) 8m10.305857841s ago: executing program 32 (id=30): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@raw=[@generic={0x7, 0x5, 0xe, 0x3, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x3, 0x4) 7m36.24190086s ago: executing program 0 (id=141): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) 7m34.632221273s ago: executing program 0 (id=143): socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc08, 0x3, 0x208, 0x0, 0x5002004a, 0xb, 0x128, 0xea13, 0x1c0, 0x3c8, 0x3c8, 0x1c0, 0x3c8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffff00, 0x0, 'veth1_vlan\x00', 'erspan0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0x2201, 0x9, 0x8, 'syz1\x00', 'syz0\x00', {0x400}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x101}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m30.762732438s ago: executing program 0 (id=158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x900, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) umount2(0x0, 0xb) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x800000000001, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x6, 0x7ffffffd, 0xfffffffe, 0x4000, 0x0, 0xee00, 0x0, 0x3ff, 0xc195}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 7m30.521859132s ago: executing program 0 (id=160): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r4}, 0x20) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c0014"], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) sendto$inet6(r6, &(0x7f0000000200)="7f895b63521b37a36ab0dae7c7cde9879160278ab56c32844fdc83709f838c4c0229532d571c741deeb5e03b0d5fdbeec6c2ff3e8c39d6432d602eed3f9b2556189b42db5b1898bb26e2756dbc225e38ef83caca3a35b33782fc197f27e46c847b7b655d0cced7f8d89102e0d0f976953be4e599a1c9bbf5b87035e5b645572bab95cc6cde327d2f67e66241e8378c2676e9b62e669e5e334c3962026ab3a6ea83a8a1e20d5908dd26ad2756dfc8ba105b327a18087b60ea68a05a24", 0xbc, 0x80, &(0x7f0000000180)={0xa, 0x4e20, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) ioctl$LOOP_SET_FD(r7, 0x4c05, r7) dup2(r6, r0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x3) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x0) 7m30.072260348s ago: executing program 0 (id=163): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x20500) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getrusage(0xffffffffffffffff, &(0x7f0000002300)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@errors_remount}, {@nodioread_nolock}, {@nolazytime}]}, 0xfe, 0x275, &(0x7f0000000980)="$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") socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) mknod$loop(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"}) 7m29.839914602s ago: executing program 0 (id=165): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b0, &(0x7f0000000300)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7m29.591169466s ago: executing program 33 (id=165): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b0, &(0x7f0000000300)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7m10.514906034s ago: executing program 4 (id=223): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) statfs(0x0, 0x0) 7m10.200050192s ago: executing program 4 (id=224): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r1, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xffffffff) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m8.776051395s ago: executing program 4 (id=232): syz_emit_ethernet(0x3a, &(0x7f0000000b00)=ANY=[@ANYBLOB="e90c610faca2"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, &(0x7f0000000a00)=""/204, 0xcc}, 0x7add9394}], 0x1, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m59.721636641s ago: executing program 4 (id=247): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@acl}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 6m58.722443779s ago: executing program 4 (id=249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r5}, 0x3f) recvfrom(r5, &(0x7f00000004c0)=""/186, 0xba, 0x10021, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m52.047967086s ago: executing program 4 (id=258): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=ANY=[@ANYBLOB], 0x1150}}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) rseq(&(0x7f0000000040), 0x7c, 0x0, 0x0) personality(0x4000000) ppoll(0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000500)) 6m51.692504217s ago: executing program 34 (id=258): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=ANY=[@ANYBLOB], 0x1150}}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r5}, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) rseq(&(0x7f0000000040), 0x7c, 0x0, 0x0) personality(0x4000000) ppoll(0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000500)) 3m3.70125205s ago: executing program 6 (id=933): socket(0x28, 0x5, 0x0) munlock(&(0x7f00002de000/0x8000)=nil, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x18, 0xa, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0xbf48, 0x80, 0x0, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) 2m58.466458786s ago: executing program 6 (id=941): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0xe, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 2m56.942135725s ago: executing program 6 (id=944): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000600)={0xe, {0x1, 0x6, 0x4f}}, 0xc) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[], 0xc) 2m54.860227906s ago: executing program 6 (id=955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="11326d384a8050", 0x7}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) splice(r1, &(0x7f0000000140)=0x97a7, r0, &(0x7f0000000180)=0x7, 0x5, 0x5) recvmsg(r1, 0x0, 0x40010120) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 2m52.847569474s ago: executing program 6 (id=961): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m51.500072472s ago: executing program 6 (id=969): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 2m49.689932138s ago: executing program 35 (id=969): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 19.248560636s ago: executing program 3 (id=1338): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) 16.448505889s ago: executing program 7 (id=1346): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x4c80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) close(0xffffffffffffffff) gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) 14.923728938s ago: executing program 7 (id=1348): open(0x0, 0x14927e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x5d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) stat(&(0x7f0000000940)='./file0\x00', 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000040)=""/89, 0x59}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a68000000060a0b040000000000000000020000083c000480380001800b00010064796e73657400de2700028008000940000000060900010073797a3100000000080003400000000208000440000000100900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)="180c4552", 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x10, 0x23, 0x1}, 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 13.603384465s ago: executing program 2 (id=1351): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) open(0x0, 0x80ff, 0x88) close(0x3) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/181, 0xb5}, {0x0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000600)=""/137, 0x89}], 0x7}, 0x1}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x60444, &(0x7f0000001b80)={[], [{@subj_type={'subj_type', 0x3d, '\'],'}}, {@dont_measure}, {@euid_gt}]}, 0x1, 0x185, &(0x7f00000019c0)="$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") 13.295920014s ago: executing program 3 (id=1353): r0 = socket(0x2, 0xa, 0xff) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 12.230109266s ago: executing program 2 (id=1355): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x50, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c3341, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r5, 0x0, 0x10802) 11.30399969s ago: executing program 8 (id=1357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x301a, &(0x7f0000000200)={0x0, 0x6c89, 0x40, 0x1, 0x23}, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xe2, 0x8, 0x1004, 0x9, 0xc591, 0x5, 0x8, 0x1, 0x100, 0x80000004000000, 0x1a], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.213740425s ago: executing program 3 (id=1358): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x4c80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) close(0xffffffffffffffff) gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) 9.263293299s ago: executing program 3 (id=1359): openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000cc0)={0x2020}, 0x2020) 9.175100544s ago: executing program 7 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x3, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 9.08806359s ago: executing program 2 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.857187433s ago: executing program 8 (id=1363): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) 6.68293026s ago: executing program 5 (id=1369): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x4c80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) close(r4) gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) 5.707975027s ago: executing program 5 (id=1370): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09", @ANYRESHEX=0x0, @ANYBLOB="06e916a0b3f9440d673b34f046f4d460a3d8453bc714043c95ac860d29c2d13c05e2ce7c148153f27704ea75fbea937949b088d557482c43be84b08d06bd2ceee9fd06b4dedc3d212b2a8d0795ef0bed1980ba2d45fca08ed21653824aa5b280f66387199a118854e0754342cec93d15834bb599ede1d575037446a5a26db6f8da3efc475c1a9b11f8a29d5e", @ANYRES32=r0, @ANYBLOB="18fb556bc3663d7ff009"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff2a, 0x0, 0x0, 0x10, 0x100000}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x2, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 5.593522843s ago: executing program 2 (id=1371): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x50, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c3341, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r5, 0x0, 0x10802) 5.214190986s ago: executing program 3 (id=1372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r2 = epoll_create1(0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 5.065236134s ago: executing program 8 (id=1373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x301a, &(0x7f0000000200)={0x0, 0x6c89, 0x40, 0x1, 0x23}, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xe2, 0x8, 0x1004, 0x9, 0xc591, 0x5, 0x8, 0x1, 0x100, 0x80000004000000, 0x1a], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.053033185s ago: executing program 7 (id=1374): open(0x0, 0x14927e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x5d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) stat(&(0x7f0000000940)='./file0\x00', 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000040)=""/89, 0x59}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a68000000060a0b040000000000000000020000083c000480380001800b00010064796e73657400de2700028008000940000000060900010073797a3100000000080003400000000208000440000000100900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)="180c4552", 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x10, 0x23, 0x1}, 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 4.249237112s ago: executing program 8 (id=1375): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x26ad, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) close(0x3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) 4.248220042s ago: executing program 7 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x168, 0x188, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) 2.747698589s ago: executing program 8 (id=1377): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hoplimit={{0x14}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x25, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x0]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x208}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.646407415s ago: executing program 7 (id=1378): socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0xfe9, 0x4) 2.489642255s ago: executing program 5 (id=1379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) 2.185495562s ago: executing program 5 (id=1380): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") sched_setscheduler(0x0, 0x1, 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000340)={0x0, 0xfe15, 0x80, 0x0, 0x1f1}, 0x0, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000e40)={0x0, 0x22e6, 0x1000, 0x2, 0x378}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 2.104227517s ago: executing program 8 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.923978818s ago: executing program 2 (id=1382): r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x2200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r4 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) prctl$PR_SET_PTRACER(0x59616d61, r4) 440.247274ms ago: executing program 3 (id=1383): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) 423.401825ms ago: executing program 2 (id=1384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x3, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 147.633081ms ago: executing program 5 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x301a, &(0x7f0000000200)={0x0, 0x6c89, 0x40, 0x1, 0x23}, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 5 (id=1386): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@dax}, {@oldalloc}, {@dax_always}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munlock(&(0x7f000048d000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): aa:aa:3e) already exists on: batadv_slave_0 [ 196.698193][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.737876][ T5957] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.763095][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.892189][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.902676][ T5709] usb 3-1: no configurations [ 196.907413][ T5709] usb 3-1: can't read configurations, error -22 [ 196.923479][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.934193][ T5957] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.345: dx entry: limit 0 != root limit 252 [ 196.934267][ T5957] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.345: Corrupt directory, running e2fsck is recommended [ 196.968160][ T5547] udevd[5547]: incorrect jbd checksum on /dev/loop3 [ 196.980847][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.346'. [ 196.991211][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.008749][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.047119][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.067188][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.075855][ T5709] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.117150][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.135955][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.156616][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.190706][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.217246][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.243141][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.267372][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.286850][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.308703][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.342892][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.363602][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.383386][ T5709] usb 3-1: no configurations [ 197.388069][ T5709] usb 3-1: can't read configurations, error -22 [ 197.399718][ T5587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.409693][ T5709] usb usb3-port1: attempt power cycle [ 197.432774][ T5587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.461778][ T5587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.476315][ T5587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.904157][ T150] block nbd3: Attempted send on invalid socket [ 197.911559][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.345103][ T5996] loop6: detected capacity change from 