last executing test programs: 6m38.781561023s ago: executing program 32 (id=28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) sendmmsg$unix(r2, &(0x7f0000001700)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001680)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x40, 0x20000051}}], 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) 3m24.493030126s ago: executing program 33 (id=557): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 2m10.365750731s ago: executing program 34 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) socket(0x25, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x8000000) 2m5.041173761s ago: executing program 2 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 2m4.122977796s ago: executing program 2 (id=752): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 2m3.920799813s ago: executing program 2 (id=753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000008500000050000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) clock_getres(0x0, 0x0) 2m3.600053332s ago: executing program 2 (id=754): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) 2m3.444239582s ago: executing program 2 (id=755): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x105) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x1) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00') dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x2416, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) listen(r0, 0x2562) 2m2.53991102s ago: executing program 2 (id=757): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0xfe, 0x1222, &(0x7f00000024c0)="$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") socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioprio_set$pid(0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 2m2.075218466s ago: executing program 35 (id=757): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0xfe, 0x1222, &(0x7f00000024c0)="$eJzs3E9rXFUYB+DXSdrUxPxRa7UF6cFudHNJsnCjIEFSkA4obSO0gnBrbnTIdSbMHQIjYnTl1o0fwK24dCeIO91k42dwl41LF+qVzrTaaUeDFjtpeJ7NvMw5P+a9M8OBM8y5By9/9v72VpVt5b1oPPJKNHYipn9LkaIRt30cL7z0/Q/PXrl2/dJas7l+OaWLa1dXXkwpLZz/9q0Pv3ruu97cm18vfDMT+0tvH/y8+tP+mf2zB79ffa9VpVaV2p1eytONTqeX3yiLtNmqtrOU3iiLvCpSq10V3ZHxrbKzs9NPeXtzfnanW1RVytv9tF30U6+Tet1+yt/NW+2UZVmanw3ux8aXv9R1HVHXJ+Jk1HVdPxqz0YjHYj4WYjGW4vF4Ip6M0/FUnImn45k4O5g16b4BAAAAAAAAAAAAAAAAAADgeBl3/n/unvP/n0eMO/9/fsLNAwAAAAAAAAAAAAAAAAAAwDFx5dr1S2vN5vrllE5FlJ/ubuxuDB+H42tb0YoyiliOxfg1Bqf/h4b1yWiuL6eBpfik3LuV39vdmBrNrwxuJ3BP/uJrzfWVYT6N5mdi9s78aizG6fH51bvyFwb5U/H8hTvyWSzGj+9EJ8rYjJvZv/IfraT06uvNu17/3GAeAAAAHAdZ+tPY/XuW/d34MH/Y7wM399fLY/f303FuerLXTkTV/2A7L8uiO/HidkfDZ/Yi4og09p+LRkQcgTb+oThx6Jy5CTT2xVzEfcSnRr5IR+J9fhiLw1aOqf91XeLBuPWhz0y6DwAAAAAAAAAAAP6dB/F3wklfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//SPnJBA==") socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioprio_set$pid(0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 2m1.265948039s ago: executing program 1 (id=762): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001300040095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r4, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2m0.57002929s ago: executing program 1 (id=763): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 2m0.415531564s ago: executing program 1 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000008500000050000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) clock_getres(0x0, 0x0) 2m0.263828567s ago: executing program 1 (id=765): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) 2m0.145522689s ago: executing program 1 (id=766): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) tkill(r0, 0x33) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x1, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) 1m59.655955837s ago: executing program 0 (id=768): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r5, 0x0, 0x404c880) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)=ANY=[@ANYRES16=r4], 0x114}], 0x1}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000140)="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", 0x148) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) r11 = fcntl$dupfd(r7, 0x0, r9) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000080)={0x0, r10}) eventfd2(0x8001, 0x0) 1m59.590693035s ago: executing program 1 (id=769): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m58.000100026s ago: executing program 36 (id=769): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m57.977127381s ago: executing program 0 (id=771): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 1m55.65936955s ago: executing program 0 (id=774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000008500000050000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) clock_getres(0x0, 0x0) 1m55.394241181s ago: executing program 0 (id=775): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) 1m54.562321375s ago: executing program 0 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff08021100000008029c85c51812b449de00000000000064000100080026006c09000008000c"], 0x74}}, 0x0) 1m54.098158858s ago: executing program 0 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m53.759823181s ago: executing program 37 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m53.753361941s ago: executing program 4 (id=782): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[], 0x30) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) vmsplice(r5, &(0x7f0000000800)=[{&(0x7f0000001780)="12", 0x1}], 0x1, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x87, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x0) 1m52.261847793s ago: executing program 4 (id=783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) clock_getres(0x0, 0x0) 1m51.879983158s ago: executing program 4 (id=784): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a310000000008000340000000000800018000000000380002800800034000000000080001800000000008000340000000000800034000000000090002"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 1m50.334550924s ago: executing program 4 (id=785): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) 1m50.077875899s ago: executing program 4 (id=786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m49.319989422s ago: executing program 4 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81", 0xa}], 0x1}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r6, 0x0, 0xfffffffffffffead, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 1m49.069535468s ago: executing program 38 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81", 0xa}], 0x1}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r6, 0x0, 0xfffffffffffffead, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 1m30.677702901s ago: executing program 8 (id=789): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) tkill(r0, 0x33) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x1, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) 1m30.534502338s ago: executing program 8 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000080)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp850'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) 1m29.336287746s ago: executing program 8 (id=791): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r5, 0x0, 0x404c880) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)=ANY=[@ANYRES16=r4], 0x114}], 0x1}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000140)="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", 0x148) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) r11 = fcntl$dupfd(r7, 0x0, r9) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000080)={0x0, r10}) eventfd2(0x8001, 0x0) 1m28.194512976s ago: executing program 8 (id=793): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) 1m27.828596021s ago: executing program 8 (id=794): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m27.575920362s ago: executing program 3 (id=770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900", 0x2c}], 0x1) 1m27.376433226s ago: executing program 3 (id=795): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[], 0x30) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) vmsplice(r5, &(0x7f0000000800)=[{&(0x7f0000001780)="12", 0x1}], 0x1, 0x8) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x88, 0x0, 0x45b2b9e1636310bd, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xd0}, 0x8004) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x87, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x0) 1m27.264030822s ago: executing program 8 (id=796): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a310000000008000340000000000800018000000000380002800800034000000000080001800000000008000340000000000800034000000000090002"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 1m24.921534247s ago: executing program 39 (id=796): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a310000000008000340000000000800018000000000380002800800034000000000080001800000000008000340000000000800034000000000090002"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 1m24.888450293s ago: executing program 3 (id=799): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r5, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) 1m22.252050367s ago: executing program 3 (id=802): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) 1m21.615557399s ago: executing program 3 (id=805): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m17.435790012s ago: executing program 3 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_secret(0x80000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0x1) 1m16.698028057s ago: executing program 40 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_secret(0x80000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0x1) 47.64112241s ago: executing program 5 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) ioprio_set$uid(0x3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) 46.019790792s ago: executing program 5 (id=871): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 44.577848136s ago: executing program 5 (id=876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 42.727670981s ago: executing program 5 (id=880): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 41.651662443s ago: executing program 5 (id=882): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sg(0x0, 0x276, 0x200) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x1000, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000000) 39.57288127s ago: executing program 5 (id=885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e600000000", 0x4d}], 0x1) 38.703608544s ago: executing program 41 (id=885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b000900d3fd27dfdc224b7a020000ff09000000ffffffffffffffffffffffe7e600000000", 0x4d}], 0x1) 11.264500901s ago: executing program 6 (id=926): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) ioctl$FITRIM(r1, 0x40046f01, &(0x7f0000000500)={0x7fffffff, 0x2, 0x401}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) fsync(r0) 9.84449441s ago: executing program 7 (id=928): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mq_unlink(0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fdffffff0f0000003000078008000100050000000800020007"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000100003042abd7000000000000000040032469ee7a080904d98a5b313173001a5798a0cc0d37cc3ad2be4c82c2e78881f7dc2fe3fdd4482264fec8d112478c35f168cc084022576e03356ed78ebdafdd0d04b6342b142c84a3d08669185a828c61225349aa3fa36d954", @ANYRES32=0x0, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004850) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='net_prio.prioidx\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) 8.691666259s ago: executing program 7 (id=930): fanotify_init(0x8, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 8.425684548s ago: executing program 7 (id=931): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.164453789s ago: executing program 6 (id=932): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 7.602927967s ago: executing program 7 (id=934): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500a51cec5e2d137c85000005000000bf91000000000000b702e300000000008500000084000000b70000000001000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5384b9927ce1a186, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0xc0, 0x30, 0x25, 0x0, 0x0, {}, [{0xac, 0x1, [@m_pedit={0xa8, 0x1, 0x0, 0x0, {{0xa}, {0x7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003", @ANYRES32], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.17283911s ago: executing program 6 (id=935): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r6, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) 6.353235616s ago: executing program 9 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r3, 0x5}, &(0x7f0000000080)=0x8) 5.511351811s ago: executing program 9 (id=937): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x105) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x1) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000340)='sessionid\x00') dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x2416, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) tee(r2, 0xffffffffffffffff, 0x2386, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) listen(r0, 0x2562) 5.235943861s ago: executing program 7 (id=938): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.480478142s ago: executing program 9 (id=939): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mq_unlink(0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fdffffff0f0000003000078008000100050000000800020007"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000100003042abd7000000000000000040032469ee7a080904d98a5b313173001a5798a0cc0d37cc3ad2be4c82c2e78881f7dc2fe3fdd4482264fec8d112478c35f168cc084022576e03356ed78ebdafdd0d04b6342b142c84a3d08669185a828c61225349aa3fa36d954", @ANYRES32=0x0, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004850) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='net_prio.prioidx\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) 3.175470876s ago: executing program 9 (id=940): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x20, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 3.175165998s ago: executing program 6 (id=941): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 3.120074285s ago: executing program 7 (id=942): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd4}}, 0x20000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) 2.979931791s ago: executing program 6 (id=943): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.453941297s ago: executing program 9 (id=944): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@jqfmt_vfsv0}, {@nouid32}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, 0xff000000, 0xff000000, 0xe, 0x0, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0xffff, 0x80da, 0xfff9, 0x1, 0xf6, 'veth0_to_hsr\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@multicast1, @empty, 0xffffff00, 0xff, 0xc, 0xb, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x2, 0x4, 0x0, 0xf1c, 0x0, 0xfff9, 'vcan0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0xffffffffffffffff}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x7, {0x7}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x37d, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000e40)) connect$inet(0xffffffffffffffff, 0x0, 0xfffffca4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) 2.171658599s ago: executing program 6 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10112, &(0x7f0000000040)=ANY=[@ANYRES8], 0x1, 0x5a12, &(0x7f00000079c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000240)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@delalloc}]}, 0x1, 0x429, &(0x7f0000000740)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) 0s ago: executing program 9 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x122) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x800000000000001) kernel console output (not intermixed with test programs): ter 4 [ 277.884716][ T975] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 277.894950][ T975] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 277.944826][ T975] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 277.984888][ T975] usb 6-1: USB disconnect, device number 4 [ 278.019185][ T7528] loop1: detected capacity change from 0 to 512 [ 278.169199][ T7528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.259978][ T7533] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.316332][ T7528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.349392][ T30] audit: type=1800 audit(1749656853.529:22): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.416" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 278.429173][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.418'. [ 278.491166][ T7528] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.520487][ T30] audit: type=1800 audit(1749656854.699:23): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.417" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 281.366924][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.576917][ T7561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 283.084772][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.429'. [ 283.896565][ T7565] loop4: detected capacity change from 0 to 131072 [ 283.964544][ T7565] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 283.972717][ T7565] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 283.989523][ T7565] F2FS-fs (loop4): invalid crc value [ 284.122549][ T7565] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 284.129703][ T7565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 284.187214][ T7582] ntfs3(nullb0): Primary boot signature is not NTFS. [ 284.197592][ T7582] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 284.699484][ T7581] loop6: detected capacity change from 0 to 512 [ 285.817087][ T7581] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.986137][ T7591] loop2: detected capacity change from 0 to 8 [ 286.088352][ T7591] squashfs: Unknown parameter 'ma}d' [ 286.312331][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 287.295957][ T7599] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 287.906414][ T6115] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 288.088690][ T7605] netlink: zone id is out of range [ 288.126117][ T7605] netlink: zone id is out of range [ 288.174988][ T7605] netlink: zone id is out of range [ 288.274793][ T7605] netlink: set zone limit has 4 unknown bytes [ 288.710031][ T7612] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 289.145881][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 292.326551][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 292.620026][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 293.465935][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.676551][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 293.714870][ T5939] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.745008][ T5939] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.781086][ T5939] usb 6-1: config 0 interface 0 has no altsetting 0 [ 293.814881][ T5939] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 293.844946][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.949460][ T5939] usb 6-1: config 0 descriptor?? [ 294.334495][ C0] hrtimer: interrupt took 78440 ns [ 294.784829][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 294.801661][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 294.882763][ T5939] usb 6-1: USB disconnect, device number 5 [ 295.454596][ T5908] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 296.238212][ T5908] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.294736][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.308850][ T7676] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.468'. [ 296.346483][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.439'. [ 296.355928][ T5908] usb 3-1: Product: syz [ 296.372169][ T7676] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.468'. [ 296.374969][ T5908] usb 3-1: Manufacturer: syz [ 296.422098][ T5908] usb 3-1: SerialNumber: syz [ 296.433327][ T7676] netlink: 584 bytes leftover after parsing attributes in process `syz.5.468'. [ 296.452023][ T5908] usb 3-1: config 0 descriptor?? [ 296.666640][ T7684] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.469'. [ 296.677932][ T7683] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.469'. [ 296.684638][ T5814] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 297.087544][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.174398][ T5814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.259374][ T5908] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.294726][ T5814] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.364580][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.372688][ T5814] usb 6-1: SerialNumber: syz [ 297.465561][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 297.728829][ T5814] usb 6-1: 0:2 : does not exist [ 297.774870][ T5814] usb 6-1: unit 255 not found! [ 297.859491][ T5814] usb 6-1: USB disconnect, device number 6 [ 297.969210][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.072289][ T7697] siw: device registration error -23 [ 298.823345][ T7711] loop6: detected capacity change from 0 to 512 [ 298.891156][ T7711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.089321][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.485'. [ 299.802414][ T7711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.048442][ T7711] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.245205][ T30] audit: type=1800 audit(1749656875.419:24): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.481" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 300.279590][ T7730] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.487'. [ 300.310794][ T7728] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.487'. [ 300.314168][ T5908] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 300.771963][ T5908] usb 3-1: USB disconnect, device number 4 [ 301.350066][ T6115] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.834713][ T5814] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 302.911310][ T7755] loop4: detected capacity change from 0 to 8 [ 303.337181][ T7755] SQUASHFS error: lzo decompression failed, data probably corrupt [ 303.381646][ T7755] SQUASHFS error: Failed to read block 0x91: -5 [ 303.442648][ T7755] SQUASHFS error: Unable to read metadata cache entry [8f] [ 303.457687][ T7758] siw: device registration error -23 [ 303.470025][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.483515][ T7755] SQUASHFS error: Unable to read inode 0x11f [ 303.494584][ T5814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.557709][ T5814] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.567311][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.575463][ T5814] usb 6-1: SerialNumber: syz [ 304.819186][ T7766] siw: device registration error -23 [ 304.873670][ T5814] usb 6-1: 0:2 : does not exist [ 304.945552][ T5814] usb 6-1: unit 255 not found! [ 305.040530][ T5814] usb 6-1: USB disconnect, device number 7 [ 305.980974][ T7769] loop1: detected capacity change from 0 to 131072 [ 305.990414][ T7771] siw: device registration error -23 [ 306.058795][ T7769] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 306.067062][ T7769] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 306.078399][ T7769] F2FS-fs (loop1): invalid crc value [ 306.115854][ T7772] loop6: detected capacity change from 0 to 64 [ 306.274752][ T7769] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 306.281892][ T7769] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 306.349947][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.534355][ T7781] __nla_validate_parse: 1 callbacks suppressed [ 306.534398][ T7781] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.503'. [ 306.712913][ T7780] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.503'. [ 309.177629][ T7794] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.506'. [ 310.781165][ T7802] loop6: detected capacity change from 0 to 131072 [ 310.789418][ T7802] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 310.797642][ T7802] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 310.809560][ T7802] F2FS-fs (loop6): invalid crc value [ 310.996579][ T7802] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 311.003720][ T7802] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 312.058803][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 312.255261][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 312.278253][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.346050][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.391127][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.191369][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 313.500384][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.635774][ T9] usb 6-1: config 0 descriptor?? [ 314.754549][ T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 314.775580][ T9] apple 0003:05AC:0247.0004: unexpected long global item [ 314.835981][ T9] apple 0003:05AC:0247.0004: parse failed [ 314.874609][ T9] apple 0003:05AC:0247.0004: probe with driver apple failed with error -22 [ 314.967272][ T9] usb 6-1: USB disconnect, device number 8 [ 315.005353][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 315.020748][ T975] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 315.056656][ T975] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 315.058505][ T7836] netlink: 60 bytes leftover after parsing attributes in process `syz.0.524'. [ 315.071904][ T975] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 315.104178][ T975] usb 2-1: Product: syz [ 315.130046][ T975] usb 2-1: Manufacturer: syz [ 315.167336][ T975] hub 2-1:4.0: bad descriptor, ignoring hub [ 315.214992][ T975] hub 2-1:4.0: probe with driver hub failed with error -5 [ 316.554330][ T7830] loop1: detected capacity change from 0 to 128 [ 317.597389][ T7856] loop2: detected capacity change from 0 to 64 [ 318.334837][ T5908] usb 2-1: USB disconnect, device number 5 [ 319.811163][ T7864] netlink: 'syz.5.530': attribute type 3 has an invalid length. [ 319.938240][ T7864] loop5: detected capacity change from 0 to 64 [ 320.192222][ T7864] MINIX-fs: bad superblock [ 323.903104][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 324.073637][ T7899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.542'. [ 324.570897][ T7909] siw: device registration error -23 [ 326.794873][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.877013][ T7926] netlink: 'syz.0.549': attribute type 3 has an invalid length. [ 328.320495][ T7937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.555'. [ 328.812623][ T7940] Zero length message leads to an empty skb [ 328.869936][ T7939] netlink: 'syz.2.554': attribute type 29 has an invalid length. [ 328.878625][ T7939] netlink: 'syz.2.554': attribute type 3 has an invalid length. [ 328.886414][ T7939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.554'. [ 328.935522][ T7917] loop1: detected capacity change from 0 to 64 [ 329.793844][ T6278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.117142][ T7947] loop2: detected capacity change from 0 to 8 [ 330.310553][ T7947] SQUASHFS error: lzo decompression failed, data probably corrupt [ 330.320726][ T7947] SQUASHFS error: Failed to read block 0x91: -5 [ 330.327411][ T7947] SQUASHFS error: Unable to read metadata cache entry [8f] [ 330.338722][ T7947] SQUASHFS error: Unable to read inode 0x11f [ 330.691251][ T6278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.895885][ T6278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.235304][ T6278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.525754][ T7962] siw: device registration error -23 [ 332.853185][ T7966] loop4: detected capacity change from 0 to 2048 [ 333.110317][ T7969] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.164548][ T30] audit: type=1800 audit(1749656908.339:25): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 333.349387][ T6278] bridge_slave_1: left allmulticast mode [ 333.534537][ T6278] bridge_slave_1: left promiscuous mode [ 333.574792][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.921795][ T5975] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 333.966914][ T6278] bridge_slave_0: left allmulticast mode [ 333.972707][ T6278] bridge_slave_0: left promiscuous mode [ 334.079905][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.133598][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.571'. [ 334.206910][ T5975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.251075][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.300197][ T5975] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.322810][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.350726][ T5975] usb 3-1: SerialNumber: syz [ 334.589918][ T5975] usb 3-1: 0:2 : does not exist [ 334.598262][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.572'. [ 334.721646][ T7995] loop6: detected capacity change from 0 to 8 [ 334.875173][ T5975] usb 3-1: unit 255 not found! [ 334.896955][ T7995] SQUASHFS error: lzo decompression failed, data probably corrupt [ 334.907082][ T7995] SQUASHFS error: Failed to read block 0x91: -5 [ 334.913772][ T7995] SQUASHFS error: Unable to read metadata cache entry [8f] [ 334.922905][ T7995] SQUASHFS error: Unable to read inode 0x11f [ 335.199322][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.216539][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.239398][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.249219][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.258681][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.284577][ T5975] usb 3-1: USB disconnect, device number 5 [ 335.411213][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.363641][ T6278] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 336.805199][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.819727][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.832107][ T6278] bond0 (unregistering): Released all slaves [ 336.855675][ T6278] bond1 (unregistering): (slave bond2): Releasing backup interface [ 336.865573][ T6278] bond1 (unregistering): Released all slaves [ 336.980586][ T6278] bond2 (unregistering): Released all slaves [ 337.325694][ T5149] Bluetooth: hci4: command tx timeout [ 337.425754][ T8010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.575'. [ 337.506322][ T7996] lo speed is unknown, defaulting to 1000 [ 338.013963][ T8032] siw: device registration error -23 [ 338.102306][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 338.443608][ T8043] loop1: detected capacity change from 0 to 8 [ 338.600388][ T8043] SQUASHFS error: lzo decompression failed, data probably corrupt [ 338.609399][ T8043] SQUASHFS error: Failed to read block 0x91: -5 [ 338.616051][ T8043] SQUASHFS error: Unable to read metadata cache entry [8f] [ 338.623531][ T8043] SQUASHFS error: Unable to read inode 0x11f [ 339.111970][ T8048] netlink: 'syz.2.591': attribute type 29 has an invalid length. [ 339.120876][ T8048] netlink: 'syz.2.591': attribute type 3 has an invalid length. [ 339.130270][ T8048] netlink: 76 bytes leftover after parsing attributes in process `syz.2.591'. [ 339.590180][ T5149] Bluetooth: hci4: command tx timeout [ 339.616750][ T8030] loop4: detected capacity change from 0 to 8192 [ 340.024870][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 341.164936][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 341.266412][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 341.506994][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.600647][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 341.628153][ T5149] Bluetooth: hci4: command tx timeout [ 341.651442][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.670619][ T5916] usb 1-1: Product: syz [ 341.676589][ T5916] usb 1-1: Manufacturer: syz [ 341.681230][ T5916] usb 1-1: SerialNumber: syz [ 341.691128][ T5916] usb 1-1: config 0 descriptor?? [ 341.697964][ T8063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 341.725357][ T5916] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 341.773749][ T5916] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 341.904877][ T5916] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 341.920026][ T5916] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 341.951621][ T5916] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 341.980306][ T5916] em28xx 1-1:0.0: No AC97 audio processor [ 342.018917][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 342.019389][ T6278] hsr_slave_0: left promiscuous mode [ 342.135493][ T6278] hsr_slave_1: left promiscuous mode [ 342.144379][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.162312][ T5916] usb 1-1: USB disconnect, device number 8 [ 342.184343][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.201709][ T5916] em28xx 1-1:0.0: Disconnecting em28xx [ 342.266733][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.268558][ T5916] em28xx 1-1:0.0: Freeing device [ 342.302937][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.390974][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 342.412706][ T6278] veth1_macvtap: left promiscuous mode [ 342.446373][ T6278] veth0_macvtap: left promiscuous mode [ 342.463961][ T6278] veth1_vlan: left promiscuous mode [ 342.515382][ T6278] veth0_vlan: left promiscuous mode [ 342.604540][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 342.630743][ T5908] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.650788][ T5908] usb 3-1: config 0 has no interface number 0 [ 342.685942][ T5908] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 342.827079][ T8075] loop6: detected capacity change from 0 to 40427 [ 343.016850][ T8075] F2FS-fs (loop6): build fault injection rate: 690 [ 343.031163][ T8075] F2FS-fs (loop6): invalid crc value [ 343.149196][ T8075] F2FS-fs (loop6): Start checkpoint disabled! [ 343.183299][ T8075] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 343.490425][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.514533][ T5908] usb 3-1: Product: syz [ 343.518786][ T5908] usb 3-1: Manufacturer: syz [ 343.526196][ T5908] usb 3-1: SerialNumber: syz [ 343.772409][ T5149] Bluetooth: hci4: command tx timeout [ 343.778450][ T5908] usb 3-1: config 0 descriptor?? [ 343.799018][ T5908] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 343.823440][ T5908] usb 3-1: selecting invalid altsetting 1 [ 344.854783][ T5908] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 344.883668][ T5908] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 345.100677][ T5908] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 345.124613][ T5908] usb 3-1: media controller created [ 345.268119][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.405079][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 345.620333][ T8091] netlink: 'syz.4.606': attribute type 29 has an invalid length. [ 345.629368][ T8091] netlink: 'syz.4.606': attribute type 3 has an invalid length. [ 345.638580][ T8091] netlink: 76 bytes leftover after parsing attributes in process `syz.4.606'. [ 346.444597][ T5908] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 346.451777][ T5908] zl10353_read_register: readreg error (reg=127, ret==-110) [ 347.744676][ T6047] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 347.934691][ T6047] usb 7-1: Using ep0 maxpacket: 16 [ 348.056590][ T6047] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 348.088871][ T6047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.144051][ T6047] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.165829][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.173885][ T6047] usb 7-1: Product: syz [ 348.208654][ T6047] usb 7-1: Manufacturer: syz [ 348.220007][ T6047] usb 7-1: SerialNumber: syz [ 348.233870][ T6047] usb 7-1: config 0 descriptor?? [ 348.255147][ T6047] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 349.071778][ T6047] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 349.293678][ T6047] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 349.325642][ T6047] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 349.776890][ T6047] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 349.808008][ T6047] em28xx 7-1:0.0: No AC97 audio processor [ 350.877754][ T6022] usb 7-1: USB disconnect, device number 4 [ 350.886856][ T6022] em28xx 7-1:0.0: Disconnecting em28xx [ 350.897395][ T6022] em28xx 7-1:0.0: Freeing device [ 352.173077][ T8136] loop6: detected capacity change from 0 to 32768 [ 352.199344][ T8136] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.619 (8136) [ 352.222507][ T8136] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 352.232782][ T8136] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 352.241685][ T8136] BTRFS info (device loop6): using free-space-tree [ 353.587016][ T6115] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 355.115872][ T8066] batman_adv: batadv0: Removing interface: team0 [ 355.280338][ T8179] loop6: detected capacity change from 0 to 8 [ 355.287740][ T8179] squashfs: Unknown parameter '8' [ 355.909817][ T8066] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 355.961884][ T8066] team0 (unregistering): Port device team_slave_0 removed [ 356.020679][ T8066] team0 (unregistering): Failed to send options change via netlink (err -105) [ 356.045757][ T8066] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 356.089295][ T8066] team0 (unregistering): Port device team_slave_1 removed [ 356.189957][ T8123] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.615'. [ 356.204561][ T5939] lo speed is unknown, defaulting to 1000 [ 356.210576][ T5939] infiniband syz0: ib_query_port failed (-19) [ 356.414800][ T5915] usb 3-1: USB disconnect, device number 6 [ 356.454944][ T5916] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 356.630911][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 356.664744][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 356.701980][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 356.929995][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 356.945417][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 356.957394][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.991811][ T5916] usb 1-1: Product: syz [ 358.012435][ T5916] usb 1-1: Manufacturer: syz [ 358.036383][ T5916] usb 1-1: SerialNumber: syz [ 358.268148][ T5916] usb 1-1: config 0 descriptor?? [ 358.302881][ T5916] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 358.376014][ T5916] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 359.252995][ T5916] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 359.275020][ T5916] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 359.748633][ T5916] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 359.790549][ T5916] em28xx 1-1:0.0: No AC97 audio processor [ 359.962599][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.995563][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.033867][ T7996] bridge_slave_0: entered allmulticast mode [ 360.083028][ T7996] bridge_slave_0: entered promiscuous mode [ 360.139726][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.152875][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.147154][ T7996] bridge_slave_1: entered allmulticast mode [ 361.186729][ T7996] bridge_slave_1: entered promiscuous mode [ 361.465977][ T975] usb 1-1: USB disconnect, device number 9 [ 361.529205][ T975] em28xx 1-1:0.0: Disconnecting em28xx [ 361.578927][ T975] em28xx 1-1:0.0: Freeing device [ 362.927505][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.941559][ T8232] loop2: detected capacity change from 0 to 8 [ 362.953271][ T8232] SQUASHFS error: lzo decompression failed, data probably corrupt [ 362.961191][ T8232] SQUASHFS error: Failed to read block 0x91: -5 [ 362.967573][ T8232] SQUASHFS error: Unable to read metadata cache entry [8f] [ 362.974829][ T8232] SQUASHFS error: Unable to read inode 0x11f [ 363.147040][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.520007][ T8239] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.644'. [ 364.569741][ T7996] team0: Port device team_slave_0 added [ 364.661845][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 364.672452][ T7996] team0: Port device team_slave_1 added [ 365.032353][ T8253] loop1: detected capacity change from 0 to 2048 [ 365.048044][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.089971][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.433357][ T8262] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.533385][ T7996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.564830][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 365.573593][ T30] audit: type=1800 audit(1749656940.749:26): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.652" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 365.898468][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.921486][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.021548][ T7996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.112105][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 367.214600][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 367.578546][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.648578][ T5939] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.674509][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.712068][ T5939] usb 3-1: Product: syz [ 367.755527][ T5939] usb 3-1: Manufacturer: syz [ 367.824852][ T5939] usb 3-1: SerialNumber: syz [ 368.687324][ T5939] usb 3-1: config 0 descriptor?? [ 370.274889][ T5939] usb 3-1: can't set config #0, error -71 [ 370.324820][ T5939] usb 3-1: USB disconnect, device number 7 [ 370.416074][ T7996] hsr_slave_0: entered promiscuous mode [ 370.465922][ T7996] hsr_slave_1: entered promiscuous mode [ 370.984314][ T8298] loop1: detected capacity change from 0 to 64 [ 372.152028][ T8300] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.666'. [ 372.390302][ T8289] loop2: detected capacity change from 0 to 8192 [ 372.415532][ T8299] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.666'. [ 372.813521][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.667'. [ 373.217579][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 375.929563][ T8326] loop4: detected capacity change from 0 to 2048 [ 376.037319][ T8335] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.131782][ T30] audit: type=1800 audit(1749656951.289:27): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.676" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 377.331203][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 377.484614][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 377.491962][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 377.503720][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 377.517614][ T5908] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.111633][ T8344] loop6: detected capacity change from 0 to 64 [ 378.155393][ T7996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 378.181293][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.196259][ T5908] usb 3-1: Product: syz [ 378.201201][ T5908] usb 3-1: Manufacturer: syz [ 378.207054][ T5908] usb 3-1: SerialNumber: syz [ 378.233334][ T5908] usb 3-1: config 0 descriptor?? [ 378.387167][ T7996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 378.470492][ T5908] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.524097][ T7996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 378.535316][ T5908] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 378.631230][ T7996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 378.909087][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 379.035456][ T5908] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 379.054863][ T5908] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 379.085419][ T5908] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 379.114611][ T5908] em28xx 3-1:0.0: No AC97 audio processor [ 379.173850][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.289330][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.591289][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.598936][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.332499][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.339868][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.548514][ T8366] loop4: detected capacity change from 0 to 8192 [ 380.578200][ T5908] usb 3-1: USB disconnect, device number 8 [ 380.625162][ T5908] em28xx 3-1:0.0: Disconnecting em28xx [ 380.704621][ T5908] em28xx 3-1:0.0: Freeing device [ 383.163144][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.414786][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 384.146568][ T8416] netlink: 'syz.4.696': attribute type 29 has an invalid length. [ 384.154403][ T8416] netlink: 'syz.4.696': attribute type 3 has an invalid length. [ 384.162166][ T8416] netlink: 76 bytes leftover after parsing attributes in process `syz.4.696'. [ 384.564803][ T5908] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 384.898588][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 384.975043][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 385.034564][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.087416][ T5908] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.101099][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.149957][ T5908] usb 7-1: Product: syz [ 385.154249][ T5908] usb 7-1: Manufacturer: syz [ 385.184719][ T5908] usb 7-1: SerialNumber: syz [ 385.199919][ T5908] usb 7-1: config 0 descriptor?? [ 385.221290][ T5908] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.258233][ T5908] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 385.651556][ T8435] loop2: detected capacity change from 0 to 8192 [ 388.077392][ T5908] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 388.086376][ T5908] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 388.097890][ T5908] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 388.113911][ T5908] em28xx 7-1:0.0: No AC97 audio processor [ 388.208218][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.727486][ T975] usb 7-1: USB disconnect, device number 5 [ 388.746890][ T975] em28xx 7-1:0.0: Disconnecting em28xx [ 388.785230][ T975] em28xx 7-1:0.0: Freeing device [ 389.323248][ T7996] veth0_vlan: entered promiscuous mode [ 389.418270][ T7996] veth1_vlan: entered promiscuous mode [ 389.424764][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'. [ 390.148533][ T8474] netlink: 'syz.6.717': attribute type 29 has an invalid length. [ 390.156504][ T8474] netlink: 'syz.6.717': attribute type 3 has an invalid length. [ 390.164190][ T8474] netlink: 76 bytes leftover after parsing attributes in process `syz.6.717'. [ 394.752803][ T7996] veth0_macvtap: entered promiscuous mode [ 394.764047][ T7996] veth1_macvtap: entered promiscuous mode [ 394.823032][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.056733][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.068498][ T7996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.078150][ T7996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.087093][ T7996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.061077][ T7996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.054561][ T975] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.264666][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 401.282344][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 401.303088][ T8511] loop4: detected capacity change from 0 to 8192 [ 401.316994][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.370579][ T975] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.434838][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.460092][ T8522] netlink: 'syz.1.729': attribute type 10 has an invalid length. [ 402.086066][ T975] usb 3-1: Product: syz [ 402.090331][ T975] usb 3-1: Manufacturer: syz [ 402.102949][ T975] usb 3-1: SerialNumber: syz [ 402.125701][ T975] usb 3-1: config 0 descriptor?? [ 402.270576][ T975] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 402.514833][ T975] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 402.548353][ T8522] batman_adv: batadv0: Adding interface: team0 [ 402.559775][ T8526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 402.571196][ T8522] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.596412][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.685025][ T8522] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 402.808876][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.820840][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.829204][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.866909][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.877291][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.928315][ T975] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 402.937218][ T975] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 403.100809][ T8533] loop1: detected capacity change from 0 to 2048 [ 403.280421][ T8536] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.333038][ T30] audit: type=1800 audit(1749656978.509:28): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.732" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 403.563232][ T975] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 404.141280][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.160125][ T975] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 404.627767][ T975] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 404.682440][ T975] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 404.716946][ T975] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 404.731697][ T975] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 404.778131][ T975] usb 3-1: USB disconnect, device number 9 [ 404.904558][ T5149] Bluetooth: hci0: command tx timeout [ 404.976658][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.484729][ T5814] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 405.662454][ T8557] loop4: detected capacity change from 0 to 64 [ 406.406384][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.414824][ T5814] usb 1-1: device descriptor read/64, error -71 [ 406.657218][ T5814] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 406.725346][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.809886][ T5814] usb 1-1: device descriptor read/64, error -71 [ 406.893390][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.908376][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.918041][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.930308][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.940688][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.955385][ T5814] usb usb1-port1: attempt power cycle [ 406.984588][ T5852] Bluetooth: hci0: command tx timeout [ 407.344856][ T5814] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 407.368304][ T5814] usb 1-1: device descriptor read/8, error -71 [ 407.504852][ T8574] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 407.715669][ T5814] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 407.749740][ T5814] usb 1-1: device descriptor read/8, error -71 [ 407.908023][ T8574] batman_adv: batadv0: Adding interface: team0 [ 407.910888][ T5814] usb usb1-port1: unable to enumerate USB device [ 407.914724][ T8574] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.990933][ T8574] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 408.047509][ T8578] loop2: detected capacity change from 0 to 8192 [ 408.643501][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 408.984648][ T5852] Bluetooth: hci4: command tx timeout [ 409.064634][ T5852] Bluetooth: hci0: command tx timeout [ 409.645336][ T8582] loop4: detected capacity change from 0 to 131072 [ 409.677028][ T8582] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 409.685207][ T8582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 409.715013][ T8582] F2FS-fs (loop4): invalid crc value [ 409.906989][ T8582] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 409.914113][ T8582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 410.026040][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.746'. [ 410.379475][ T13] bridge_slave_1: left allmulticast mode [ 410.453072][ T13] bridge_slave_1: left promiscuous mode [ 410.564975][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.059010][ T13] bridge_slave_0: left allmulticast mode [ 411.075259][ T5852] Bluetooth: hci4: command tx timeout [ 411.109130][ T13] bridge_slave_0: left promiscuous mode [ 411.129476][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.146324][ T5852] Bluetooth: hci0: command tx timeout [ 411.171996][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 411.334619][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 411.529051][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 411.554348][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 411.575887][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 411.620605][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 411.633723][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.645625][ T9] usb 2-1: Product: syz [ 411.649858][ T9] usb 2-1: Manufacturer: syz [ 411.654918][ T9] usb 2-1: SerialNumber: syz [ 411.685271][ T9] usb 2-1: config 0 descriptor?? [ 411.717694][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 411.746581][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 412.269880][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.279802][ T13] bond_slave_0: left promiscuous mode [ 412.290381][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.302230][ T13] bond_slave_1: left promiscuous mode [ 412.318175][ T13] bond0 (unregistering): Released all slaves [ 412.324422][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 412.331729][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 412.717633][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.725402][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.732693][ T8530] bridge_slave_0: entered allmulticast mode [ 412.741136][ T8530] bridge_slave_0: entered promiscuous mode [ 412.751177][ T5908] infiniband syz1: ib_query_port failed (-19) [ 412.752543][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.774903][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.782254][ T8530] bridge_slave_1: entered allmulticast mode [ 412.790547][ T8530] bridge_slave_1: entered promiscuous mode [ 412.935003][ T5814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 412.949504][ T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 413.097609][ T5814] usb 1-1: device descriptor read/64, error -71 [ 413.133650][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 413.159504][ T5852] Bluetooth: hci4: command tx timeout [ 413.171508][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 413.181303][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 413.189340][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 413.209042][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.219165][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 413.230820][ T9] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 413.254904][ T9] usb 2-1: USB disconnect, device number 6 [ 413.311235][ T13] hsr_slave_0: left promiscuous mode [ 413.324987][ T13] hsr_slave_1: left promiscuous mode [ 413.331142][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.344618][ T5814] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 413.360212][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.394998][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.402472][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.442176][ T8623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.759'. [ 413.461074][ T13] veth1_macvtap: left promiscuous mode [ 413.473787][ T13] veth0_macvtap: left promiscuous mode [ 413.484142][ T13] veth1_vlan: left promiscuous mode [ 413.494057][ T13] veth0_vlan: left promiscuous mode [ 413.504800][ T5814] usb 1-1: device descriptor read/64, error -71 [ 413.616760][ T5814] usb usb1-port1: attempt power cycle [ 413.908853][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.921660][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.930189][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.940788][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.948894][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.985148][ T5814] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 414.075202][ T5814] usb 1-1: device descriptor read/8, error -71 [ 414.775739][ T5814] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 414.821392][ T13] team0 (unregistering): Port device team_slave_1 removed [ 414.859464][ T5814] usb 1-1: device descriptor read/8, error -71 [ 414.942005][ T13] team0 (unregistering): Port device team_slave_0 removed [ 414.982727][ T5814] usb usb1-port1: unable to enumerate USB device [ 415.238653][ T5149] Bluetooth: hci4: command tx timeout [ 415.569935][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.848026][ T8530] team0: Port device team_slave_0 added [ 416.019253][ T8650] netlink: 'syz.0.768': attribute type 29 has an invalid length. [ 416.028098][ T8650] netlink: 'syz.0.768': attribute type 3 has an invalid length. [ 416.036839][ T8650] netlink: 76 bytes leftover after parsing attributes in process `syz.0.768'. [ 416.146642][ T5149] Bluetooth: hci1: command tx timeout [ 416.638670][ T8530] team0: Port device team_slave_1 added [ 417.071614][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.105583][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.144699][ T8564] bridge_slave_0: entered allmulticast mode [ 417.216128][ T8564] bridge_slave_0: entered promiscuous mode [ 417.231277][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.254845][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.262167][ T8564] bridge_slave_1: entered allmulticast mode [ 417.312605][ T8564] bridge_slave_1: entered promiscuous mode [ 417.332893][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.359062][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.384997][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.425900][ T8530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.467048][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.484970][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.564780][ T8530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.579016][ T8658] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.771'. [ 417.604677][ T8658] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.771'. [ 417.626807][ T8658] netlink: 584 bytes leftover after parsing attributes in process `syz.0.771'. [ 417.905431][ T5908] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 418.107209][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.216892][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.264826][ T5149] Bluetooth: hci1: command tx timeout [ 418.267810][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.382994][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.462979][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.550600][ T5908] usb 1-1: SerialNumber: syz [ 418.782809][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.885410][ T8662] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 419.015699][ T5908] usb 1-1: 0:2 : does not exist [ 419.020661][ T5908] usb 1-1: unit 255 not found! [ 419.053283][ T8564] team0: Port device team_slave_0 added [ 419.077689][ T5908] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 419.093567][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.104885][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.114398][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.129425][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.137501][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.144039][ T5908] usb 1-1: USB disconnect, device number 18 [ 419.179859][ T8564] team0: Port device team_slave_1 added [ 419.254790][ T8530] hsr_slave_0: entered promiscuous mode [ 419.261239][ T8529] udevd[8529]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.261709][ T8530] hsr_slave_1: entered promiscuous mode [ 419.284154][ T8530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.292862][ T8530] Cannot create hsr debugfs directory [ 419.423064][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.439064][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.465067][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.485400][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.776277][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.809302][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.835273][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.909617][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.189657][ T6278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.283535][ T8676] netlink: 'syz.4.776': attribute type 10 has an invalid length. [ 420.344596][ T5149] Bluetooth: hci1: command tx timeout [ 421.009328][ T6278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.225243][ T5149] Bluetooth: hci2: command tx timeout [ 421.263620][ T6278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.336417][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'. [ 421.381546][ T8564] hsr_slave_0: entered promiscuous mode [ 421.389488][ T8564] hsr_slave_1: entered promiscuous mode [ 421.403132][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.412254][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 421.429153][ T8564] Cannot create hsr debugfs directory [ 421.587868][ T6278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.860292][ T8685] loop4: detected capacity change from 0 to 2048 [ 422.014166][ T8688] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.108985][ T30] audit: type=1800 audit(1749656997.289:29): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.782" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 422.425369][ T5852] Bluetooth: hci1: command tx timeout [ 422.443541][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.535186][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.585286][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.844564][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.855647][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.870780][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 423.304720][ T5149] Bluetooth: hci2: command tx timeout [ 423.319128][ T8530] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.613569][ T6278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.655744][ T8704] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.784'. [ 423.681684][ T8704] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.784'. [ 423.702418][ T8704] netlink: 584 bytes leftover after parsing attributes in process `syz.4.784'. [ 423.717256][ T8530] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.901540][ T6278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.964578][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 423.991196][ T8530] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.015161][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.022359][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.032373][ T8626] bridge_slave_0: entered allmulticast mode [ 424.040913][ T8626] bridge_slave_0: entered promiscuous mode [ 424.124738][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.133666][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.141702][ T8626] bridge_slave_1: entered allmulticast mode [ 424.156615][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.157962][ T8626] bridge_slave_1: entered promiscuous mode [ 424.174522][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.197099][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.208279][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.224737][ T9] usb 5-1: SerialNumber: syz [ 424.253191][ T8530] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.324985][ T6278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.459522][ T9] usb 5-1: 0:2 : does not exist [ 424.478489][ T9] usb 5-1: unit 255 not found! [ 424.500649][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.524329][ T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 424.579231][ T6278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.593314][ T9] usb 5-1: USB disconnect, device number 5 [ 424.662315][ T8529] udevd[8529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.723724][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.889119][ T8626] team0: Port device team_slave_0 added [ 424.906216][ T5149] Bluetooth: hci3: command tx timeout [ 424.914033][ T8626] team0: Port device team_slave_1 added [ 425.202758][ T8663] chnl_net:caif_netlink_parms(): no params data found [ 425.233392][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.254607][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.324263][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.352514][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.384752][ T5149] Bluetooth: hci2: command tx timeout [ 425.390858][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.455896][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.954049][ T5908] infiniband syz1: ib_query_port failed (-19) [ 426.032927][ T8626] hsr_slave_0: entered promiscuous mode [ 426.045796][ T8626] hsr_slave_1: entered promiscuous mode [ 426.052074][ T8626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.060747][ T8626] Cannot create hsr debugfs directory [ 426.079812][ T8530] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.123730][ T6278] bridge_slave_1: left allmulticast mode [ 426.136796][ T6278] bridge_slave_1: left promiscuous mode [ 426.142642][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.161652][ T6278] bridge_slave_0: left allmulticast mode [ 426.171167][ T6278] bridge_slave_0: left promiscuous mode [ 426.186335][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.212486][ T6278] bridge_slave_1: left allmulticast mode [ 426.225115][ T6278] bridge_slave_1: left promiscuous mode [ 426.230954][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.247136][ T6278] bridge_slave_0: left allmulticast mode [ 426.252842][ T6278] bridge_slave_0: left promiscuous mode [ 426.269386][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.289116][ T6278] bridge_slave_1: left allmulticast mode [ 426.304350][ T6278] bridge_slave_1: left promiscuous mode [ 426.314360][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.336862][ T6278] bridge_slave_0: left allmulticast mode [ 426.342575][ T6278] bridge_slave_0: left promiscuous mode [ 426.358555][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.841310][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.859123][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.872635][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.883850][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.897083][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.987329][ T5852] Bluetooth: hci3: command tx timeout [ 427.171987][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.183319][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.193936][ T6278] bond0 (unregistering): Released all slaves [ 427.465281][ T5852] Bluetooth: hci2: command tx timeout [ 427.520343][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.534694][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.545519][ T6278] bond0 (unregistering): Released all slaves [ 427.930237][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.942773][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.954349][ T6278] bond0 (unregistering): Released