0 to 128 [ 198.351551][ T5994] befs: (nbd3): unable to read superblock [ 198.376709][ T5990] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 198.383746][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.394208][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 198.555955][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.596822][ T5996] FAT-fs (loop6): bogus sectors per cluster 0 [ 198.641659][ T5996] FAT-fs (loop6): Can't find a valid FAT filesystem [ 198.663347][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.753199][ T4290] usb 46-1: SetAddress Request (2) to port 0 [ 198.759856][ T4290] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 198.789392][ T6003] loop5: detected capacity change from 0 to 256 [ 198.821137][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.829494][ T4838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.899970][ T4838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.042702][ T6007] loop3: detected capacity change from 0 to 1024 [ 199.993382][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.434966][ T6017] xt_nat: multiple ranges no longer supported [ 200.499295][ T6007] EXT4-fs (loop3): Ignoring removed orlov option [ 201.077322][ T6007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 201.086376][ T6007] System zones: 0-1, 3-12 [ 201.106045][ T6007] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,max_dir_size_kb=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none. [ 201.216217][ T5992] vhci_hcd: connection reset by peer [ 201.235397][ T4550] vhci_hcd: stop threads [ 201.240342][ T4550] vhci_hcd: release socket [ 201.337076][ T4550] vhci_hcd: disconnect device [ 201.478060][ T5716] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.524627][ T5716] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.534509][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.365'. [ 201.564355][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.360'. [ 201.682204][ T6051] loop6: detected capacity change from 0 to 256 [ 201.754221][ T6047] loop3: detected capacity change from 0 to 4096 [ 201.786236][ T6051] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 201.798840][ T5709] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.829573][ T6051] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 201.849567][ T6047] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.965638][ T6047] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 202.056434][ T6047] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 202.286517][ T6066] attempt to access beyond end of device [ 202.286517][ T6066] loop6: rw=16777216, want=10503, limit=256 [ 202.343351][ T6066] attempt to access beyond end of device [ 202.343351][ T6066] loop6: rw=16777216, want=22743, limit=256 [ 202.355033][ T6066] attempt to access beyond end of device [ 202.355033][ T6066] loop6: rw=16777216, want=23135, limit=256 [ 202.373139][ T26] audit: type=1800 audit(1769199877.423:25): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.366" name="file1" dev="loop6" ino=1048601 res=0 errno=0 [ 202.520763][ T6070] loop5: detected capacity change from 0 to 512 [ 202.612577][ T6070] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.823474][ T5709] usb 3-1: no configurations [ 202.828237][ T5709] usb 3-1: can't read configurations, error -22 [ 202.842885][ T6070] FAT-fs (loop5): Directory bread(block 1056) failed [ 202.883297][ T6070] FAT-fs (loop5): Directory bread(block 1057) failed [ 202.900383][ T6070] FAT-fs (loop5): Directory bread(block 1058) failed [ 202.917930][ T6070] FAT-fs (loop5): Directory bread(block 1059) failed [ 202.936938][ T6070] FAT-fs (loop5): Directory bread(block 1060) failed [ 203.126956][ T6070] FAT-fs (loop5): Directory bread(block 1061) failed [ 203.153271][ T6070] FAT-fs (loop5): Directory bread(block 1062) failed [ 203.183158][ T5709] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 203.203586][ T6070] FAT-fs (loop5): Directory bread(block 1063) failed [ 203.210464][ T6070] FAT-fs (loop5): Directory bread(block 1064) failed [ 203.263121][ T6070] FAT-fs (loop5): Directory bread(block 1065) failed [ 203.663490][ T5709] usb 3-1: no configurations [ 203.671211][ T5709] usb 3-1: can't read configurations, error -22 [ 203.693149][ T5709] usb usb3-port1: attempt power cycle [ 203.851255][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 204.086451][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.379'. [ 204.233568][ T6112] gretap0: default FDB implementation only supports local addresses [ 204.251907][ T5709] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 205.021346][ T5709] usb 3-1: device descriptor read/8, error -71 [ 205.063384][ T4290] usb 46-1: device descriptor read/8, error -110 [ 205.212735][ T6125] loop5: detected capacity change from 0 to 512 [ 205.306102][ T6135] loop2: detected capacity change from 0 to 128 [ 205.319764][ T6129] overlayfs: missing 'lowerdir' [ 205.349135][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 205.371480][ T6125] EXT4-fs (loop5): Ignoring removed bh option [ 206.194112][ T4290] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 206.197121][ T6135] netlink: 'syz.2.385': attribute type 11 has an invalid length. [ 206.210663][ T4290] usb usb46-port1: attempt power cycle [ 206.474256][ T6125] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 206.544115][ T6125] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.589486][ T4290] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 206.923938][ T4290] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 206.939126][ T4290] usb usb46-port1: unable to enumerate USB device [ 209.317930][ T6165] loop2: detected capacity change from 0 to 1024 [ 209.951712][ T6165] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.962638][ T6165] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.666824][ T6179] loop6: detected capacity change from 0 to 1024 [ 216.157220][ T6222] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 218.271518][ T6230] trusted_key: encrypted_key: key user:syz not found [ 219.510104][ T6228] loop7: detected capacity change from 0 to 4096 [ 219.566388][ T6228] EXT4-fs (loop7): Test dummy encryption mode enabled [ 219.573776][ T6228] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 219.613880][ T6228] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 220.050062][ T6252] binder: 6246:6252 ioctl c0306201 0 returned -14 [ 220.337861][ T6258] xt_nat: multiple ranges no longer supported [ 220.383454][ T6264] overlayfs: missing 'lowerdir' [ 220.758786][ T6280] loop2: detected capacity change from 0 to 764 [ 221.865424][ T6290] Symlink component flag not implemented [ 221.872876][ T6290] Symlink component flag not implemented (116) [ 222.419969][ T6300] overlayfs: missing 'workdir' [ 223.029560][ T6322] binder: 6316:6322 ioctl c0306201 0 returned -14 [ 223.101216][ T5716] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 223.281067][ T6326] loop3: detected capacity change from 0 to 512 [ 223.479876][ T6326] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 223.527044][ T6326] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.844178][ T26] audit: type=1800 audit(1769199899.013:26): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.438" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 223.903205][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.911100][ T6336] loop7: detected capacity change from 0 to 128 [ 223.932108][ T5716] usb 6-1: config 0 has no interfaces? [ 224.024262][ T6326] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 224.067508][ T6336] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.163546][ T5716] usb 6-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 224.173707][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.181884][ T5716] usb 6-1: Product: syz [ 224.186349][ T5716] usb 6-1: Manufacturer: syz [ 224.191156][ T5716] usb 6-1: SerialNumber: syz [ 224.197789][ T5716] usb 6-1: config 0 descriptor?? [ 224.204251][ T6336] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.468476][ T6313] loop5: detected capacity change from 0 to 1024 [ 226.006592][ T6357] overlayfs: missing 'workdir' [ 226.017818][ T2287] usb 6-1: USB disconnect, device number 2 [ 228.406301][ T6397] loop3: detected capacity change from 0 to 1764 [ 228.722085][ T6415] loop6: detected capacity change from 0 to 512 [ 228.883483][ T6418] loop3: detected capacity change from 0 to 256 [ 230.491241][ T6418] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 230.617448][ T6418] attempt to access beyond end of device [ 230.617448][ T6418] loop3: rw=524288, want=408, limit=256 [ 230.669060][ T6418] attempt to access beyond end of device [ 230.669060][ T6418] loop3: rw=524288, want=664, limit=256 [ 230.733201][ T6418] attempt to access beyond end of device [ 230.733201][ T6418] loop3: rw=0, want=288, limit=256 [ 230.785802][ T26] audit: type=1800 audit(1769199905.953:27): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.460" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 231.747855][ T6428] loop6: detected capacity change from 0 to 32768 [ 231.861066][ T6428] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 231.921590][ T6428] BTRFS info (device loop6): turning off barriers [ 231.931748][ T6428] BTRFS info (device loop6): use no compression [ 231.986585][ T6428] BTRFS info (device loop6): setting nodatasum [ 231.992838][ T6428] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.143569][ T6428] BTRFS info (device loop6): use zstd compression, level 3 [ 232.161165][ T6428] BTRFS info (device loop6): using free space tree [ 232.176998][ T6447] loop5: detected capacity change from 0 to 64 [ 232.241335][ T6428] BTRFS info (device loop6): has skinny extents [ 232.698298][ T5709] libceph: connect (1)[c::]:6789 error -101 [ 232.709205][ T5709] libceph: mon0 (1)[c::]:6789 connect error [ 232.844379][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 232.863143][ T6447] ceph: No mds server is up or the cluster is laggy [ 233.025694][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 233.031764][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 233.331180][ T6486] loop7: detected capacity change from 0 to 64 [ 234.548420][ T6481] attempt to access beyond end of device [ 234.548420][ T6481] loop7: rw=0, want=130, limit=64 [ 234.559289][ T6481] Trying to free block not in datazone [ 234.564852][ T6481] Trying to free block not in datazone [ 234.570479][ T6481] Trying to free block not in datazone [ 234.576049][ T6481] Trying to free block not in datazone [ 234.581536][ T6481] Trying to free block not in datazone [ 234.587103][ T6481] Trying to free block not in datazone [ 234.592594][ T6481] minix_free_block (loop7:6): bit already cleared [ 234.851224][ T6428] BTRFS error (device loop6): open_ctree failed: -12 [ 234.858438][ T5547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (5547) [ 234.881785][ T6505] binder: BINDER_SET_CONTEXT_MGR already set [ 234.888936][ T6505] binder: 6501:6505 ioctl 4018620d 2000000002c0 returned -16 [ 236.145183][ T6536] af_packet: tpacket_rcv: packet too big, clamped from 4047 to 3966. macoff=82 [ 236.230058][ T6542] fuse: Bad value for 'group_id' [ 236.334085][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 237.200104][ T6563] loop6: detected capacity change from 0 to 64 [ 238.016642][ T6557] attempt to access beyond end of device [ 238.016642][ T6557] loop6: rw=0, want=130, limit=64 [ 238.027423][ T6557] Trying to free block not in datazone [ 238.033074][ T6557] Trying to free block not in datazone [ 238.038686][ T6557] Trying to free block not in datazone [ 238.044525][ T6557] Trying to free block not in datazone [ 238.050272][ T6557] Trying to free block not in datazone [ 238.056070][ T6557] Trying to free block not in datazone [ 238.061661][ T6557] minix_free_block (loop6:6): bit already cleared [ 238.096207][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 239.277132][ T6556] loop3: detected capacity change from 0 to 32768 [ 242.096203][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 243.350683][ T6643] loop5: detected capacity change from 0 to 64 [ 244.264128][ T6641] attempt to access beyond end of device [ 244.264128][ T6641] loop5: rw=0, want=130, limit=64 [ 244.274941][ T6641] Trying to free block not in datazone [ 244.280442][ T6641] Trying to free block not in datazone [ 244.286074][ T6641] Trying to free block not in datazone [ 244.291588][ T6641] Trying to free block not in datazone [ 244.297162][ T6641] Trying to free block not in datazone [ 244.302649][ T6641] Trying to free block not in datazone [ 244.308233][ T6641] minix_free_block (loop5:6): bit already cleared [ 247.208280][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 247.394423][ T6691] fuse: Bad value for 'group_id' [ 247.414846][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.496'. [ 247.613107][ T1106] Bluetooth: hci2: command 0x0406 tx timeout [ 247.648256][ T6659] loop2: detected capacity change from 0 to 32768 [ 247.816016][ T6659] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 247.925744][ T6659] BTRFS info (device loop2): turning off barriers [ 247.987931][ T6659] BTRFS info (device loop2): use no compression [ 248.008313][ T6659] BTRFS info (device loop2): setting nodatasum [ 248.079360][ T6659] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 248.185810][ T6659] BTRFS info (device loop2): use zstd compression, level 3 [ 248.230588][ T6659] BTRFS info (device loop2): using free space tree [ 248.283215][ T6659] BTRFS info (device loop2): has skinny extents [ 249.014278][ T6659] BTRFS error (device loop2): open_ctree failed: -12 [ 249.703111][ T5367] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 250.747671][ T5547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5547) [ 250.764938][ T5367] usb 8-1: Using ep0 maxpacket: 32 [ 250.919188][ T5367] usb 8-1: config 1 has an invalid interface number: 2 but max is 1 [ 250.933029][ T5367] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.451673][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.524'. [ 251.781754][ T5367] usb 8-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 251.791698][ T5367] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.814901][ T5367] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.872260][ T5367] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.905807][ T5367] usb 8-1: config 1 interface 2 has no altsetting 0 [ 251.957050][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.526'. [ 251.983179][ T5367] usb 8-1: string descriptor 0 read error: -71 [ 252.000058][ T5367] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.056418][ T5367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.143231][ T5367] usb 8-1: can't set config #1, error -71 [ 252.158616][ T5367] usb 8-1: USB disconnect, device number 2 [ 252.385028][ T6774] xt_nat: multiple ranges no longer supported [ 252.593156][ T5367] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 252.733174][ T5368] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 252.762042][ T6772] loop5: detected capacity change from 0 to 40427 [ 252.826485][ T6772] F2FS-fs (loop5): invalid crc value [ 252.916026][ T6772] F2FS-fs (loop5): Found nat_bits in checkpoint [ 253.003140][ T5368] usb 8-1: Using ep0 maxpacket: 16 [ 253.037034][ T6772] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 253.044378][ T5367] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 253.049668][ T6772] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 253.052007][ T5367] usb 7-1: can't read configurations, error -61 [ 253.268644][ T5368] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.288600][ T5368] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 253.298410][ T5368] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.343023][ T5368] usb 8-1: config 0 descriptor?? [ 253.353513][ T5367] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 253.385022][ T6805] attempt to access beyond end of device [ 253.385022][ T6805] loop5: rw=2049, want=45104, limit=40427 [ 253.757706][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 253.770494][ T6793] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.987276][ T5368] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 253.996655][ T5368] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 254.013445][ T5368] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 254.021471][ T5368] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 254.029088][ T5368] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 254.039861][ T5368] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 254.073263][ T5367] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 254.080934][ T5367] usb 7-1: can't read configurations, error -61 [ 254.108002][ T5367] usb usb7-port1: attempt power cycle [ 254.386196][ T6778] udc-core: couldn't find an available UDC or it's busy [ 254.416315][ T6778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 254.444550][ T5368] usb 8-1: USB disconnect, device number 3 [ 254.553081][ T6507] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 254.563385][ T5367] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 254.690564][ T6829] loop5: detected capacity change from 0 to 64 [ 254.929700][ T6506] libceph: connect (1)[c::]:6789 error -101 [ 254.954136][ T6506] libceph: mon0 (1)[c::]:6789 connect error [ 254.983466][ T5367] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 254.993311][ T5367] usb 7-1: can't read configurations, error -61 [ 255.003201][ T6507] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 255.017561][ T6507] usb 4-1: config 0 has no interface number 0 [ 255.143593][ T5367] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 255.183358][ T6507] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 255.216894][ T6507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.270017][ T6507] usb 4-1: Product: syz [ 255.301000][ T6507] usb 4-1: Manufacturer: syz [ 255.393029][ T5367] usb 7-1: device not accepting address 5, error -71 [ 255.461853][ T5367] usb usb7-port1: unable to enumerate USB device [ 255.463216][ T6507] usb 4-1: SerialNumber: syz [ 255.484654][ T6506] libceph: connect (1)[c::]:6789 error -101 [ 255.490839][ T6506] libceph: mon0 (1)[c::]:6789 connect error [ 255.500681][ T6829] ceph: No mds server is up or the cluster is laggy [ 255.567023][ T6845] binder: BINDER_SET_CONTEXT_MGR already set [ 255.573280][ T6845] binder: 6840:6845 ioctl 4018620d 200000000040 returned -16 [ 256.230870][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.239772][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.255482][ T6507] usb 4-1: config 0 descriptor?? [ 257.201316][ T6848] loop6: detected capacity change from 0 to 32768 [ 257.243172][ T6507] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 257.265243][ T6507] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 257.293663][ T6507] asix: probe of 4-1:0.251 failed with error -71 [ 257.311845][ T6507] usb 4-1: USB disconnect, device number 9 [ 257.383102][ T6848] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 257.391970][ T6848] BTRFS info (device loop6): turning off barriers [ 257.475935][ T6848] BTRFS info (device loop6): use no compression [ 257.573378][ T6848] BTRFS info (device loop6): setting nodatasum [ 257.579867][ T6848] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 257.589516][ T6848] BTRFS info (device loop6): use zstd compression, level 3 [ 257.596862][ T6848] BTRFS info (device loop6): using free space tree [ 257.604334][ T6848] BTRFS info (device loop6): has skinny extents [ 257.699013][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.542'. [ 257.873364][ T5367] Bluetooth: hci0: command 0x0406 tx timeout [ 257.961687][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 258.755757][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'. [ 258.831670][ T5367] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 258.875767][ T5367] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.070512][ T4719] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 259.255520][ T5367] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 259.374676][ T4719] usb 3-1: Using ep0 maxpacket: 16 [ 259.533533][ T4719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.563074][ T4719] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 259.603010][ T4719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.642290][ T4719] usb 3-1: config 0 descriptor?? [ 259.661154][ T6935] loop5: detected capacity change from 0 to 64 [ 259.668060][ T5367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 259.679536][ T6931] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 259.696647][ T5367] usb 4-1: can't read configurations, error -61 [ 259.888740][ T6897] loop7: detected capacity change from 0 to 40427 [ 259.928589][ T6897] F2FS-fs (loop7): invalid crc value [ 259.969166][ T6897] F2FS-fs (loop7): Found nat_bits in checkpoint [ 260.017198][ T5367] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 260.317272][ T4719] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 260.328869][ T4719] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 260.336732][ T4719] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 260.345062][ T4719] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 260.352445][ T4719] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 260.366564][ T4719] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 260.378046][ T6506] libceph: connect (1)[c::]:6789 error -101 [ 260.384548][ T6506] libceph: mon0 (1)[c::]:6789 connect error [ 260.466027][ T6945] ceph: No mds server is up or the cluster is laggy [ 260.532489][ T6897] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 260.661494][ T6897] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 260.669624][ T5367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 260.713158][ T5367] usb 4-1: can't read configurations, error -61 [ 260.726122][ T6909] udc-core: couldn't find an available UDC or it's busy [ 260.743099][ T6909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 260.751246][ T5367] usb usb4-port1: attempt power cycle [ 260.977617][ T5366] usb 3-1: USB disconnect, device number 18 [ 261.530621][ T5587] attempt to access beyond end of device [ 261.530621][ T5587] loop7: rw=2049, want=45104, limit=40427 [ 261.795978][ T5367] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 261.934883][ T5367] usb 4-1: device descriptor read/8, error -71 [ 262.612842][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 262.741513][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 263.625838][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 263.704349][ T7016] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 263.977492][ T7026] loop6: detected capacity change from 0 to 64 [ 264.349175][ T7034] xt_nat: multiple ranges no longer supported [ 264.839117][ T4719] libceph: connect (1)[c::]:6789 error -101 [ 264.847543][ T4719] libceph: mon0 (1)[c::]:6789 connect error [ 264.919348][ T7026] ceph: No mds server is up or the cluster is laggy [ 265.183565][ T6998] loop2: detected capacity change from 0 to 32768 [ 265.253305][ T6998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.560 (6998) [ 265.333622][ T6998] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 265.378216][ T6998] BTRFS info (device loop2): turning off barriers [ 265.443909][ T6998] BTRFS info (device loop2): use no compression [ 265.464310][ T5367] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 265.485181][ T6998] BTRFS info (device loop2): setting nodatasum [ 265.491429][ T6998] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 265.553045][ T6998] BTRFS info (device loop2): use zstd compression, level 3 [ 265.605854][ T6998] BTRFS info (device loop2): using free space tree [ 265.699531][ T5366] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.719219][ T6998] BTRFS info (device loop2): has skinny extents [ 265.738624][ T5366] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.748895][ T5367] usb 6-1: Using ep0 maxpacket: 16 [ 265.893478][ T5367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.038390][ T5367] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 266.070769][ T5367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.100851][ T5367] usb 6-1: config 0 descriptor?? [ 266.281898][ T7028] loop3: detected capacity change from 0 to 40427 [ 266.301544][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.570'. [ 266.419646][ T7028] F2FS-fs (loop3): invalid crc value [ 266.463101][ T4240] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 266.463819][ T7028] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.501859][ T6060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (6060) [ 266.514319][ T6998] BTRFS error (device loop2): open_ctree failed: -12 [ 266.615373][ T5367] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 266.632870][ T5367] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 266.662816][ T5367] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 266.682162][ T5367] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 266.694734][ T7028] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 266.695729][ T5367] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 266.822796][ T7028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 266.884010][ T5367] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 267.042671][ T7041] udc-core: couldn't find an available UDC or it's busy [ 267.065121][ T7041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 267.141112][ T4254] usb 6-1: USB disconnect, device number 3 [ 267.484884][ T7109] fuse: Bad value for 'group_id' [ 267.618841][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.7.573'. [ 267.759242][ T4185] attempt to access beyond end of device [ 267.759242][ T4185] loop3: rw=2049, want=45104, limit=40427 [ 267.828989][ T4240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 267.863204][ T4240] usb 7-1: can't read configurations, error -61 [ 268.073207][ T4240] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 268.301936][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.577'. [ 268.741550][ T7133] xt_nat: multiple ranges no longer supported [ 269.535654][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 269.555247][ T4240] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 269.558885][ T7135] loop7: detected capacity change from 0 to 64 [ 269.572392][ T4240] usb 7-1: can't read configurations, error -71 [ 269.579098][ T4240] usb usb7-port1: attempt power cycle [ 270.042594][ T7086] libceph: connect (1)[c::]:6789 error -101 [ 270.113916][ T7086] libceph: mon0 (1)[c::]:6789 connect error [ 270.306421][ T7152] ceph: No mds server is up or the cluster is laggy [ 270.879766][ T7146] loop6: detected capacity change from 0 to 32768 [ 270.903737][ T7177] fuse: Bad value for 'group_id' [ 270.933075][ T4240] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 270.957108][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 271.030517][ T7146] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 271.060174][ T7146] BTRFS info (device loop6): turning off barriers [ 271.093035][ T7146] BTRFS info (device loop6): use no compression [ 271.123219][ T7146] BTRFS info (device loop6): setting nodatasum [ 271.129554][ T7146] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 271.183059][ T4240] usb 6-1: Using ep0 maxpacket: 16 [ 271.188486][ T7146] BTRFS info (device loop6): use zstd compression, level 3 [ 271.239300][ T7146] BTRFS info (device loop6): using free space tree [ 271.281075][ T7146] BTRFS info (device loop6): has skinny extents [ 271.323646][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.355733][ T4240] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.463369][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.494800][ T4240] usb 6-1: config 0 descriptor?? [ 271.979594][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 272.225066][ T4240] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 272.253066][ T4240] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 272.460812][ T4240] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 272.468770][ T4240] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 272.476237][ T4240] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 272.484286][ T4240] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 272.509155][ T7171] loop7: detected capacity change from 0 to 40427 [ 272.713929][ T7169] udc-core: couldn't find an available UDC or it's busy [ 272.742681][ T7171] F2FS-fs (loop7): invalid crc value [ 272.905198][ T7169] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 274.045741][ T7171] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-12) [ 274.117171][ T5712] usb 6-1: USB disconnect, device number 4 [ 274.326153][ T7224] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 274.343886][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.593'. [ 275.032318][ T7239] xt_nat: multiple ranges no longer supported [ 275.112201][ T7241] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 275.128990][ T7241] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.176123][ T7251] loop3: detected capacity change from 0 to 64 [ 275.423115][ T4240] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 275.601546][ T7241] libceph: connect (1)[c::]:6789 error -101 [ 275.607797][ T7241] libceph: mon0 (1)[c::]:6789 connect error [ 275.702064][ T7262] fuse: Bad value for 'group_id' [ 275.709699][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.598'. [ 275.920419][ T7241] libceph: connect (1)[c::]:6789 error -101 [ 275.926643][ T7241] libceph: mon0 (1)[c::]:6789 connect error [ 275.973681][ T4240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 275.995542][ T4240] usb 7-1: can't read configurations, error -61 [ 276.010374][ T7256] ceph: No mds server is up or the cluster is laggy [ 276.309187][ T4240] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 276.521256][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.601'. [ 276.720014][ T7295] fuse: Unknown parameter 'grou00000000000000000000' [ 276.789993][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 276.809094][ T4240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 276.823175][ T4240] usb 7-1: can't read configurations, error -61 [ 276.840417][ T4240] usb usb7-port1: attempt power cycle [ 277.003047][ T7241] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 277.105706][ T7305] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.273204][ T7241] usb 8-1: Using ep0 maxpacket: 16 [ 277.293306][ T4240] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 277.393230][ T7241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.411674][ T7288] loop3: detected capacity change from 0 to 32768 [ 277.419875][ T7241] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 277.429830][ T7241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.459616][ T7288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.602 (7288) [ 277.476690][ T7241] usb 8-1: config 0 descriptor?? [ 277.528679][ T7288] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 277.593591][ T7286] loop5: detected capacity change from 0 to 40427 [ 277.605857][ T4240] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 277.623340][ T7288] BTRFS info (device loop3): turning off barriers [ 277.639300][ T4240] usb 7-1: can't read configurations, error -61 [ 277.660871][ T7286] F2FS-fs (loop5): invalid crc value [ 277.692354][ T7288] BTRFS info (device loop3): use no compression [ 277.712773][ T7286] F2FS-fs (loop5): Found nat_bits in checkpoint [ 277.781337][ T7288] BTRFS info (device loop3): setting nodatasum [ 277.804575][ T7288] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 277.823969][ T4240] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 277.850928][ T7286] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 277.859466][ T7286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 277.863759][ T7288] BTRFS info (device loop3): use zstd compression, level 3 [ 277.929273][ T7288] BTRFS info (device loop3): using free space tree [ 277.966269][ T7241] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 277.973633][ T7288] BTRFS info (device loop3): has skinny extents [ 278.126120][ T7241] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 278.229732][ T7333] attempt to access beyond