all slaves [ 427.999309][ T8530] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.013930][ T8530] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.147109][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 428.235400][ T8530] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.255931][ T6278] tipc: Left network mode [ 428.418339][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.427555][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.436080][ T8663] bridge_slave_0: entered allmulticast mode [ 428.443768][ T8663] bridge_slave_0: entered promiscuous mode [ 428.458867][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.466227][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.473479][ T8663] bridge_slave_1: entered allmulticast mode [ 428.481465][ T8663] bridge_slave_1: entered promiscuous mode [ 428.694156][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.709704][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.732770][ T8564] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 428.882032][ T8564] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 428.894912][ T8564] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 428.936862][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.954220][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.962075][ T8693] bridge_slave_0: entered allmulticast mode [ 428.970880][ T8693] bridge_slave_0: entered promiscuous mode [ 428.996325][ T5852] Bluetooth: hci5: command tx timeout [ 429.015278][ T8663] team0: Port device team_slave_0 added [ 429.038700][ T8564] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 429.065007][ T5852] Bluetooth: hci3: command tx timeout [ 429.088503][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.096102][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.103400][ T8693] bridge_slave_1: entered allmulticast mode [ 429.111841][ T8693] bridge_slave_1: entered promiscuous mode [ 429.121802][ T8663] team0: Port device team_slave_1 added [ 429.289743][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.297087][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.324032][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.372264][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.387655][ T6278] hsr_slave_0: left promiscuous mode [ 429.393955][ T6278] hsr_slave_1: left promiscuous mode [ 429.400594][ T6278] batman_adv: batadv0: Removing interface: team0 [ 429.411122][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.418777][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.427218][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.434825][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.446977][ T6278] hsr_slave_0: left promiscuous mode [ 429.452953][ T6278] hsr_slave_1: left promiscuous mode [ 429.460631][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.468321][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.476533][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.483937][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.499581][ T6278] hsr_slave_0: left promiscuous mode [ 429.505804][ T6278] hsr_slave_1: left promiscuous mode [ 429.511751][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.519476][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.527797][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.536317][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.582775][ T6278] veth1_macvtap: left promiscuous mode [ 429.589980][ T6278] veth0_macvtap: left promiscuous mode [ 429.596707][ T6278] veth1_vlan: left promiscuous mode [ 429.602085][ T6278] veth0_vlan: left promiscuous mode [ 429.608761][ T6278] veth1_macvtap: left promiscuous mode [ 429.614312][ T6278] veth0_macvtap: left promiscuous mode [ 429.623058][ T6278] veth1_macvtap: left promiscuous mode [ 429.629191][ T6278] veth0_macvtap: left promiscuous mode [ 429.634945][ T6278] veth1_vlan: left promiscuous mode [ 429.640305][ T6278] veth0_vlan: left promiscuous mode [ 430.421565][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 430.470197][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 431.074661][ T5852] Bluetooth: hci5: command tx timeout [ 431.148718][ T5852] Bluetooth: hci3: command tx timeout [ 431.943524][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 431.999098][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 432.461697][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.469884][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.496879][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.563135][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.677462][ T8693] team0: Port device team_slave_0 added [ 432.780313][ T8693] team0: Port device team_slave_1 added [ 432.808962][ T8663] hsr_slave_0: entered promiscuous mode [ 432.815960][ T8663] hsr_slave_1: entered promiscuous mode [ 432.873557][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.881811][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.908725][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.964139][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.980345][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.007538][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.066326][ T8626] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 433.106977][ T8626] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 433.155941][ T5852] Bluetooth: hci5: command tx timeout [ 433.203254][ T8626] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 433.252421][ T8693] hsr_slave_0: entered promiscuous mode [ 433.260759][ T8693] hsr_slave_1: entered promiscuous mode [ 433.275731][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.283354][ T8693] Cannot create hsr debugfs directory [ 433.321850][ T8626] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 433.572487][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.741410][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 433.918521][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.069326][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.173100][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.199670][ T6278] IPVS: stop unused estimator thread 0... [ 434.228580][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.235800][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.367429][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.374663][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.393472][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.400663][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.460542][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.467892][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.476683][ T8717] bridge_slave_0: entered allmulticast mode [ 434.486732][ T8717] bridge_slave_0: entered promiscuous mode [ 434.497647][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.505510][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.512834][ T8717] bridge_slave_1: entered allmulticast mode [ 434.526326][ T8717] bridge_slave_1: entered promiscuous mode [ 434.546240][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.553416][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.657929][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.717875][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.841883][ T8717] team0: Port device team_slave_0 added [ 434.862013][ T8717] team0: Port device team_slave_1 added [ 434.934041][ T6278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.071841][ T6278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.094376][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.102133][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.128605][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.142363][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.150355][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.177643][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.226322][ T5852] Bluetooth: hci5: command tx timeout [ 435.273418][ T6278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.346530][ T6278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.437319][ T8717] hsr_slave_0: entered promiscuous mode [ 435.443881][ T8717] hsr_slave_1: entered promiscuous mode [ 435.452633][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.462217][ T8717] Cannot create hsr debugfs directory [ 435.528959][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.654031][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.816829][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.824183][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.934409][ T8693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.979176][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.986416][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.022166][ T8693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.039594][ T8693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 436.091038][ T8693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 436.166432][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.240730][ T6278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.391119][ T6278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.438281][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.482556][ T8663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 436.554110][ T6278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.676262][ T8663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 436.689682][ T8663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 436.704380][ T8663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 436.801227][ T6278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.290425][ T8564] veth0_vlan: entered promiscuous mode [ 437.399305][ T8564] veth1_vlan: entered promiscuous mode [ 437.412925][ T6278] bridge_slave_1: left allmulticast mode [ 437.420378][ T6278] bridge_slave_1: left promiscuous mode [ 437.427991][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.462545][ T6278] bridge_slave_0: left allmulticast mode [ 437.469192][ T6278] bridge_slave_0: left promiscuous mode [ 437.475667][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.491455][ T6278] bridge_slave_1: left allmulticast mode [ 437.510474][ T6278] bridge_slave_1: left promiscuous mode [ 437.519278][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.536614][ T6278] bridge_slave_0: left allmulticast mode [ 437.542305][ T6278] bridge_slave_0: left promiscuous mode [ 437.555675][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.063530][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.083652][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.094942][ T6278] bond0 (unregistering): Released all slaves [ 438.261525][ T6278] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 438.488573][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.500415][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.511206][ T6278] bond0 (unregistering): Released all slaves [ 438.530916][ T6278] bond1 (unregistering): (slave bond2): Releasing backup interface [ 438.551414][ T6278] bond1 (unregistering): Released all slaves [ 438.672546][ T6278] bond2 (unregistering): Released all slaves [ 438.863020][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.150962][ T8530] veth0_vlan: entered promiscuous mode [ 439.209274][ T8564] veth0_macvtap: entered promiscuous mode [ 439.241380][ T8717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.302597][ T8717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.320897][ T8564] veth1_macvtap: entered promiscuous mode [ 439.338277][ T8530] veth1_vlan: entered promiscuous mode [ 439.349606][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.362180][ T8717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.402628][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.436834][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.444084][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.452736][ T8717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 439.511112][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.518308][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.533223][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.608735][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.679122][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.701293][ T6278] hsr_slave_0: left promiscuous mode [ 439.712853][ T6278] hsr_slave_1: left promiscuous mode [ 439.719980][ T6278] batman_adv: batadv0: Removing interface: team0 [ 439.728383][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.739216][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.747804][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.755653][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.770191][ T6278] hsr_slave_0: left promiscuous mode [ 439.776432][ T6278] hsr_slave_1: left promiscuous mode [ 439.783318][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.792495][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.801566][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.809848][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.849623][ T6278] veth1_macvtap: left promiscuous mode [ 439.855314][ T6278] veth0_macvtap: left promiscuous mode [ 439.861160][ T6278] veth1_vlan: left promiscuous mode [ 439.867856][ T6278] veth0_vlan: left promiscuous mode [ 439.875785][ T6278] veth1_macvtap: left promiscuous mode [ 439.881364][ T6278] veth0_macvtap: left promiscuous mode [ 439.887372][ T6278] veth1_vlan: left promiscuous mode [ 439.892718][ T6278] veth0_vlan: left promiscuous mode [ 440.520515][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 440.592899][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 441.480748][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 441.527624][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 442.022860][ T8663] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.052447][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.059795][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.081501][ T8564] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.114654][ T8564] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.123449][ T8564] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.132898][ T8564] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.213658][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.220886][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.265683][ T8530] veth0_macvtap: entered promiscuous mode [ 442.298160][ T8530] veth1_macvtap: entered promiscuous mode [ 442.628249][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.753950][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.825712][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.840926][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.930439][ T8530] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.954884][ T8530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.963887][ T8530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.973129][ T8530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.133523][ T8626] veth0_vlan: entered promiscuous mode [ 443.160234][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.191241][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.200470][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.287197][ T8626] veth1_vlan: entered promiscuous mode [ 443.298910][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.379021][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.490538][ T6278] IPVS: stop unused estimator thread 0... [ 443.548650][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.555921][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.625557][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.724803][ T8663] veth0_vlan: entered promiscuous mode [ 443.746228][ T8663] veth1_vlan: entered promiscuous mode [ 443.816092][ T8663] veth0_macvtap: entered promiscuous mode [ 443.837296][ T8663] veth1_macvtap: entered promiscuous mode [ 443.871226][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.931158][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.938465][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.389856][ T6287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.510106][ T6287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.641649][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.656138][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.811429][ T8626] veth0_macvtap: entered promiscuous mode [ 444.863548][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.981916][ T8663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.995136][ T8663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.050644][ T8663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.060810][ T8663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.101983][ T8626] veth1_macvtap: entered promiscuous mode [ 445.204882][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.421687][ T8824] loop8: detected capacity change from 0 to 64 [ 445.697702][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.092446][ T8823] netlink: 36 bytes leftover after parsing attributes in process `syz.7.559'. [ 446.243750][ T8626] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.282525][ T8626] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.324850][ T8626] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.333698][ T8626] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.553767][ T8831] netlink: 'syz.8.791': attribute type 29 has an invalid length. [ 446.563095][ T8831] netlink: 'syz.8.791': attribute type 3 has an invalid length. [ 446.571805][ T8831] netlink: 76 bytes leftover after parsing attributes in process `syz.8.791'. [ 447.245127][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.253016][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.338771][ T8693] veth0_vlan: entered promiscuous mode [ 447.554218][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.557901][ T8693] veth1_vlan: entered promiscuous mode [ 447.579516][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.608550][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.800291][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.815164][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.973756][ T8693] veth0_macvtap: entered promiscuous mode [ 448.092169][ T8693] veth1_macvtap: entered promiscuous mode [ 448.148351][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.175670][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.258559][ T8852] loop3: detected capacity change from 0 to 2048 [ 448.367031][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.404217][ T8853] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.453431][ T30] audit: type=1800 audit(1749657023.629:30): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 449.633128][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.124538][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.283350][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.399344][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.520375][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.629281][ T8693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.654612][ T8693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.681872][ T8693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.976549][ T8693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.184172][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.329517][ T8869] netlink: 60 bytes leftover after parsing attributes in process `syz.7.800'. [ 453.347738][ T8887] netlink: 36 bytes leftover after parsing attributes in process `syz.9.801'. [ 453.377244][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.9.801'. [ 453.388750][ T8886] tipc: Started in network mode [ 453.393649][ T8886] tipc: Node identity 7, cluster identity 5 [ 453.403028][ T8886] tipc: Node number set to 7 [ 453.557074][ T8717] veth0_vlan: entered promiscuous mode [ 453.733223][ T8894] loop9: detected capacity change from 0 to 8 [ 453.776517][ T8894] squashfs: Unknown parameter 'ma}d' [ 453.821739][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.835645][ T8717] veth1_vlan: entered promiscuous mode [ 453.875009][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.228371][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.246497][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.366918][ T8900] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 454.493979][ T6022] IPVS: starting estimator thread 0... [ 454.530039][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.800159][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.817670][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.871113][ T8717] veth0_macvtap: entered promiscuous mode [ 454.877131][ T8901] IPVS: using max 20 ests per chain, 48000 per kthread [ 454.975612][ T59] bridge_slave_1: left allmulticast mode [ 455.007412][ T59] bridge_slave_1: left promiscuous mode [ 455.048478][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.186319][ T59] bridge_slave_0: left allmulticast mode [ 455.206224][ T59] bridge_slave_0: left promiscuous mode [ 455.212117][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.701681][ T8916] loop9: detected capacity change from 0 to 22 [ 455.709041][ T8916] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 456.349297][ T8916] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 456.654381][ T8919] loop7: detected capacity change from 0 to 2048 [ 456.787051][ T8920] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 456.844674][ T30] audit: type=1800 audit(1749657032.009:31): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.808" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 456.985132][ T5852] Bluetooth: hci4: command tx timeout [ 457.143382][ T5975] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 457.487040][ T5975] usb 10-1: config 0 has no interfaces? [ 457.500737][ T5975] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 457.574543][ T5975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.706399][ T5975] usb 10-1: config 0 descriptor?? [ 457.769499][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.792267][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.803976][ T59] bond0 (unregistering): Released all slaves [ 457.899025][ T8717] veth1_macvtap: entered promiscuous mode [ 457.964701][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.011080][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.115404][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.492743][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.624180][ T8717] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.654328][ T8717] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.674595][ T8717] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.683439][ T8717] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.775168][ T5929] usb 10-1: USB disconnect, device number 2 [ 458.894156][ T59] hsr_slave_0: left promiscuous mode [ 458.915530][ T59] hsr_slave_1: left promiscuous mode [ 458.922656][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.930588][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.964304][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.985208][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.065059][ T5852] Bluetooth: hci4: command tx timeout [ 459.418690][ T59] veth1_macvtap: left promiscuous mode [ 459.500158][ T59] veth0_macvtap: left promiscuous mode [ 459.592840][ T59] veth1_vlan: left promiscuous mode [ 459.672695][ T59] veth0_vlan: left promiscuous mode [ 460.101727][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.111306][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.119941][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.129456][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.139169][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.986009][ T59] team0 (unregistering): Port device team_slave_1 removed [ 461.132526][ T59] team0 (unregistering): Port device team_slave_0 removed [ 461.145237][ T5852] Bluetooth: hci4: command tx timeout [ 461.831689][ T8938] loop7: detected capacity change from 0 to 131072 [ 461.845479][ T8938] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 461.866924][ T8938] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 461.919225][ T8938] F2FS-fs (loop7): invalid crc value [ 461.937050][ T8938] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4) [ 462.184679][ T5852] Bluetooth: hci2: command tx timeout [ 462.398432][ T8940] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 462.484974][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.9.816'. [ 463.039578][ T5814] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 463.234878][ T5852] Bluetooth: hci4: command tx timeout [ 463.453492][ T5814] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 463.464709][ T5814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.477582][ T5814] usb 10-1: Product: syz [ 464.170253][ T5814] usb 10-1: Manufacturer: syz [ 464.188818][ T5814] usb 10-1: SerialNumber: syz [ 464.250268][ T5814] usb 10-1: config 0 descriptor?? [ 464.265862][ T5852] Bluetooth: hci2: command tx timeout [ 464.290070][ T8972] netlink: 'syz.7.820': attribute type 10 has an invalid length. [ 464.498080][ T8972] batman_adv: batadv0: Adding interface: team0 [ 464.502428][ T5814] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 464.513604][ T8972] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.541339][ T8972] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 464.569184][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.597873][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.720983][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 465.118621][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.128012][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.390074][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.406758][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.414108][ T8897] bridge_slave_0: entered allmulticast mode [ 465.434920][ T8897] bridge_slave_0: entered promiscuous mode [ 465.649726][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.739642][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.780152][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.802304][ T8897] bridge_slave_1: entered allmulticast mode [ 465.822372][ T8897] bridge_slave_1: entered promiscuous mode [ 466.059021][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.269978][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.345552][ T5852] Bluetooth: hci2: command tx timeout [ 466.562337][ T5814] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.648076][ T5814] usb 10-1: USB disconnect, device number 3 [ 466.793017][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.873045][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.966277][ T9001] netlink: 60 bytes leftover after parsing attributes in process `syz.6.827'. [ 467.234985][ T9006] siw: device registration error -23 [ 467.843556][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.244085][ T8897] team0: Port device team_slave_0 added [ 468.431276][ T5852] Bluetooth: hci2: command tx timeout [ 468.892890][ T8897] team0: Port device team_slave_1 added [ 471.787808][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 471.984702][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.027776][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.109312][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.185398][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.208724][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.298573][ T9030] netlink: 32 bytes leftover after parsing attributes in process `syz.5.837'. [ 472.311839][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.423931][ T9034] loop9: detected capacity change from 0 to 2048 [ 472.597261][ T9037] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.735037][ T30] audit: type=1800 audit(1749657047.889:32): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.838" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 473.770139][ T8897] hsr_slave_0: entered promiscuous mode [ 473.786218][ T8897] hsr_slave_1: entered promiscuous mode [ 473.825456][ T8897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.833092][ T8897] Cannot create hsr debugfs directory [ 473.916809][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.945545][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.972006][ T8943] bridge_slave_0: entered allmulticast mode [ 473.986783][ T8943] bridge_slave_0: entered promiscuous mode [ 474.971924][ T59] bridge_slave_1: left allmulticast mode [ 474.988595][ T59] bridge_slave_1: left promiscuous mode [ 475.001225][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.118546][ T9029] loop7: detected capacity change from 0 to 40427 [ 475.134320][ T59] bridge_slave_0: left allmulticast mode [ 475.145663][ T59] bridge_slave_0: left promiscuous mode [ 475.154384][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.324731][ T9083] loop6: detected capacity change from 0 to 64 [ 479.966603][ T9090] siw: device registration error -23 [ 480.098002][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.482149][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.677342][ T59] bond0 (unregistering): Released all slaves [ 480.804662][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.864613][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.906274][ T8943] bridge_slave_1: entered allmulticast mode [ 480.923331][ T9085] loop7: detected capacity change from 0 to 32768 [ 480.953899][ T8943] bridge_slave_1: entered promiscuous mode [ 481.280351][ T9085] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 482.451477][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.500128][ T9087] loop6: detected capacity change from 0 to 32768 [ 482.569106][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.613013][ T9087] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 482.671343][ T8530] ocfs2: Unmounting device (7,7) on (node local) [ 482.919218][ T9087] XFS (loop6): Ending clean mount [ 483.027182][ T9087] XFS (loop6): Quotacheck needed: Please wait. [ 483.299843][ T9087] XFS (loop6): Quotacheck: Done. [ 483.487755][ T59] hsr_slave_0: left promiscuous mode [ 483.519138][ T8717] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 483.537593][ T59] hsr_slave_1: left promiscuous mode [ 483.575400][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.582871][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.619282][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.651929][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.826792][ T59] veth1_macvtap: left promiscuous mode [ 483.844431][ T59] veth0_macvtap: left promiscuous mode [ 483.857383][ T59] veth1_vlan: left promiscuous mode [ 483.892349][ T9131] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 483.920613][ T59] veth0_vlan: left promiscuous mode [ 485.091415][ T9136] loop9: detected capacity change from 0 to 64 [ 486.076973][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.864'. [ 486.352848][ T5852] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 486.374598][ T5852] Bluetooth: hci1: Injecting HCI hardware error event [ 486.383258][ T5852] Bluetooth: hci1: hardware error 0x00 [ 486.393744][ T9139] loop6: detected capacity change from 0 to 2048 [ 486.533304][ T9145] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.584261][ T30] audit: type=1800 audit(1749657061.759:33): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.862" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 487.781289][ T9161] loop9: detected capacity change from 0 to 64 [ 487.802477][ T9161] hfs: Unknown parameter '' [ 488.134342][ T9163] netlink: 88 bytes leftover after parsing attributes in process `syz.9.869'. [ 488.144182][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.9.869'. [ 488.509826][ T5852] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 488.769716][ T59] team0 (unregistering): Port device team_slave_1 removed [ 488.832666][ T9165] loop5: detected capacity change from 0 to 32768 [ 488.840938][ T59] team0 (unregistering): Port device team_slave_0 removed [ 488.905566][ T9165] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 489.506490][ T8693] ocfs2: Unmounting device (7,5) on (node local) [ 489.738035][ T8943] team0: Port device team_slave_0 added [ 490.241066][ T8943] team0: Port device team_slave_1 added [ 490.429908][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.449079][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.550478][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.614379][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.670249][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.829734][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.116713][ T9183] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 491.264710][ T5975] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 491.885866][ T5975] usb 7-1: Using ep0 maxpacket: 16 [ 491.893103][ T5975] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 491.914562][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 492.264009][ T5975] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 492.274680][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.282705][ T5975] usb 7-1: Product: syz [ 492.287132][ T5975] usb 7-1: Manufacturer: syz [ 492.292091][ T5975] usb 7-1: SerialNumber: syz [ 492.299609][ T5975] usb 7-1: config 0 descriptor?? [ 492.308642][ T5975] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 492.334539][ T5975] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 492.463245][ T8943] hsr_slave_0: entered promiscuous mode [ 492.482735][ T8943] hsr_slave_1: entered promiscuous mode [ 493.306797][ T5975] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 493.362077][ T5975] em28xx 