end of device [ 278.229732][ T7333] loop5: rw=2049, want=45104, limit=40427 [ 278.365571][ T7297] udc-core: couldn't find an available UDC or it's busy [ 278.372575][ T7297] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.597943][ T4240] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 278.607991][ T4240] usb 7-1: can't read configurations, error -71 [ 278.614906][ T4240] usb usb7-port1: unable to enumerate USB device [ 278.636804][ T7241] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 278.646005][ T7241] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 278.658445][ T7241] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 278.673725][ T7241] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 278.894229][ T7339] xt_nat: multiple ranges no longer supported [ 278.918331][ T7241] usb 8-1: USB disconnect, device number 4 [ 281.313805][ T7374] loop7: detected capacity change from 0 to 64 [ 281.475066][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 281.831581][ T4247] libceph: connect (1)[c::]:6789 error -101 [ 281.861087][ T4247] libceph: mon0 (1)[c::]:6789 connect error [ 282.110792][ T7381] ceph: No mds server is up or the cluster is laggy [ 282.187618][ T5363] libceph: connect (1)[c::]:6789 error -101 [ 282.196090][ T5363] libceph: mon0 (1)[c::]:6789 connect error [ 282.296020][ T7396] fuse: Unknown parameter 'grou00000000000000000000' [ 282.405063][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.616'. [ 282.511525][ T13] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 282.593330][ T13] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.616680][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.617'. [ 282.843248][ T7086] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 283.157331][ T7421] xt_nat: multiple ranges no longer supported [ 283.163939][ T5363] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 283.373357][ T7086] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 283.381001][ T7086] usb 7-1: can't read configurations, error -61 [ 283.407434][ T5363] usb 3-1: Using ep0 maxpacket: 16 [ 283.459046][ T7420] loop7: detected capacity change from 0 to 32768 [ 283.484317][ T7420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.623 (7420) [ 283.505553][ T7407] loop5: detected capacity change from 0 to 40427 [ 283.523391][ T5363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.523443][ T7420] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 283.554338][ T5363] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 283.564477][ T7086] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 283.585343][ T7407] F2FS-fs (loop5): invalid crc value [ 283.597912][ T5363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.626301][ T7420] BTRFS info (device loop7): turning off barriers [ 283.640622][ T7407] F2FS-fs (loop5): Found nat_bits in checkpoint [ 283.663275][ T7420] BTRFS info (device loop7): use no compression [ 283.668480][ T5363] usb 3-1: config 0 descriptor?? [ 283.690362][ T7420] BTRFS info (device loop7): setting nodatasum [ 283.709527][ T7420] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 283.776325][ T7420] BTRFS info (device loop7): use zstd compression, level 3 [ 283.827992][ T7420] BTRFS info (device loop7): using free space tree [ 283.834718][ T7420] BTRFS info (device loop7): has skinny extents [ 283.896772][ T7407] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 283.963224][ T7086] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 283.981683][ T7407] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 283.989558][ T7086] usb 7-1: can't read configurations, error -61 [ 284.026288][ T7086] usb usb7-port1: attempt power cycle [ 284.272893][ T5363] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 284.280812][ T5363] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 284.288726][ T5363] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 284.296140][ T5363] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 284.304106][ T5363] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 284.311994][ T5363] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 284.505139][ T7468] attempt to access beyond end of device [ 284.505139][ T7468] loop5: rw=2049, want=45104, limit=40427 [ 284.893542][ T7413] udc-core: couldn't find an available UDC or it's busy [ 285.192992][ T7413] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.281758][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 285.724631][ T7483] loop3: detected capacity change from 0 to 64 [ 285.932957][ C0] sched: RT throttling activated [ 286.091081][ T5363] usb 3-1: USB disconnect, device number 19 [ 286.434758][ T21] libceph: connect (1)[c::]:6789 error -101 [ 286.451998][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 286.508099][ T7495] ceph: No mds server is up or the cluster is laggy [ 287.183870][ T7511] fuse: Unknown parameter 'grou00000000000000000000' [ 287.228873][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 287.246103][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.630'. [ 287.861811][ T7525] xt_nat: multiple ranges no longer supported [ 288.238581][ T7086] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 288.254930][ T7086] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.553136][ T4290] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 288.813168][ T7086] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 289.023104][ T4290] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 289.038265][ T4290] usb 4-1: can't read configurations, error -61 [ 289.065697][ T7086] usb 8-1: Using ep0 maxpacket: 16 [ 289.098727][ T7524] loop2: detected capacity change from 0 to 40427 [ 289.155081][ T7524] F2FS-fs (loop2): invalid crc value [ 289.182808][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.641'. [ 289.193572][ T7086] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.205021][ T7086] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 289.213324][ T4290] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 289.222750][ T7086] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.232655][ T7524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 289.264600][ T7086] usb 8-1: config 0 descriptor?? [ 289.339740][ T7524] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 289.404507][ T7524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 289.434689][ T7544] loop5: detected capacity change from 0 to 64 [ 289.642480][ T7536] loop6: detected capacity change from 0 to 32768 [ 289.827537][ T7546] attempt to access beyond end of device [ 289.827537][ T7546] loop2: rw=2049, want=45104, limit=40427 [ 289.993594][ T4290] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.018825][ T7536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.640 (7536) [ 290.037073][ T4290] usb 4-1: can't read configurations, error -61 [ 290.065530][ T4290] usb usb4-port1: attempt power cycle [ 290.089871][ T4526] libceph: connect (1)[c::]:6789 error -101 [ 290.101506][ T4526] libceph: mon0 (1)[c::]:6789 connect error [ 290.236936][ T7547] ceph: No mds server is up or the cluster is laggy [ 290.250684][ T7086] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 290.258324][ T7086] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 290.266459][ T7086] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 290.273761][ T7086] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 290.280848][ T7086] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 290.288598][ T7086] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 290.342009][ T7536] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 290.361576][ T7536] BTRFS info (device loop6): turning off barriers [ 290.369317][ T7534] udc-core: couldn't find an available UDC or it's busy [ 290.392845][ T7534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.407130][ T7536] BTRFS info (device loop6): use no compression [ 290.424342][ T7536] BTRFS info (device loop6): setting nodatasum [ 290.449703][ T7536] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 290.507551][ T4290] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 290.526931][ T7536] BTRFS info (device loop6): use zstd compression, level 3 [ 290.529471][ T7086] usb 8-1: USB disconnect, device number 5 [ 290.541561][ T7536] BTRFS info (device loop6): using free space tree [ 290.548650][ T7536] BTRFS info (device loop6): has skinny extents [ 290.823150][ T4290] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 291.007348][ T4290] usb 4-1: can't read configurations, error -61 [ 291.471197][ T7583] fuse: Unknown parameter 'group_i00000000000000000000' [ 291.567281][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.646'. [ 291.608481][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.645'. [ 292.387010][ T7598] xt_nat: multiple ranges no longer supported [ 292.783704][ T4290] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 293.033060][ T4290] usb 4-1: device not accepting address 17, error -71 [ 293.046748][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.653'. [ 293.053888][ T4290] usb usb4-port1: unable to enumerate USB device [ 293.687604][ T7618] loop2: detected capacity change from 0 to 64 [ 293.863108][ T6508] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 293.996868][ T5715] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 294.007398][ T5715] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.116030][ T13] libceph: connect (1)[c::]:6789 error -101 [ 294.172023][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 294.223847][ T7612] loop7: detected capacity change from 0 to 40427 [ 294.243186][ T6508] usb 4-1: Using ep0 maxpacket: 16 [ 294.256183][ T7612] F2FS-fs (loop7): invalid crc value [ 294.288065][ T7612] F2FS-fs (loop7): Found nat_bits in checkpoint [ 294.313463][ T5715] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 294.348136][ T7612] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 294.356442][ T7612] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 294.373306][ T6508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.394642][ T6508] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 294.412870][ T6508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.422817][ T6508] usb 4-1: config 0 descriptor?? [ 294.506061][ T7621] ceph: No mds server is up or the cluster is laggy [ 294.685726][ T7632] attempt to access beyond end of device [ 294.685726][ T7632] loop7: rw=2049, want=45104, limit=40427 [ 295.223433][ T5715] usb 6-1: config 0 has no interfaces? [ 295.306452][ T6508] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 295.314258][ T5715] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.328460][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.361523][ T6508] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 295.372702][ T6508] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 295.380927][ T5715] usb 6-1: SerialNumber: syz [ 295.389923][ T6508] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 295.398357][ T5715] usb 6-1: config 0 descriptor?? [ 295.427683][ T6508] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 295.479230][ T6508] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 295.656672][ T6508] usb 6-1: USB disconnect, device number 5 [ 295.705917][ T7614] udc-core: couldn't find an available UDC or it's busy [ 295.735929][ T7614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.769812][ T7614] i2c i2c-1: unsupported multi-msg i2c transaction [ 295.914318][ T7086] usb 4-1: USB disconnect, device number 18 [ 296.269895][ T7648] fuse: Unknown parameter 'group_i00000000000000000000' [ 296.287316][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.662'. [ 296.336707][ T7639] loop2: detected capacity change from 0 to 32768 [ 296.382881][ T7639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.660 (7639) [ 296.532470][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 296.544696][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.664'. [ 296.552245][ T7639] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 296.578984][ T7639] BTRFS info (device loop2): turning off barriers [ 296.586080][ T7639] BTRFS info (device loop2): use no compression [ 296.592753][ T7639] BTRFS info (device loop2): setting nodatasum [ 296.680403][ T7639] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 296.690594][ T7639] BTRFS info (device loop2): use zstd compression, level 3 [ 296.698879][ T7639] BTRFS info (device loop2): using free space tree [ 296.729131][ T7639] BTRFS info (device loop2): has skinny extents [ 297.012224][ T7668] xt_nat: multiple ranges no longer supported [ 299.475951][ T4247] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 299.533829][ T4247] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.893014][ T4247] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 300.111769][ T7704] fuse: Unknown parameter 'group_i00000000000000000000' [ 300.122276][ T7706] loop2: detected capacity change from 0 to 64 [ 300.135114][ T7692] loop5: detected capacity change from 0 to 40427 [ 300.143420][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 300.153517][ T7086] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 300.189416][ T7692] F2FS-fs (loop5): invalid crc value [ 300.198844][ T7692] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.484732][ T4247] usb 8-1: config 0 has no interfaces? [ 300.497780][ T5363] libceph: connect (1)[c::]:6789 error -101 [ 300.511539][ T7692] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 300.516762][ T5363] libceph: mon0 (1)[c::]:6789 connect error [ 300.535309][ T7692] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 300.554799][ T7086] usb 7-1: Using ep0 maxpacket: 16 [ 300.709268][ T4247] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.718889][ T4247] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 300.727795][ T4247] usb 8-1: SerialNumber: syz [ 300.736292][ T4247] usb 8-1: config 0 descriptor?? [ 300.851228][ T7720] attempt to access beyond end of device [ 300.851228][ T7720] loop5: rw=2049, want=45104, limit=40427 [ 300.950633][ T7713] ceph: No mds server is up or the cluster is laggy [ 301.232051][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 301.297657][ T5363] libceph: connect (1)[c::]:6789 error -101 [ 301.319507][ T4247] usb 8-1: USB disconnect, device number 6 [ 301.326304][ T5363] libceph: mon0 (1)[c::]:6789 connect error [ 301.353494][ T7086] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.364723][ T7086] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.374295][ T7086] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.392720][ T7086] usb 7-1: config 0 descriptor?? [ 301.543794][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 301.805516][ T7726] xt_nat: multiple ranges no longer supported [ 302.006023][ T7086] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 302.015490][ T7086] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 302.022605][ T7086] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 302.043074][ T7086] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 302.059685][ T7086] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 302.078275][ T7086] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 302.407382][ T7702] udc-core: couldn't find an available UDC or it's busy [ 302.448112][ T7702] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.533078][ T7702] i2c i2c-1: unsupported multi-msg i2c transaction [ 302.571508][ T7086] usb 7-1: USB disconnect, device number 16 [ 303.025919][ T7734] loop3: detected capacity change from 0 to 32768 [ 303.059006][ T7734] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.680 (7734) [ 303.151316][ T7734] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 303.230539][ T7734] BTRFS info (device loop3): turning off barriers [ 303.242437][ T7734] BTRFS info (device loop3): use no compression [ 303.275698][ T7734] BTRFS info (device loop3): setting nodatasum [ 303.282053][ T7734] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 303.350157][ T7754] fuse: Unknown parameter 'group_id00000000000000000000' [ 303.353248][ T7734] BTRFS info (device loop3): use zstd compression, level 3 [ 303.452541][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.686'. [ 303.531098][ T7734] BTRFS info (device loop3): using free space tree [ 303.573089][ T7734] BTRFS info (device loop3): has skinny extents [ 303.839438][ T7780] fuse: Unknown parameter 'grou00000000000000000000' [ 303.848436][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.689'. [ 303.989310][ T7788] loop6: detected capacity change from 0 to 64 [ 305.665011][ T6508] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 306.211405][ T6508] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.608995][ T7804] xt_nat: multiple ranges no longer supported [ 306.763026][ T5364] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 307.167185][ T5364] usb 8-1: config 0 has no interfaces? [ 307.219996][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 307.413146][ T5364] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.423390][ T5364] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.431902][ T5364] usb 8-1: SerialNumber: syz [ 307.800175][ T5364] usb 8-1: config 0 descriptor?? [ 307.863043][ T7812] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 308.044402][ T7828] fuse: Unknown parameter 'group_id00000000000000000000' [ 308.054277][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.699'. [ 308.086666][ T6508] usb 8-1: USB disconnect, device number 7 [ 308.183000][ T7812] usb 7-1: Using ep0 maxpacket: 16 [ 308.267606][ T7834] fuse: Unknown parameter 'grou00000000000000000000' [ 308.313405][ T7812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.324906][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.701'. [ 308.334347][ T7812] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 308.353012][ T7812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.367503][ T7812] usb 7-1: config 0 descriptor?? [ 308.520322][ T7840] loop5: detected capacity change from 0 to 64 [ 309.182879][ T7844] xt_nat: multiple ranges no longer supported [ 309.312010][ T6508] libceph: connect (1)[c::]:6789 error -101 [ 309.326684][ T6508] libceph: mon0 (1)[c::]:6789 connect error [ 309.400448][ T7850] ceph: No mds server is up or the cluster is laggy [ 309.708718][ T7809] udc-core: couldn't find an available UDC or it's busy [ 309.731760][ T7809] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 309.766596][ T7812] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 309.774469][ T7812] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 309.781688][ T7812] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 309.789037][ T7812] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 309.796180][ T7812] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 309.803807][ T7812] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 309.934014][ T7812] usb 7-1: USB disconnect, device number 17 [ 309.945526][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.708'. [ 310.033141][ T7838] loop3: detected capacity change from 0 to 32768 [ 310.063622][ T7838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.702 (7838) [ 310.116932][ T7838] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 310.151243][ T7838] BTRFS info (device loop3): turning off barriers [ 310.158549][ T7838] BTRFS info (device loop3): use no compression [ 310.195165][ T7838] BTRFS info (device loop3): setting nodatasum [ 310.218131][ T7838] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 310.270069][ T7838] BTRFS info (device loop3): use zstd compression, level 3 [ 310.298906][ T7838] BTRFS info (device loop3): using free space tree [ 310.319228][ T7838] BTRFS info (device loop3): has skinny extents [ 310.467497][ T7874] fuse: Unknown parameter 'group_id00000000000000000000' [ 310.494473][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.711'. [ 310.808752][ T7855] loop2: detected capacity change from 0 to 40427 [ 310.825599][ T7855] F2FS-fs (loop2): invalid crc value [ 312.135238][ T7855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.721048][ T7902] fuse: Unknown parameter 'grou00000000000000000000' [ 312.781488][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.714'. [ 312.841781][ T7855] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 312.921297][ T23] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 312.923280][ T5547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5547) [ 312.964650][ T23] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.213067][ T4301] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 313.683244][ T4301] usb 7-1: config 0 has no interfaces? [ 313.773323][ T4301] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.790095][ T4301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.807166][ T4301] usb 7-1: SerialNumber: syz [ 313.834253][ T4301] usb 7-1: config 0 descriptor?? [ 314.078507][ T7086] usb 7-1: USB disconnect, device number 18 [ 314.128812][ T7925] loop2: detected capacity change from 0 to 64 [ 314.252808][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 315.205139][ T7931] xt_nat: multiple ranges no longer supported [ 315.286371][ T7936] fuse: Bad value for 'user_id' [ 315.324718][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.722'. [ 315.667217][ T7944] fuse: Unknown parameter 'group_i00000000000000000000' [ 315.673395][ T5363] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 315.714650][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 315.913089][ T5363] usb 3-1: Using ep0 maxpacket: 16 [ 316.043942][ T5363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.085720][ T5363] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 316.137095][ T5363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.177397][ T5363] usb 3-1: config 0 descriptor?? [ 316.328368][ T7937] loop7: detected capacity change from 0 to 32768 [ 316.867712][ T5363] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 316.908181][ T5363] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 316.947125][ T5363] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 316.994279][ T5363] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 317.277303][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.283862][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.550682][ T7952] loop5: detected capacity change from 0 to 40427 [ 317.566863][ T7939] udc-core: couldn't find an available UDC or it's busy [ 317.599073][ T7939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 317.617010][ T7952] F2FS-fs (loop5): invalid crc value [ 317.755190][ T7952] F2FS-fs (loop5): Found nat_bits in checkpoint [ 317.898588][ T7952] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 317.912165][ T7952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 318.185357][ T5363] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 318.309642][ T7977] attempt to access beyond end of device [ 318.309642][ T7977] loop5: rw=2049, want=45104, limit=40427 [ 318.567112][ T5363] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 318.762571][ T5363] usb 3-1: USB disconnect, device number 20 [ 318.885251][ T1106] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 318.896410][ T7984] loop2: detected capacity change from 0 to 64 [ 318.915039][ T1106] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.196512][ T7988] fuse: Bad value for 'user_id' [ 319.217513][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.735'. [ 319.243503][ T1106] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 319.613512][ T1106] usb 8-1: config 0 has no interfaces? [ 319.781429][ T1106] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.795299][ T1106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.808302][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 319.817638][ T1106] usb 8-1: SerialNumber: syz [ 319.834034][ T1106] usb 8-1: config 0 descriptor?? [ 320.037636][ T7997] fuse: Unknown parameter 'group_i00000000000000000000' [ 320.065205][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 320.093248][ T1106] usb 8-1: USB disconnect, device number 8 [ 320.395003][ T8007] xt_nat: multiple ranges no longer supported [ 321.754545][ T1106] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 321.838799][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 321.993077][ T1106] usb 6-1: Using ep0 maxpacket: 16 [ 322.113251][ T1106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.132793][ T1106] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 322.159338][ T1106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.195337][ T1106] usb 6-1: config 0 descriptor?? [ 322.403276][ T8037] fuse: Bad value for 'user_id' [ 322.441679][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 322.631003][ T8024] loop7: detected capacity change from 0 to 40427 [ 322.666048][ T1106] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 322.674562][ T8039] fuse: Unknown parameter 'group_i00000000000000000000' [ 322.683027][ T8024] F2FS-fs (loop7): invalid crc value [ 322.688527][ T1106] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 322.709393][ T1106] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 322.719626][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 322.741009][ T1106] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 322.789695][ T8044] loop3: detected capacity change from 0 to 64 [ 322.793471][ T1106] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 322.804765][ T8024] F2FS-fs (loop7): Found nat_bits in checkpoint [ 322.855287][ T1106] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 322.950026][ T8024] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 322.959285][ T8024] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 322.998374][ T8047] xt_nat: multiple ranges no longer supported [ 323.071030][ T8015] udc-core: couldn't find an available UDC or it's busy [ 323.101588][ T8015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.415022][ T8056] attempt to access beyond end of device [ 323.415022][ T8056] loop7: rw=2049, want=45104, limit=40427 [ 323.956360][ T1325] usb 6-1: USB disconnect, device number 6 [ 325.687839][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 326.114162][ T1325] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 326.142894][ T1325] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 326.321691][ T8093] fuse: Unknown parameter 'group_id00000000000000000000' [ 326.358151][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 326.453068][ T5714] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 326.811000][ T8099] xt_nat: multiple ranges no longer supported [ 327.565984][ T8103] loop6: detected capacity change from 0 to 64 [ 327.727111][ T8105] fuse: Bad value for 'fd' [ 327.751723][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.761'. [ 328.046361][ T8098] loop3: detected capacity change from 0 to 40427 [ 328.053610][ T5714] usb 8-1: config 0 has no interfaces? [ 328.163488][ T4301] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 328.172818][ T5714] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.298303][ T5714] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 328.493225][ T8098] F2FS-fs (loop3): invalid crc value [ 328.508995][ T5714] usb 8-1: SerialNumber: syz [ 328.516023][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 328.547637][ T5714] usb 8-1: config 0 descriptor?? [ 328.600153][ T8098] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.786243][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.806993][ T4301] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 328.816363][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.827879][ T4301] usb 3-1: config 0 descriptor?? [ 328.864688][ T8098] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 328.881015][ T8098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 328.914262][ T1325] usb 8-1: USB disconnect, device number 9 [ 330.086887][ T8128] fuse: Unknown parameter 'group_id00000000000000000000' [ 330.106969][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 330.124421][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.776'. [ 330.246123][ T4301] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 330.268873][ T4301] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 330.293087][ T4301] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 330.306587][ T4301] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 330.323145][ T4301] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 330.341748][ T4301] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 330.649186][ T8109] udc-core: couldn't find an available UDC or it's busy [ 330.684937][ T8109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.724616][ T8109] i2c i2c-1: unsupported multi-msg i2c transaction [ 330.774103][ T4301] usb 3-1: USB disconnect, device number 21 [ 331.045833][ T8145] xt_nat: multiple ranges no longer supported [ 331.802629][ T8148] fuse: Bad value for 'fd' [ 331.880486][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.780'. [ 332.003263][ T8154] loop2: detected capacity change from 0 to 64 [ 334.261381][ T5715] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 334.282184][ T5715] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.643314][ T5714] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 334.867968][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.789'. [ 335.033265][ T5714] usb 6-1: config 0 has no interfaces? [ 335.133304][ T5714] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.160343][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.179418][ T5714] usb 6-1: SerialNumber: syz [ 335.232294][ T5714] usb 6-1: config 0 descriptor?? [ 335.492569][ T8163] loop7: detected capacity change from 0 to 40427 [ 335.537321][ T23] usb 6-1: USB disconnect, device number 7 [ 335.626593][ T8163] F2FS-fs (loop7): invalid crc value [ 335.728038][ T8163] F2FS-fs (loop7): Found nat_bits in checkpoint [ 335.774221][ T8193] fuse: Unknown parameter 'group_id00000000000000000000' [ 335.820998][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 335.862240][ T8163] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 336.007475][ T8163] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 336.244332][ T8202] xt_nat: multiple ranges no longer supported [ 336.491369][ T8204] attempt to access beyond end of device [ 336.491369][ T8204] loop7: rw=2049, want=45104, limit=40427 [ 336.721914][ T5715] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 336.845144][ T8206] fuse: Bad value for 'fd' [ 336.884394][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 336.888704][ T8208] loop5: detected capacity change from 0 to 64 [ 337.162995][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 337.297491][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.443501][ T5715] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.972853][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.210267][ T8219] udc-core: couldn't find an available UDC or it's busy [ 339.226660][ T8219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 339.253455][ T5715] usb 3-1: config 0 descriptor?? [ 339.623221][ T5715] usbhid 3-1:0.0: can't add hid device: -71 [ 339.629413][ T5715] usbhid: probe of 3-1:0.0 failed with error -71 [ 339.833134][ T5715] usb 3-1: USB disconnect, device number 22 [ 341.300310][ T1106] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 341.341451][ T1106] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.632092][ T8248] xt_nat: multiple ranges no longer supported [ 341.653082][ T1106] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 342.023256][ T1106] usb 8-1: config 0 has no interfaces? [ 342.103331][ T1106] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.116546][ T1106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.133158][ T1106] usb 8-1: SerialNumber: syz [ 342.140485][ T1106] usb 8-1: config 0 descriptor?? [ 342.636644][ T8254] xt_TCPMSS: Only works on TCP SYN packets [ 342.702082][ T8254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.838575][ T8245] loop5: detected capacity change from 0 to 40427 [ 343.899373][ T23] usb 8-1: USB disconnect, device number 10 [ 343.994673][ T8245] F2FS-fs (loop5): invalid crc value [ 344.012580][ T8257] loop7: detected capacity change from 0 to 64 [ 344.064165][ T8245] F2FS-fs (loop5): Found nat_bits in checkpoint [ 345.105027][ T8245] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 347.672984][ T1325] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 347.693500][ T23] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 347.913139][ T1325] usb 8-1: Using ep0 maxpacket: 16 [ 347.999057][ T7086] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 348.033105][ T7086] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.034235][ T1325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.088746][ T1325] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 348.113109][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.131391][ T1325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.143075][ T23] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.161287][ T1325] usb 8-1: config 0 descriptor?? [ 348.171262][ T23] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 348.191839][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.217807][ T23] usb 7-1: config 0 descriptor?? [ 348.265268][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 348.272359][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 348.311340][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 348.323115][ T7817] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 348.343468][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 348.351040][ T23] usb 7-1: media controller created [ 348.368121][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.401979][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 348.420294][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 348.475015][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 348.490182][ T8279] dvb-usb: bulk message failed: -22 (2/0) [ 348.501866][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 348.520181][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 348.562258][ T23] usb 7-1: USB disconnect, device number 19 [ 348.671994][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 348.682432][ T1325] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 348.692032][ T1325] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 348.711418][ T1325] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 348.725784][ T1325] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 348.733143][ T7817] usb 6-1: config 0 has no interfaces? [ 348.741570][ T1325] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 348.750242][ T1325] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 348.998171][ T7817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.009914][ T7817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.018300][ T7817] usb 6-1: SerialNumber: syz [ 349.049800][ T7817] usb 6-1: config 0 descriptor?? [ 349.292275][ T8280] udc-core: couldn't find an available UDC or it's busy [ 349.465562][ T8280] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 349.555049][ T7817] usb 6-1: USB disconnect, device number 8 [ 349.785949][ T8280] i2c i2c-1: unsupported multi-msg i2c transaction [ 349.831804][ T5364] usb 8-1: USB disconnect, device number 11 [ 349.843271][ T8301] device syz_tun entered promiscuous mode [ 349.888786][ T8301] device macvtap1 entered promiscuous mode [ 349.914941][ T8301] device syz_tun left promiscuous mode [ 352.699813][ T8336] xt_nat: multiple ranges no longer supported [ 353.692535][ T8343] loop2: detected capacity change from 0 to 1024 [ 353.742594][ T8343] EXT4-fs (loop2): Ignoring removed orlov option [ 353.749090][ T8343] EXT4-fs (loop2): inline encryption not supported [ 353.756743][ T8343] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 353.768759][ T8343] EXT4-fs (loop2): invalid journal inode [ 353.774766][ T8343] EXT4-fs (loop2): can't get journal size [ 353.802604][ T8343] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 354.518656][ T8348] loop5: detected capacity change from 0 to 40427 [ 354.565138][ T5364] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 354.590375][ T5364] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.624255][ T8348] F2FS-fs (loop5): invalid crc value [ 354.667407][ T8348] F2FS-fs (loop5): Found nat_bits in checkpoint [ 354.839939][ T8348] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 354.874110][ T8358] loop6: detected capacity change from 0 to 128 [ 354.892118][ T8348] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 354.906719][ T4301] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 355.105369][ T7086] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 355.783238][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 356.676117][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.897757][ T4301] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 356.943001][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.143160][ T7086] usb 4-1: config 0 has no interfaces? [ 357.177071][ T4301] usb 3-1: config 0 descriptor?? [ 357.341949][ T7086] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.351665][ T7086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.394443][ T7086] usb 4-1: SerialNumber: syz [ 357.405166][ T7086] usb 4-1: config 0 descriptor?? [ 358.263593][ T4301] usbhid 3-1:0.0: can't add hid device: -71 [ 358.269688][ T4301] usbhid: probe of 3-1:0.0 failed with error -71 [ 358.279248][ T4301] usb 3-1: USB disconnect, device number 23 [ 358.312620][ T7817] usb 4-1: USB disconnect, device number 19 [ 362.293173][ T5714] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 362.379872][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 362.558895][ T5714] usb 7-1: Using ep0 maxpacket: 16 [ 362.673722][ T4301] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 362.741660][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.766085][ T4301] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.778638][ T5714] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 362.793844][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.603901][ T5714] usb 7-1: config 0 descriptor?? [ 363.754478][ T4301] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 363.889076][ T8442] netlink: 7 bytes leftover after parsing attributes in process `syz.2.863'. [ 364.157016][ T5714] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 364.165990][ T4301] usb 6-1: config 0 has no interfaces? [ 364.173046][ T5714] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 364.181076][ T5714] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 364.189827][ T5714] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 364.199115][ T5714] mcp2221 0003:04D8:00DD.002A: unknown main item tag 0x0 [ 364.216364][ T5714] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 364.255739][ T4301] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.284414][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 364.292746][ T4301] usb 6-1: SerialNumber: syz [ 364.323561][ T4301] usb 6-1: config 0 descriptor?? [ 364.461194][ T8452] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 364.521799][ T8428] udc-core: couldn't find an available UDC or it's busy [ 364.551234][ T8428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 364.588625][ T8428] i2c i2c-1: unsupported multi-msg i2c transaction [ 364.619276][ T4301] usb 7-1: USB disconnect, device number 20 [ 365.405298][ T5714] usb 6-1: USB disconnect, device number 9 [ 365.827233][ T7086] Bluetooth: hci5: command 0x1003 tx timeout [ 365.848590][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 367.945320][ T1106] Bluetooth: hci5: command 0x1001 tx timeout [ 368.109207][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 368.552480][ T8484] tipc: Started in network mode [ 368.560196][ T8484] tipc: Node identity , cluster identity 4711 [ 368.577178][ T8484] tipc: Failed to obtain node identity [ 368.613227][ T8484] tipc: Enabling of bearer rejected, failed to enable media [ 370.487971][ T5714] Bluetooth: hci5: command 0x1009 tx timeout [ 370.701418][ T4301] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 370.993021][ T4301] usb 6-1: Using ep0 maxpacket: 16 [ 371.105641][ T8511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 371.118382][ T8511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.133662][ T8511] loop7: detected capacity change from 0 to 1 [ 371.185777][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.456547][ T4301] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 371.540595][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.844143][ T4301] usb 6-1: config 0 descriptor?? [ 371.883088][ T1106] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 371.893441][ T1106] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.123046][ T7086] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 372.378405][ T4301] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 372.523288][ T4301] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 373.233061][ T4301] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 373.292590][ T7086] usb 8-1: config 0 has no interfaces? [ 373.308648][ T4301] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 373.329160][ T4301] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0 [ 373.373456][ T7086] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.382660][ T7086] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.388426][ T4301] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 373.422134][ T7086] usb 8-1: SerialNumber: syz [ 373.428771][ T7086] usb 8-1: config 0 descriptor?? [ 373.740265][ T4301] usb 6-1: USB disconnect, device number 10 [ 374.027829][ T8528] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 374.329801][ T5714] usb 8-1: USB disconnect, device number 12 [ 375.248359][ T8541] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 376.774733][ T8556] netlink: 168 bytes leftover after parsing attributes in process `syz.6.892'. [ 377.843045][ T5714] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 378.213301][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 378.344021][ T5714] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 378.413331][ T5714] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 378.657839][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.664317][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.675676][ T5714] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 378.694008][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.704557][ T5714] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.714764][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 378.729094][ T5714] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 378.742776][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.772802][ T5714] usb 6-1: config 0 descriptor?? [ 379.699691][ T5714] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 379.768735][ T5714] usb 6-1: USB disconnect, device number 11 [ 379.799539][ T5714] usblp0: removed [ 380.313070][ T5714] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 380.573122][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 380.741087][ T5364] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 380.793336][ T5714] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 381.038655][ T5714] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 381.503669][ T5364] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.548024][ T5714] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 381.725308][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.736562][ T5714] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.746864][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 381.761129][ T5714] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 381.823157][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.863202][ T7817] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 382.276410][ T5714] usb 6-1: config 0 descriptor?? [ 382.313165][ T5714] usb 6-1: can't set config #0, error -71 [ 382.337171][ T5714] usb 6-1: USB disconnect, device number 12 [ 384.304121][ T7817] usb 8-1: config 0 has no interfaces? [ 384.673615][ T7817] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.803725][ T7817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.811949][ T7817] usb 8-1: SerialNumber: syz [ 385.243275][ T7817] usb 8-1: config 0 descriptor?? [ 385.476483][ T23] usb 8-1: USB disconnect, device number 13 [ 386.622867][ T8642] xt_nat: multiple ranges no longer supported [ 390.804799][ T23] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 390.843727][ T23] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 391.193074][ T4301] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 391.683328][ T4301] usb 3-1: config 0 has no interfaces? [ 391.853365][ T4301] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.873042][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 391.908831][ T8674] loop5: detected capacity change from 0 to 32768 [ 391.923104][ T4301] usb 3-1: SerialNumber: syz [ 391.953416][ T4301] usb 3-1: config 0 descriptor?? [ 393.529905][ T4301] usb 3-1: USB disconnect, device number 24 [ 395.284254][ T8714] loop2: detected capacity change from 0 to 1024 [ 399.812125][ T8735] input: syz1 as /devices/virtual/input/input8 [ 401.364485][ T4301] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 401.385887][ T4301] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 401.683012][ T4301] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 402.063494][ T4301] usb 7-1: config 0 has no interfaces? [ 402.092730][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.946'. [ 402.146635][ T4301] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.167254][ T4301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 402.213115][ T4301] usb 7-1: SerialNumber: syz [ 402.259826][ T4301] usb 7-1: config 0 descriptor?? [ 402.554121][ T8756] loop7: detected capacity change from 0 to 32768 [ 402.636462][ T4301] usb 7-1: USB disconnect, device number 21 [ 402.960879][ T8764] loop2: detected capacity change from 0 to 1024 [ 403.301018][ T8768] loop5: detected capacity change from 0 to 4096 [ 403.584329][ T26] audit: type=1800 audit(1769200078.703:28): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.949" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 404.001537][ T8775] loop6: detected capacity change from 0 to 4096 [ 404.225260][ T8775] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.439170][ T26] audit: type=1107 audit(1769200079.603:29): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 404.867535][ T8775] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 404.932650][ T8775] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 404.996863][ T8775] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.955: Failed to acquire dquot type 1 [ 405.083560][ T8775] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 405.120808][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 405.445762][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.962'. [ 406.300600][ T4428] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 406.308721][ T8809] fuse: Unknown parameter 'user_id00000000000000000000' [ 406.328507][ T4428] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 406.548918][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 406.654849][ T8821] ALSA: mixer_oss: invalid OSS volume '' [ 406.967235][ T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.354653][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.972'. [ 408.238594][ T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.603848][ T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.845566][ T8844] loop7: detected capacity change from 0 to 1024 [ 409.643894][ T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.741664][ T8847] fuse: Unknown parameter 'user00000000000000000000' [ 409.758410][ T8844] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 409.769630][ T8844] EXT4-fs error (device loop7): ext4_get_journal_inode:5185: inode #32: comm syz.7.977: iget: special inode unallocated [ 409.783179][ T8844] EXT4-fs (loop7): no journal found [ 409.788436][ T8844] EXT4-fs (loop7): can't get journal size [ 409.821095][ T8844] EXT4-fs (loop7): filesystem is read-only [ 409.827192][ T8844] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 410.003026][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 410.986920][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 