7-1:0.0: Config register raw data: 0x56 [ 493.516482][ T5975] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 493.532950][ T5975] em28xx 7-1:0.0: No AC97 audio processor [ 495.103604][ T9210] loop7: detected capacity change from 0 to 256 [ 495.373422][ T5814] usb 7-1: USB disconnect, device number 6 [ 495.384012][ T5814] em28xx 7-1:0.0: Disconnecting em28xx [ 495.505056][ T5814] em28xx 7-1:0.0: Freeing device [ 495.729380][ T5915] infiniband syz1: ib_query_port failed (-19) [ 495.792887][ T9214] netlink: 60 bytes leftover after parsing attributes in process `syz.7.884'. [ 496.100876][ T6006] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.172381][ T8897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.258870][ T8897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.637067][ T6006] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.784834][ T8897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.830140][ T8897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.835476][ T9213] loop6: detected capacity change from 0 to 32768 [ 496.871527][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.7.888'. [ 497.174695][ T9213] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 497.504395][ T6006] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.012676][ T8717] ocfs2: Unmounting device (7,6) on (node local) [ 498.497584][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.508102][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.516608][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.527897][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.541974][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.593343][ T6006] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.919067][ T9248] netlink: 'syz.6.891': attribute type 10 has an invalid length. [ 499.604962][ T9248] batman_adv: batadv0: Adding interface: team0 [ 499.611165][ T9248] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.695111][ T9248] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 499.925384][ T5814] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 500.084552][ T5814] usb 10-1: Using ep0 maxpacket: 16 [ 500.109162][ T5814] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 500.150731][ T5814] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.187097][ T5814] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 500.206460][ T5814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.224876][ T5814] usb 10-1: Product: syz [ 500.247051][ T5814] usb 10-1: Manufacturer: syz [ 500.278252][ T5814] usb 10-1: SerialNumber: syz [ 500.319753][ T8943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.327787][ T5814] usb 10-1: config 0 descriptor?? [ 500.344135][ T5814] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 500.368497][ T5814] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 500.391078][ T6006] bridge_slave_1: left allmulticast mode [ 500.399526][ T6006] bridge_slave_1: left promiscuous mode [ 500.411995][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.486263][ T6006] bridge_slave_0: left allmulticast mode [ 500.491997][ T6006] bridge_slave_0: left promiscuous mode [ 500.514819][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.585869][ T5149] Bluetooth: hci3: command tx timeout [ 500.965234][ T5814] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 500.977018][ T5814] em28xx 10-1:0.0: Config register raw data: 0x56 [ 501.182594][ T5814] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 501.208499][ T5814] em28xx 10-1:0.0: No AC97 audio processor [ 502.825196][ T5149] Bluetooth: hci3: command tx timeout [ 503.135224][ T6047] usb 10-1: USB disconnect, device number 4 [ 503.142477][ T6047] em28xx 10-1:0.0: Disconnecting em28xx [ 503.346156][ T6047] em28xx 10-1:0.0: Freeing device [ 503.745906][ T9276] loop7: detected capacity change from 0 to 64 [ 504.905707][ T5149] Bluetooth: hci3: command tx timeout [ 506.130067][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.475725][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.511963][ T6006] bond0 (unregistering): Released all slaves [ 506.580367][ T8943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.657851][ T8943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.717766][ T8943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.986478][ T5149] Bluetooth: hci3: command tx timeout [ 507.985103][ T9299] netlink: 'syz.7.903': attribute type 10 has an invalid length. [ 508.386469][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.702283][ T6006] hsr_slave_0: left promiscuous mode [ 509.726132][ T6006] hsr_slave_1: left promiscuous mode [ 509.744374][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.773733][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.801382][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.814614][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 509.830376][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.873324][ T6006] veth1_macvtap: left promiscuous mode [ 509.882305][ T6006] veth0_macvtap: left promiscuous mode [ 509.894996][ T6006] veth1_vlan: left promiscuous mode [ 509.900396][ T6006] veth0_vlan: left promiscuous mode [ 510.009968][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 510.029880][ T43] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 510.052122][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.089062][ T43] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 510.098828][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.125355][ T43] usb 8-1: Product: syz [ 510.129571][ T43] usb 8-1: Manufacturer: syz [ 510.134202][ T43] usb 8-1: SerialNumber: syz [ 510.155404][ T43] usb 8-1: config 0 descriptor?? [ 510.178865][ T43] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 510.200647][ T43] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 510.788681][ T43] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 510.800947][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 510.801503][ T43] em28xx 8-1:0.0: Config register raw data: 0x56 [ 510.885617][ T6006] team0 (unregistering): Port device team_slave_0 removed [ 511.018945][ T43] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 511.026509][ T43] em28xx 8-1:0.0: No AC97 audio processor [ 511.081426][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.644785][ T9321] netlink: 60 bytes leftover after parsing attributes in process `syz.6.907'. [ 511.802728][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 512.443843][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.455024][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 513.315389][ T5975] usb 8-1: USB disconnect, device number 2 [ 513.342493][ T5975] em28xx 8-1:0.0: Disconnecting em28xx [ 513.360919][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 513.370851][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.380781][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.423608][ T5975] em28xx 8-1:0.0: Freeing device [ 513.551362][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.574786][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.604223][ T9242] bridge_slave_0: entered allmulticast mode [ 514.016116][ T9242] bridge_slave_0: entered promiscuous mode [ 514.256430][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.315832][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.323140][ T9242] bridge_slave_1: entered allmulticast mode [ 514.399410][ T9242] bridge_slave_1: entered promiscuous mode [ 514.564740][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.701972][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.842154][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.896271][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.221857][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.229108][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.291864][ T9242] team0: Port device team_slave_0 added [ 515.465019][ T5149] Bluetooth: hci6: command tx timeout [ 515.596053][ T9338] loop7: detected capacity change from 0 to 32768 [ 515.599624][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.609715][ T6290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.662981][ T9242] team0: Port device team_slave_1 added [ 515.774044][ T9338] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 516.057236][ T9358] (syz.7.910,9358,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 516.075587][ T9358] (syz.7.910,9358,1):update_backups:196 ERROR: status = -12 [ 516.091832][ T9358] ocfs2: Failed to update super blocks on 7,7 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 516.355014][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.362023][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.484667][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.627507][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.670865][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.734544][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.890413][ T9362] loop6: detected capacity change from 0 to 64 [ 516.918449][ T9362] hfs: Unknown parameter '' [ 517.214656][ T9364] netlink: 88 bytes leftover after parsing attributes in process `syz.6.915'. [ 517.224254][ T9364] netlink: 16 bytes leftover after parsing attributes in process `syz.6.915'. [ 517.545142][ T5149] Bluetooth: hci6: command tx timeout [ 517.860593][ T9242] hsr_slave_0: entered promiscuous mode [ 517.878147][ T9242] hsr_slave_1: entered promiscuous mode [ 517.896208][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.903819][ T9242] Cannot create hsr debugfs directory [ 518.011819][ T9331] chnl_net:caif_netlink_parms(): no params data found [ 518.029018][ T8530] ocfs2: Unmounting device (7,7) on (node local) [ 518.047129][ T9367] loop6: detected capacity change from 0 to 2048 [ 518.128230][ T9368] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 518.162223][ T30] audit: type=1800 audit(1749657093.339:34): pid=9367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.917" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 518.590884][ T8943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.007540][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.9.918'. [ 519.625051][ T5149] Bluetooth: hci6: command tx timeout [ 520.455501][ T9395] loop9: detected capacity change from 0 to 64 [ 520.537246][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.787953][ T9391] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 520.821543][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.534271][ T9331] bridge_slave_0: entered allmulticast mode [ 521.704750][ T5149] Bluetooth: hci6: command tx timeout [ 521.779277][ T9331] bridge_slave_0: entered promiscuous mode [ 521.863914][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.881754][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.916212][ T9331] bridge_slave_1: entered allmulticast mode [ 521.968542][ T9331] bridge_slave_1: entered promiscuous mode [ 522.343565][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 522.355495][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 522.363435][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 522.376159][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 522.377956][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.394828][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 522.399620][ T6006] bridge_slave_1: left allmulticast mode [ 522.416213][ T6006] bridge_slave_1: left promiscuous mode [ 522.422486][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.502187][ T6006] bridge_slave_0: left allmulticast mode [ 522.529985][ T6006] bridge_slave_0: left promiscuous mode [ 522.560030][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.033038][ T9416] loop6: detected capacity change from 0 to 64 [ 524.584599][ T5149] Bluetooth: hci2: command tx timeout [ 525.418449][ T9418] loop6: detected capacity change from 0 to 32768 [ 525.602334][ T9418] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 525.756026][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.7.928'. [ 525.796573][ T9425] (syz.6.926,9425,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 525.841206][ T9425] (syz.6.926,9425,1):update_backups:196 ERROR: status = -12 [ 525.861227][ T9425] ocfs2: Failed to update super blocks on 7,6 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 525.897922][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.910142][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.937200][ T6006] bond0 (unregistering): Released all slaves [ 526.002453][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.543225][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.7.928'. [ 526.570224][ T9424] tipc: Started in network mode [ 526.600556][ T9424] tipc: Node identity 7, cluster identity 5 [ 526.624601][ T9424] tipc: Node number set to 7 [ 526.670033][ T5852] Bluetooth: hci2: command tx timeout [ 526.750241][ T9331] team0: Port device team_slave_0 added [ 526.859542][ T9331] team0: Port device team_slave_1 added [ 526.970900][ T9430] loop9: detected capacity change from 0 to 32768 [ 526.979848][ T6006] hsr_slave_0: left promiscuous mode [ 526.994097][ T9430] XFS: attr2 mount option is deprecated. [ 527.020879][ T6006] hsr_slave_1: left promiscuous mode [ 527.036650][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.102249][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.122146][ T9430] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 527.294588][ T9430] XFS (loop9): Ending clean mount [ 527.323272][ T9430] XFS (loop9): Quotacheck needed: Please wait. [ 527.404900][ T9430] XFS (loop9): Quotacheck: Done. [ 527.522383][ T8626] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 527.665218][ T8717] ocfs2: Unmounting device (7,6) on (node local) [ 527.965341][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 528.058824][ T6006] team0 (unregistering): Port device team_slave_0 removed [ 528.305044][ T9449] siw: device registration error -23 [ 528.504703][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 528.744570][ T5149] Bluetooth: hci2: command tx timeout [ 529.999435][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.015815][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.042949][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.358479][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.390058][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.445743][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.634623][ T5915] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 530.848320][ T5149] Bluetooth: hci2: command tx timeout [ 530.887250][ T5915] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.908739][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 530.920694][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 530.933596][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 530.952247][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 530.986083][ T5915] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 530.995725][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 531.010534][ T5915] usb 8-1: Product: syz [ 531.018462][ T5915] usb 8-1: Manufacturer: syz [ 531.027630][ T5915] usb 8-1: SerialNumber: syz [ 531.096692][ T5915] usb 8-1: config 0 descriptor?? [ 531.170933][ T9331] hsr_slave_0: entered promiscuous mode [ 531.177911][ T9331] hsr_slave_1: entered promiscuous mode [ 531.184284][ T9331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.192105][ T9331] Cannot create hsr debugfs directory [ 531.326118][ T5915] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 531.354344][ T5915] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 531.599016][ T5915] usb 8-1: USB disconnect, device number 3 [ 531.967617][ T9242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.057037][ T9242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.094588][ T9242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.114186][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.9.939'. [ 532.153848][ T9242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.163451][ T9469] netlink: 36 bytes leftover after parsing attributes in process `syz.9.939'. [ 532.633494][ T9404] chnl_net:caif_netlink_parms(): no params data found [ 532.686852][ T9472] netlink: 60 bytes leftover after parsing attributes in process `syz.9.940'. [ 533.140957][ T9492] loop9: detected capacity change from 0 to 512 [ 533.173561][ T9492] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 533.222608][ T9492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 533.348284][ T9492] System zones: 1-12 [ 533.390781][ T9492] EXT4-fs (loop9): 1 truncate cleaned up [ 533.407429][ T9492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.104011][ T9499] loop6: detected capacity change from 0 to 32768 [ 535.218859][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.271183][ T9499] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 535.271183][ T9499] allowing incompatible features above 0.0: (unknown version) [ 535.271183][ T9499] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 535.309398][ T9499] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 535.317810][ T9499] bcachefs (loop6): initializing new filesystem [ 535.332715][ T9499] bcachefs (loop6): going read-write [ 535.373921][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.400700][ T9404] bridge_slave_0: entered allmulticast mode [ 535.474155][ T9404] bridge_slave_0: entered promiscuous mode [ 535.475025][ T9510] ODEBUG: object ffffc90003effa98 is on stack ffffc90003ef8000, but NOT annotated. [ 535.476217][ T9510] [ 535.476226][ T9510] ====================================================== [ 535.476239][ T9510] WARNING: possible circular locking dependency detected [ 535.476253][ T9510] 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 Not tainted [ 535.476273][ T9510] ------------------------------------------------------ [ 535.476286][ T9510] bch-copygc/loop/9510 is trying to acquire lock: [ 535.476304][ T9510] ffffffff8e4d1dc0 (console_owner){-...}-{0:0}, at: vprintk_emit+0x4d4/0x6d0 [ 535.476392][ T9510] [ 535.476392][ T9510] but task is already holding lock: [ 535.476403][ T9510] ffffffff9b02a0c0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 535.476480][ T9510] [ 535.476480][ T9510] which lock already depends on the new lock. [ 535.476480][ T9510] [ 535.476492][ T9510] [ 535.476492][ T9510] the existing dependency chain (in reverse order) is: [ 535.476504][ T9510] [ 535.476504][ T9510] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 535.476549][ T9510] _raw_spin_lock_irqsave+0x3a/0x60 [ 535.476601][ T9510] debug_object_activate+0x14c/0x4c0 [ 535.476637][ T9510] insert_work+0x2e/0x230 [ 535.476668][ T9510] __queue_work+0x97e/0x10f0 [ 535.476700][ T9510] queue_work_on+0x15f/0x1f0 [ 535.476747][ T9510] start_poll_synchronize_rcu_expedited+0x113/0x190 [ 535.476798][ T9510] rcu_init+0xe95/0x1630 [ 535.476847][ T9510] start_kernel+0x1df/0x4d0 [ 535.476889][ T9510] x86_64_start_reservations+0x18/0x30 [ 535.476935][ T9510] x86_64_start_kernel+0x130/0x190 [ 535.476979][ T9510] common_startup_64+0x13e/0x148 [ 535.477036][ T9510] [ 535.477036][ T9510] -> #3 (&pool->lock){-.-.}-{2:2}: [ 535.477081][ T9510] _raw_spin_lock+0x2e/0x40 [ 535.477127][ T9510] __queue_work+0x26b/0x10f0 [ 535.477159][ T9510] queue_work_on+0x15f/0x1f0 [ 535.477191][ T9510] rpm_suspend+0xeba/0x11d0 [ 535.477244][ T9510] rpm_idle+0x5b4/0x730 [ 535.477293][ T9510] __pm_runtime_idle+0xba/0x1a0 [ 535.477346][ T9510] __device_attach+0x37e/0x4b0 [ 535.477399][ T9510] bus_probe_device+0x17f/0x1c0 [ 535.477444][ T9510] device_add+0x1148/0x1a70 [ 535.477492][ T9510] serial_base_port_add+0x357/0x4b0 [ 535.477530][ T9510] serial_core_register_port+0x13c/0x2570 [ 535.477566][ T9510] serial8250_register_8250_port+0x159b/0x23c0 [ 535.477614][ T9510] serial_pnp_probe+0x431/0x910 [ 535.477659][ T9510] pnp_device_probe+0x2a8/0x4d0 [ 535.477695][ T9510] really_probe+0x241/0xa90 [ 535.477751][ T9510] __driver_probe_device+0x1de/0x440 [ 535.477805][ T9510] driver_probe_device+0x4c/0x1b0 [ 535.477857][ T9510] __driver_attach+0x283/0x580 [ 535.477909][ T9510] bus_for_each_dev+0x13e/0x1d0 [ 535.477949][ T9510] bus_add_driver+0x2e9/0x690 [ 535.477994][ T9510] driver_register+0x15c/0x4b0 [ 535.478024][ T9510] serial8250_init+0xc9/0x1e0 [ 535.478068][ T9510] do_one_initcall+0x123/0x6e0 [ 535.478101][ T9510] kernel_init_freeable+0x5c2/0x900 [ 535.478146][ T9510] kernel_init+0x1c/0x2b0 [ 535.478185][ T9510] ret_from_fork+0x5d7/0x6f0 [ 535.478235][ T9510] ret_from_fork_asm+0x1a/0x30 [ 535.478269][ T9510] [ 535.478269][ T9510] -> #2 (&dev->power.lock){-...}-{3:3}: [ 535.478314][ T9510] _raw_spin_lock_irqsave+0x3a/0x60 [ 535.478363][ T9510] __pm_runtime_resume+0xa9/0x170 [ 535.478417][ T9510] __uart_start+0x1b0/0x4c0 [ 535.478461][ T9510] uart_write+0x218/0xb30 [ 535.478488][ T9510] n_tty_write+0x412/0x1160 [ 535.478526][ T9510] file_tty_write.constprop.0+0x504/0x9b0 [ 535.478582][ T9510] redirected_tty_write+0xd4/0x150 [ 535.478637][ T9510] vfs_write+0x6c7/0x1150 [ 535.478671][ T9510] ksys_write+0x12a/0x250 [ 535.478704][ T9510] do_syscall_64+0xcd/0x4c0 [ 535.478740][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.478774][ T9510] [ 535.478774][ T9510] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 535.478819][ T9510] _raw_spin_lock_irqsave+0x3a/0x60 [ 535.478868][ T9510] serial8250_console_write+0x181/0x1890 [ 535.478909][ T9510] console_flush_all+0x801/0xc60 [ 535.478948][ T9510] console_unlock+0xd8/0x210 [ 535.478985][ T9510] vprintk_emit+0x418/0x6d0 [ 535.479024][ T9510] _printk+0xc7/0x100 [ 535.479076][ T9510] register_console+0xc2d/0x11b0 [ 535.479117][ T9510] univ8250_console_init+0x5f/0x90 [ 535.479159][ T9510] console_init+0x14f/0x680 [ 535.479203][ T9510] start_kernel+0x29f/0x4d0 [ 535.479244][ T9510] x86_64_start_reservations+0x18/0x30 [ 535.479290][ T9510] x86_64_start_kernel+0x130/0x190 [ 535.479334][ T9510] common_startup_64+0x13e/0x148 [ 535.479390][ T9510] [ 535.479390][ T9510] -> #0 (console_owner){-...}-{0:0}: [ 535.479434][ T9510] __lock_acquire+0x126f/0x1c90 [ 535.479486][ T9510] lock_acquire+0x179/0x350 [ 535.479537][ T9510] vprintk_emit+0x4e5/0x6d0 [ 535.479576][ T9510] _printk+0xc7/0x100 [ 535.479628][ T9510] lookup_object_or_alloc.part.0+0x3d7/0x590 [ 535.479667][ T9510] __debug_object_init+0x2a9/0x3d0 [ 535.479703][ T9510] __init_work+0x4c/0x60 [ 535.479757][ T9510] rhashtable_init_noprof+0x49f/0x7e0 [ 535.479807][ T9510] bch2_copygc_thread+0xf6/0xdd0 [ 535.479854][ T9510] kthread+0x3c5/0x780 [ 535.479907][ T9510] ret_from_fork+0x5d7/0x6f0 [ 535.479956][ T9510] ret_from_fork_asm+0x1a/0x30 [ 535.479990][ T9510] [ 535.479990][ T9510] other info that might help us debug this: [ 535.479990][ T9510] [ 535.480001][ T9510] Chain exists of: [ 535.480001][ T9510] console_owner --> &pool->lock --> &obj_hash[i].lock [ 535.480001][ T9510] [ 535.480053][ T9510] Possible unsafe locking scenario: [ 535.480053][ T9510] [ 535.480064][ T9510] CPU0 CPU1 [ 535.480074][ T9510] ---- ---- [ 535.480084][ T9510] lock(&obj_hash[i].lock); [ 535.480106][ T9510] lock(&pool->lock); [ 535.480134][ T9510] lock(&obj_hash[i].lock); [ 535.480159][ T9510] lock(console_owner); [ 535.480182][ T9510] [ 535.480182][ T9510] *** DEADLOCK *** [ 535.480182][ T9510] [ 535.480190][ T9510] 1 lock held by bch-copygc/loop/9510: [ 535.480211][ T9510] #0: ffffffff9b02a0c0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 535.480299][ T9510] [ 535.480299][ T9510] stack backtrace: [ 535.480314][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 535.480361][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.480383][ T9510] Call Trace: [ 535.480393][ T9510] [ 535.480406][ T9510] dump_stack_lvl+0x116/0x1f0 [ 535.480467][ T9510] print_circular_bug+0x275/0x350 [ 535.480525][ T9510] check_noncircular+0x14c/0x170 [ 535.480582][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.480636][ T9510] __lock_acquire+0x126f/0x1c90 [ 535.480702][ T9510] lock_acquire+0x179/0x350 [ 535.480765][ T9510] ? vprintk_emit+0x4d4/0x6d0 [ 535.480811][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.480863][ T9510] vprintk_emit+0x4e5/0x6d0 [ 535.480907][ T9510] ? vprintk_emit+0x4d4/0x6d0 [ 535.480952][ T9510] ? __pfx_vprintk_emit+0x10/0x10 [ 535.481000][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.481048][ T9510] _printk+0xc7/0x100 [ 535.481106][ T9510] ? __pfx__printk+0x10/0x10 [ 535.481167][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.481211][ T9510] ? do_raw_spin_lock+0x12c/0x2b0 [ 535.481250][ T9510] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.481298][ T9510] lookup_object_or_alloc.part.0+0x3d7/0x590 [ 535.481346][ T9510] __debug_object_init+0x2a9/0x3d0 [ 535.481385][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.481432][ T9510] ? __pfx___debug_object_init+0x10/0x10 [ 535.481484][ T9510] __init_work+0x4c/0x60 [ 535.481539][ T9510] rhashtable_init_noprof+0x49f/0x7e0 [ 535.481595][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 535.481649][ T9510] bch2_copygc_thread+0xf6/0xdd0 [ 535.481702][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 535.481776][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.481823][ T9510] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 535.481907][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.481951][ T9510] ? rcu_is_watching+0x12/0xc0 [ 535.481996][ T9510] ? finish_task_switch.isra.0+0x221/0xc10 [ 535.482044][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.482088][ T9510] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.482148][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.482193][ T9510] ? finish_task_switch.isra.0+0x221/0xc10 [ 535.482268][ T9510] ? rcu_is_watching+0x12/0xc0 [ 535.482313][ T9510] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 535.482367][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.482411][ T9510] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.482469][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.482514][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.482559][ T9510] ? __kthread_parkme+0x19e/0x250 [ 535.482610][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 535.482661][ T9510] kthread+0x3c5/0x780 [ 535.482728][ T9510] ? __pfx_kthread+0x10/0x10 [ 535.482787][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.482832][ T9510] ? rcu_is_watching+0x12/0xc0 [ 535.482876][ T9510] ? __pfx_kthread+0x10/0x10 [ 535.482937][ T9510] ret_from_fork+0x5d7/0x6f0 [ 535.482990][ T9510] ? __pfx_kthread+0x10/0x10 [ 535.483054][ T9510] ret_from_fork_asm+0x1a/0x30 [ 535.483104][ T9510] [ 535.598632][ T8626] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.604697][ T9510] ------------[ cut here ]------------ [ 536.410055][ T9510] WARNING: CPU: 1 PID: 9510 at lib/debugobjects.c:655 lookup_object_or_alloc.part.0+0x2b1/0x590 [ 536.420528][ T9510] Modules linked in: [ 536.424432][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 536.436874][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.446937][ T9510] RIP: 0010:lookup_object_or_alloc.part.0+0x2b1/0x590 [ 536.453723][ T9510] Code: 0e 48 8d 7d 20 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 58 02 00 00 48 8b 55 20 4c 89 e6 48 c7 c7 60 67 15 8c e8 a0 ea bb fc 90 <0f> 0b 90 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d1 [ 536.473352][ T9510] RSP: 0018:ffffc90003eff7b0 EFLAGS: 00010086 [ 536.479432][ T9510] RAX: 0000000000000050 RBX: ffff888053c0c1c0 RCX: ffffffff819b01d9 [ 536.487424][ T9510] RDX: 0000000000000000 RSI: ffffffff819b8066 RDI: 0000000000000005 [ 536.495410][ T9510] RBP: ffff888031a61e00 R08: 0000000000000005 R09: 0000000000000000 [ 536.503412][ T9510] R10: 0000000080000001 R11: 3066303178302f65 R12: ffffc90003effa98 [ 536.511399][ T9510] R13: ffff888031a61e00 R14: 0000000000000000 R15: 0000000000000000 [ 536.519502][ T9510] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 536.528446][ T9510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.535244][ T9510] CR2: 00007fc6c326936b CR3: 0000000035487000 CR4: 0000000000350ef0 [ 536.543227][ T9510] Call Trace: [ 536.546510][ T9510] [ 536.549448][ T9510] __debug_object_init+0x2a9/0x3d0 [ 536.554589][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.560249][ T9510] ? __pfx___debug_object_init+0x10/0x10 [ 536.566350][ T9510] __init_work+0x4c/0x60 [ 536.570634][ T9510] rhashtable_init_noprof+0x49f/0x7e0 [ 536.576044][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 536.581621][ T9510] bch2_copygc_thread+0xf6/0xdd0 [ 536.586593][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 536.592176][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.597831][ T9510] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 536.603344][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.608998][ T9510] ? rcu_is_watching+0x12/0xc0 [ 536.613792][ T9510] ? finish_task_switch.isra.0+0x221/0xc10 [ 536.619622][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.625278][ T9510] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.630512][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.636167][ T9510] ? finish_task_switch.isra.0+0x221/0xc10 [ 536.642022][ T9510] ? rcu_is_watching+0x12/0xc0 [ 536.646815][ T9510] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.652663][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.658318][ T9510] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.663555][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.669213][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.674872][ T9510] ? __kthread_parkme+0x19e/0x250 [ 536.679929][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 536.685514][ T9510] kthread+0x3c5/0x780 [ 536.689636][ T9510] ? __pfx_kthread+0x10/0x10 [ 536.694270][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.699924][ T9510] ? rcu_is_watching+0x12/0xc0 [ 536.704714][ T9510] ? __pfx_kthread+0x10/0x10 [ 536.709342][ T9510] ret_from_fork+0x5d7/0x6f0 [ 536.713962][ T9510] ? __pfx_kthread+0x10/0x10 [ 536.718588][ T9510] ret_from_fork_asm+0x1a/0x30 [ 536.723385][ T9510] [ 536.726409][ T9510] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 536.733699][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 536.746133][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.756208][ T9510] Call Trace: [ 536.759495][ T9510] [ 536.762430][ T9510] dump_stack_lvl+0x3d/0x1f0 [ 536.767116][ T9510] panic+0x71c/0x800 [ 536.771058][ T9510] ? __pfx_panic+0x10/0x10 [ 536.775513][ T9510] ? show_trace_log_lvl+0x29b/0x3e0 [ 536.780753][ T9510] ? check_panic_on_warn+0x1f/0xb0 [ 536.785907][ T9510] ? lookup_object_or_alloc.part.0+0x2b1/0x590 [ 536.792087][ T9510] check_panic_on_warn+0xab/0xb0 [ 536.797064][ T9510] __warn+0xf6/0x3c0 [ 536.801000][ T9510] ? lookup_object_or_alloc.part.0+0x2b1/0x590 [ 536.807182][ T9510] report_bug+0x3c3/0x580 [ 536.811553][ T9510] ? lookup_object_or_alloc.part.0+0x2b1/0x590 [ 536.817736][ T9510] handle_bug+0x184/0x210 [ 536.822268][ T9510] exc_invalid_op+0x17/0x50 [ 536.826801][ T9510] asm_exc_invalid_op+0x1a/0x20 [ 536.831670][ T9510] RIP: 0010:lookup_object_or_alloc.part.0+0x2b1/0x590 [ 536.838467][ T9510] Code: 0e 48 8d 7d 20 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 58 02 00 00 48 8b 55 20 4c 89 e6 48 c7 c7 60 67 15 8c e8 a0 ea bb fc 90 <0f> 0b 90 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 d1 [ 536.858104][ T9510] RSP: 0018:ffffc90003eff7b0 EFLAGS: 00010086 [ 536.864194][ T9510] RAX: 0000000000000050 RBX: ffff888053c0c1c0 RCX: ffffffff819b01d9 [ 536.872183][ T9510] RDX: 0000000000000000 RSI: ffffffff819b8066 RDI: 0000000000000005 [ 536.880262][ T9510] RBP: ffff888031a61e00 R08: 0000000000000005 R09: 0000000000000000 [ 536.888255][ T9510] R10: 0000000080000001 R11: 3066303178302f65 R12: ffffc90003effa98 [ 536.896243][ T9510] R13: ffff888031a61e00 R14: 0000000000000000 R15: 0000000000000000 [ 536.904236][ T9510] ? __wake_up_klogd.part.0+0x99/0xf0 [ 536.909636][ T9510] ? vprintk_emit+0x1e6/0x6d0 [ 536.914366][ T9510] __debug_object_init+0x2a9/0x3d0 [ 536.919508][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.925175][ T9510] ? __pfx___debug_object_init+0x10/0x10 [ 536.930848][ T9510] __init_work+0x4c/0x60 [ 536.935128][ T9510] rhashtable_init_noprof+0x49f/0x7e0 [ 536.940540][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 536.946121][ T9510] bch2_copygc_thread+0xf6/0xdd0 [ 536.951096][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 536.956689][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.962356][ T9510] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 536.967878][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.973538][ T9510] ? rcu_is_watching+0x12/0xc0 [ 536.978330][ T9510] ? finish_task_switch.isra.0+0x221/0xc10 [ 536.984167][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.989825][ T9510] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.995064][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.000727][ T9510] ? finish_task_switch.isra.0+0x221/0xc10 [ 537.006593][ T9510] ? rcu_is_watching+0x12/0xc0 [ 537.011385][ T9510] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 537.017234][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.022891][ T9510] ? lockdep_hardirqs_on+0x7c/0x110 [ 537.028133][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.033795][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.039455][ T9510] ? __kthread_parkme+0x19e/0x250 [ 537.044531][ T9510] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 537.050122][ T9510] kthread+0x3c5/0x780 [ 537.054232][ T9510] ? __pfx_kthread+0x10/0x10 [ 537.058869][ T9510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.064532][ T9510] ? rcu_is_watching+0x12/0xc0 [ 537.069322][ T9510] ? __pfx_kthread+0x10/0x10 [ 537.073952][ T9510] ret_from_fork+0x5d7/0x6f0 [ 537.078584][ T9510] ? __pfx_kthread+0x10/0x10 [ 537.083213][ T9510] ret_from_fork_asm+0x1a/0x30 [ 537.088013][ T9510] [ 537.091275][ T9510] Kernel Offset: disabled [ 537.095608][ T9510] Rebooting in 86400 seconds..