412.324870][ T5714] Bluetooth: hci0: command 0x0409 tx timeout [ 412.459236][ T8891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.946881][ T5714] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 413.958882][ T5714] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.430488][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 414.614366][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.622117][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.632073][ T8851] device bridge_slave_0 entered promiscuous mode [ 414.704769][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.733126][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.763246][ T8851] device bridge_slave_1 entered promiscuous mode [ 414.872679][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.941730][ T8910] No such timeout policy "syz0" [ 415.090132][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.230553][ T8851] team0: Port device team_slave_0 added [ 415.293801][ T8851] team0: Port device team_slave_1 added [ 415.403590][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.411134][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.437106][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.463136][ T1325] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 415.472139][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.496316][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.700784][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.757795][ T8851] device hsr_slave_0 entered promiscuous mode [ 415.776516][ T8851] device hsr_slave_1 entered promiscuous mode [ 415.793826][ T8851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.016769][ T8851] Cannot create hsr debugfs directory [ 416.223726][ T1325] usb 4-1: config 0 has no interfaces? [ 416.615413][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 416.621886][ T1325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.631572][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.735584][ T1325] usb 4-1: SerialNumber: syz [ 416.747433][ T1325] usb 4-1: config 0 descriptor?? [ 417.060868][ T7812] usb 4-1: USB disconnect, device number 20 [ 417.370376][ T8935] fuse: Unknown parameter 'user00000000000000000000' [ 417.745098][ T8940] xt_TPROXY: Can be used only with -p tcp or -p udp [ 418.104798][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.990'. [ 418.462327][ T8851] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 418.654995][ T4301] Bluetooth: hci0: command 0x0419 tx timeout [ 418.766673][ T8950] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1000'. [ 418.960200][ T8851] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 418.994663][ T8948] wg2 speed is unknown, defaulting to 1000 [ 419.095894][ T8851] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 419.163897][ T8851] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 419.211860][ T8948] wg2 speed is unknown, defaulting to 1000 [ 419.329590][ T8948] wg2 speed is unknown, defaulting to 1000 [ 422.040322][ T8972] loop7: detected capacity change from 0 to 1024 [ 422.081670][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.159787][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.193844][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.257142][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.277858][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.307070][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.338955][ T8948] infiniband syz2: set active [ 422.352187][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.360122][ T4838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.363277][ T8948] infiniband syz2: added wg2 [ 422.393312][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.420768][ T1325] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 422.430436][ T8948] infiniband syz2: Couldn't open port 1 [ 422.455095][ T7817] wg2 speed is unknown, defaulting to 1000 [ 422.455365][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.501057][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.537325][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.545528][ T5475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.594638][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.628934][ T8948] RDS/IB: syz2: added [ 422.654011][ T8948] smc: adding ib device syz2 with port count 1 [ 422.660651][ T8948] smc: ib device syz2 port 1 has pnetid [ 422.688188][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.721249][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.764448][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.794129][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.823510][ T1325] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.837410][ T5364] wg2 speed is unknown, defaulting to 1000 [ 422.846278][ T1325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.873728][ T1325] usb 8-1: config 0 descriptor?? [ 422.886113][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.901824][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.938588][ T1325] cp210x 8-1:0.0: cp210x converter detected [ 422.959236][ T8948] wg2 speed is unknown, defaulting to 1000 [ 422.968718][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.987838][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.080247][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 423.107157][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.143975][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.360322][ T8948] wg2 speed is unknown, defaulting to 1000 [ 424.300701][ T1325] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 424.308514][ T1325] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 424.333601][ T1325] usb 8-1: cp210x converter now attached to ttyUSB0 [ 424.413414][ T1325] usb 8-1: USB disconnect, device number 14 [ 424.511966][ T8948] wg2 speed is unknown, defaulting to 1000 [ 424.561568][ T9005] loop3: detected capacity change from 0 to 2048 [ 424.662514][ T1325] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 424.672568][ T1325] cp210x 8-1:0.0: device disconnected [ 424.712205][ T9005] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 424.724243][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.731936][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.963150][ T9005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.527828][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.806945][ T8948] wg2 speed is unknown, defaulting to 1000 [ 425.961797][ T9027] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1012'. [ 426.531766][ T9039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1016'. [ 426.641670][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.661116][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.638978][ T8948] wg2 speed is unknown, defaulting to 1000 [ 428.006236][ T8851] device veth0_vlan entered promiscuous mode [ 428.078338][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.114028][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.180128][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.240345][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.644350][ T8851] device veth1_vlan entered promiscuous mode [ 428.667782][ T8948] wg2 speed is unknown, defaulting to 1000 [ 428.738775][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.823612][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.394339][ T8851] device veth0_macvtap entered promiscuous mode [ 429.647341][ T8851] device veth1_macvtap entered promiscuous mode [ 429.847667][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.016364][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.091299][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.253262][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.263491][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.012939][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.050947][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.082931][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.093756][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.141681][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.002183][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.014831][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.026628][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.184245][ T144] device hsr_slave_0 left promiscuous mode [ 432.267468][ T144] device hsr_slave_1 left promiscuous mode [ 432.401046][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.410833][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.465199][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.472839][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.480873][ T144] device bridge_slave_1 left promiscuous mode [ 432.489832][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.515885][ T144] device bridge_slave_0 left promiscuous mode [ 432.522219][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.599480][ T9088] 9pnet: Insufficient options for proto=fd [ 433.466754][ T144] device veth1_macvtap left promiscuous mode [ 433.532000][ T144] device veth0_macvtap left promiscuous mode [ 433.613884][ T144] device veth1_vlan left promiscuous mode [ 433.692410][ T144] device veth0_vlan left promiscuous mode [ 434.781226][ T144] team0 (unregistering): Port device team_slave_1 removed [ 434.867275][ T144] team0 (unregistering): Port device team_slave_0 removed [ 434.954779][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.157246][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.158988][ T144] bond0 (unregistering): Released all slaves [ 436.303844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.329877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.479768][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.492194][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.502242][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.512729][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.522782][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.533549][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.545058][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.555732][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.567303][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.677660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.699179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.739450][ T8851] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.770924][ T8851] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.800522][ T8851] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.820962][ T8851] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.069260][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.235075][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.356107][ T9134] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1038'. [ 439.095719][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.271722][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.326625][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.459296][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.096720][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.105739][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.182292][ T9169] loop8: detected capacity change from 0 to 512 [ 440.340355][ T9173] fuse: Unknown parameter '0x0000000000000004' [ 440.585175][ T9169] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.833647][ T4209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.013705][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1046'. [ 441.797303][ T9195] binder_alloc: 9193: binder_alloc_buf, no vma [ 442.800635][ T4301] Bluetooth: hci3: command 0x0406 tx timeout [ 444.163473][ T9219] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1053'. [ 445.154680][ T9217] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1055'. [ 446.493690][ T1194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.917013][ T9257] loop3: detected capacity change from 0 to 1 [ 450.763820][ T9294] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1069'. [ 452.574018][ T4549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.672393][ T9305] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1074'. [ 452.782486][ T9302] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1073'. [ 452.965167][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1078'. [ 453.086469][ T9319] fuse: Unknown parameter 'user_id00000000000000000000' [ 453.150984][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 453.395035][ T9326] loop8: detected capacity change from 0 to 1 [ 454.518540][ T9338] loop8: detected capacity change from 0 to 1024 [ 455.127827][ T9352] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1085'. [ 457.055697][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 458.024287][ T9368] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1090'. [ 458.469543][ T9381] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 459.127712][ T9385] fuse: Bad value for 'fd' [ 459.160973][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1094'. [ 460.418597][ T9406] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1099'. [ 461.197446][ T9404] loop2: detected capacity change from 0 to 1024 [ 463.097944][ T26] audit: type=1800 audit(1769200138.233:30): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1100" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 464.909530][ T9445] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1109'. [ 465.160630][ T9450] fuse: Bad value for 'fd' [ 465.211055][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1108'. [ 466.770898][ T26] audit: type=1804 audit(1769200141.933:31): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1117" name="/newroot/157/file1" dev="fuse" ino=1 res=1 errno=0 [ 468.063923][ T9493] loop8: detected capacity change from 0 to 1 [ 468.849526][ T9497] loop7: detected capacity change from 0 to 128 [ 469.151459][ T9497] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 469.265216][ T9497] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 469.360348][ T9509] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1123'. [ 469.579739][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 469.665750][ T9497] EXT4-fs (loop7): shut down requested (2) [ 469.856478][ T9497] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 469.969188][ T9519] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1125'. [ 472.094387][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.437518][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 474.853714][ T9577] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1138'. [ 476.153913][ T9594] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1141'. [ 478.526256][ T5475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.887099][ T9621] loop2: detected capacity change from 0 to 2048 [ 479.501510][ T9621] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 479.566514][ T9621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.700324][ T9621] overlayfs: conflicting options: nfs_export=on,index=off [ 479.829154][ T9643] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1153'. [ 481.687993][ T9669] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1156'. [ 481.768373][ T9670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 484.463826][ T5475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.718067][ T9705] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1167'. [ 488.485243][ T9745] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1174'. [ 489.843250][ T9767] loop7: detected capacity change from 0 to 1 [ 490.128936][ T9090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.483841][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1186'. [ 495.368500][ T5475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.415038][ T9832] loop8: detected capacity change from 0 to 1 [ 497.293672][ T9850] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1197'. [ 498.200432][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 499.007081][ T9880] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1203'. [ 501.707746][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.714198][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.724730][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.544580][ T9947] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1216'. [ 506.917955][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 507.336900][ T4427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.046350][ T9996] ODEBUG: Out of memory. ODEBUG disabled [ 508.308621][ T9975] loop3: detected capacity change from 0 to 8192 [ 508.499631][ T9975] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 511.152938][ T4721] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 511.422162][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 511.533066][ T4721] usb 8-1: Using ep0 maxpacket: 16 [ 511.683986][ T4721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.734033][ T4721] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 511.773204][ T4721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.809475][ T4721] usb 8-1: config 0 descriptor?? [ 512.428432][ T4721] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 512.437352][ T4721] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 512.444901][ T4721] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 512.452252][ T4721] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 512.459728][ T4721] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 512.467799][ T4721] mcp2221 0003:04D8:00DD.0031: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 512.817604][T10059] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 512.835895][T10058] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1238'. [ 513.278126][ T4842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.339046][T10019] udc-core: couldn't find an available UDC or it's busy [ 513.363106][T10019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.523691][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 513.523993][T10019] i2c i2c-1: unsupported multi-msg i2c transaction [ 513.698405][ T1106] usb 8-1: USB disconnect, device number 15 [ 515.503061][T10089] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1243'. [ 516.296044][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 518.912877][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.903116][ T1106] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 521.055614][T10156] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1258'. [ 521.992955][ T1106] usb 8-1: Using ep0 maxpacket: 16 [ 522.133263][ T1106] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.150759][ T1106] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 522.217764][ T1106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.108813][ T1106] usb 8-1: config 0 descriptor?? [ 524.071362][T10185] loop7: detected capacity change from 0 to 1024 [ 524.351887][ T1106] usbhid 8-1:0.0: can't add hid device: -71 [ 524.358492][ T1106] usbhid: probe of 8-1:0.0 failed with error -71 [ 524.367393][ T1106] usb 8-1: USB disconnect, device number 16 [ 524.970935][ T26] audit: type=1800 audit(1769200199.653:32): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1266" name="file1" dev="loop7" ino=2 res=0 errno=0 [ 524.990874][ T9090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.499095][T10228] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1272'. [ 530.377880][ T5085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.849014][T10281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.742234][T10310] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1289'. [ 535.762782][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1291'. [ 535.784385][ T5243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 540.591365][T10339] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1298'. [ 541.327477][ T1276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.563384][T10351] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1300'. [ 543.873315][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 546.225242][T10387] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1311'. [ 546.523572][ T26] audit: type=1326 audit(1769200221.593:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 546.946337][ T26] audit: type=1326 audit(1769200221.593:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 547.056329][ T26] audit: type=1326 audit(1769200221.593:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 547.093640][ T26] audit: type=1326 audit(1769200221.603:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 547.132323][ T26] audit: type=1326 audit(1769200221.603:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 547.248039][ T26] audit: type=1326 audit(1769200221.603:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec8d89c58e code=0x7ffc0000 [ 547.315403][ T26] audit: type=1326 audit(1769200221.603:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 547.342956][ T26] audit: type=1326 audit(1769200221.603:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 547.550274][T10401] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1312'. [ 548.589183][ T26] audit: type=1326 audit(1769200221.613:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 548.645124][ T26] audit: type=1326 audit(1769200221.643:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8d8dbcb9 code=0x7ffc0000 [ 549.014841][ T1276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.372280][T10405] loop3: detected capacity change from 0 to 4096 [ 549.426608][T10405] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 549.507758][T10405] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 549.549128][T10405] EXT4-fs (loop3): mount failed [ 550.542064][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 550.574537][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 550.613138][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 550.650810][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 550.669019][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 550.699058][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 550.802487][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 551.175423][T10427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 554.025862][T10456] loop3: detected capacity change from 0 to 1 [ 554.254688][ T5475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.630379][T10467] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1326'. [ 557.967280][T10483] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1329'. [ 558.275896][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1331'. [ 558.394441][T10487] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1333'. [ 558.820837][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'. [ 558.863846][T10490] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1334'. [ 559.338824][T10504] loop8: detected capacity change from 0 to 1 [ 560.179716][T10516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 560.516650][T10518] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1339'. [ 561.003077][ T5475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.229086][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.235464][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.253961][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1347'. [ 564.865542][T10551] loop2: detected capacity change from 0 to 1 [ 566.845630][ T4427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.958572][T10572] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1348'. [ 572.573746][ T4842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.604383][T10628] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1374'. [ 577.704194][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.147928][ T146] ================================================================== [ 578.156788][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 578.164644][ T146] Read of size 1 at addr ffff88814c4de404 by task kworker/u5:0/146 [ 578.172765][ T146] [ 578.175139][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 578.182711][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.192805][ T146] Workqueue: hci2 hci_rx_work [ 578.197534][ T146] Call Trace: [ 578.200847][ T146] [ 578.203806][ T146] dump_stack_lvl+0x188/0x250 [ 578.208779][ T146] ? show_regs_print_info+0x20/0x20 [ 578.214121][ T146] ? load_image+0x400/0x400 [ 578.218670][ T146] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 578.224185][ T146] ? mutex_lock_io_nested+0x60/0x60 [ 578.229457][ T146] print_address_description+0x60/0x2d0 [ 578.235019][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 578.240145][ T146] kasan_report+0xdf/0x130 [ 578.244598][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 578.249832][ T146] hci_le_meta_evt+0x133f/0x3c90 [ 578.254808][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 578.261106][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 578.266783][ T146] ? mark_lock+0x94/0x320 [ 578.271156][ T146] ? mutex_unlock+0x10/0x10 [ 578.275876][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 578.281910][ T146] ? lock_chain_count+0x20/0x20 [ 578.286815][ T146] ? __rwlock_init+0x140/0x140 [ 578.291619][ T146] hci_event_packet+0xe48/0x1370 [ 578.296598][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 578.301957][ T146] ? rcu_lock_release+0x20/0x20 [ 578.307002][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 578.312260][ T146] hci_rx_work+0x255/0xa10 [ 578.316707][ T146] process_one_work+0x85f/0x1010 [ 578.321671][ T146] ? worker_detach_from_pool+0x240/0x240 [ 578.327314][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 578.332905][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 578.337993][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 578.343665][ T146] ? wq_worker_running+0x97/0x170 [ 578.348713][ T146] worker_thread+0xaa6/0x1290 [ 578.353448][ T146] kthread+0x436/0x520 [ 578.357558][ T146] ? rcu_lock_release+0x20/0x20 [ 578.362549][ T146] ? kthread_blkcg+0xd0/0xd0 [ 578.367162][ T146] ret_from_fork+0x1f/0x30 [ 578.371636][ T146] [ 578.374694][ T146] [ 578.377133][ T146] Allocated by task 10671: [ 578.381552][ T146] __kasan_kmalloc+0xb5/0xf0 [ 578.386154][ T146] __alloc_skb+0x22c/0x750 [ 578.390579][ T146] vhci_write+0xbc/0x450 [ 578.394970][ T146] vfs_write+0x745/0xd60 [ 578.399831][ T146] ksys_write+0x152/0x260 [ 578.404187][ T146] do_syscall_64+0x4c/0xa0 [ 578.408615][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 578.414610][ T146] [ 578.416950][ T146] Last potentially related work creation: [ 578.422756][ T146] kasan_save_stack+0x35/0x60 [ 578.427452][ T146] kasan_record_aux_stack+0xb8/0x100 [ 578.432745][ T146] kvfree_call_rcu+0x105/0x7d0 [ 578.437603][ T146] ops_init+0x2dc/0x600 [ 578.441812][ T146] register_pernet_operations+0x2af/0x610 [ 578.447553][ T146] register_pernet_subsys+0x24/0x40 [ 578.452945][ T146] phonet_device_init+0x13/0xc0 [ 578.457907][ T146] phonet_init+0xc/0xb0 [ 578.462068][ T146] do_one_initcall+0x272/0x730 [ 578.466909][ T146] do_initcall_level+0x137/0x1f0 [ 578.471869][ T146] do_initcalls+0x4b/0x90 [ 578.476249][ T146] kernel_init_freeable+0x3e9/0x570 [ 578.481499][ T146] kernel_init+0x19/0x1b0 [ 578.486040][ T146] ret_from_fork+0x1f/0x30 [ 578.490493][ T146] [ 578.492841][ T146] The buggy address belongs to the object at ffff88814c4de000 [ 578.492841][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 578.506918][ T146] The buggy address is located 4 bytes to the right of [ 578.506918][ T146] 1024-byte region [ffff88814c4de000, ffff88814c4de400) [ 578.520813][ T146] The buggy address belongs to the page: [ 578.526473][ T146] page:ffffea0005313600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14c4d8 [ 578.536719][ T146] head:ffffea0005313600 order:3 compound_mapcount:0 compound_pincount:0 [ 578.545477][ T146] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 578.553711][ T146] raw: 057ff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 578.562326][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 578.571035][ T146] page dumped because: kasan: bad access detected [ 578.577598][ T146] page_owner tracks the page as allocated [ 578.583415][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20956388221, free_ts 0 [ 578.602092][ T146] get_page_from_freelist+0x1bbd/0x1ca0 [ 578.607660][ T146] __alloc_pages+0x1ee/0x480 [ 578.612350][ T146] alloc_page_interleave+0x24/0x1e0 [ 578.617674][ T146] new_slab+0xc0/0x4b0 [ 578.621785][ T146] ___slab_alloc+0x80a/0xdd0 [ 578.626489][ T146] __kmalloc+0x1cd/0x330 [ 578.630875][ T146] __register_sysctl_table+0xe0/0x1230 [ 578.636353][ T146] neigh_sysctl_register+0x9b0/0xa90 [ 578.641663][ T146] addrconf_sysctl_register+0xac/0x1b0 [ 578.647314][ T146] ipv6_add_dev+0xbf3/0x1190 [ 578.651932][ T146] addrconf_notify+0x66f/0xf00 [ 578.656784][ T146] call_netdevice_register_net_notifiers+0x113/0x480 [ 578.663505][ T146] register_netdevice_notifier+0x108/0x410 [ 578.669418][ T146] addrconf_init+0xf3/0x330 [ 578.673939][ T146] inet6_init+0x38d/0x680 [ 578.678306][ T146] do_one_initcall+0x272/0x730 [ 578.683092][ T146] page_owner free stack trace missing [ 578.688490][ T146] [ 578.690852][ T146] Memory state around the buggy address: [ 578.696487][ T146] ffff88814c4de300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.704809][ T146] ffff88814c4de380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 578.713212][ T146] >ffff88814c4de400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 578.721300][ T146] ^ [ 578.725397][ T146] ffff88814c4de480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 578.733552][ T146] ffff88814c4de500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 578.741634][ T146] ================================================================== [ 578.749785][ T146] Disabling lock debugging due to kernel taint [ 578.773329][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 578.781197][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 578.790157][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.800237][ T146] Workqueue: hci2 hci_rx_work [ 578.805118][ T146] Call Trace: [ 578.808442][ T146] [ 578.811386][ T146] dump_stack_lvl+0x188/0x250 [ 578.816117][ T146] ? show_regs_print_info+0x20/0x20 [ 578.821444][ T146] ? load_image+0x400/0x400 [ 578.826056][ T146] panic+0x2e5/0x810 [ 578.829965][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 578.834484][ T146] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 578.840734][ T146] ? _raw_spin_unlock+0x40/0x40 [ 578.845624][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 578.850789][ T146] check_panic_on_warn+0x80/0xa0 [ 578.855759][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 578.860872][ T146] end_report+0x6d/0xf0 [ 578.865031][ T146] kasan_report+0x102/0x130 [ 578.869767][ T146] ? hci_le_meta_evt+0x133f/0x3c90 [ 578.875001][ T146] hci_le_meta_evt+0x133f/0x3c90 [ 578.879956][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 578.886052][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 578.891701][ T146] ? mark_lock+0x94/0x320 [ 578.896160][ T146] ? mutex_unlock+0x10/0x10 [ 578.900814][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 578.907051][ T146] ? lock_chain_count+0x20/0x20 [ 578.912076][ T146] ? __rwlock_init+0x140/0x140 [ 578.916935][ T146] hci_event_packet+0xe48/0x1370 [ 578.921919][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 578.927351][ T146] ? rcu_lock_release+0x20/0x20 [ 578.932310][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 578.937792][ T146] hci_rx_work+0x255/0xa10 [ 578.942231][ T146] process_one_work+0x85f/0x1010 [ 578.947319][ T146] ? worker_detach_from_pool+0x240/0x240 [ 578.953184][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 578.958561][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 578.963679][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 578.969350][ T146] ? wq_worker_running+0x97/0x170 [ 578.974395][ T146] worker_thread+0xaa6/0x1290 [ 578.979190][ T146] kthread+0x436/0x520 [ 578.983351][ T146] ? rcu_lock_release+0x20/0x20 [ 578.988340][ T146] ? kthread_blkcg+0xd0/0xd0 [ 578.992950][ T146] ret_from_fork+0x1f/0x30 [ 578.997395][ T146] [ 579.000855][ T146] Kernel Offset: disabled [ 579.005227][ T146] Rebooting in 86400 seconds..