last executing test programs: 17m51.478347886s ago: executing program 0 (id=1957): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) sched_setscheduler(0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) 17m50.378615534s ago: executing program 0 (id=1963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000080000200000e004000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x20048000) socket$unix(0x1, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) creat(&(0x7f0000000200)='./file1\x00', 0x105) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0) writev(r4, &(0x7f0000000200), 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x6b) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 17m47.343639601s ago: executing program 0 (id=1973): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a", 0xd4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c4", 0x28}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 17m45.523603132s ago: executing program 0 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xfffffffd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c5, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0x1, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0xa, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x2000001, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100005, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x81ef, 0x5, 0x8, 0x83, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff8, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x3, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 17m44.988886656s ago: executing program 0 (id=1984): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @loopback, @private2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000008000000000000000040000000010cfbf5bb7c66ec298c8f0cf9d76417f490cef18b7ea121b6ebf1b9c9dc69f21ee612a79cb551cbde10cf7f6d7ba4d23aa8a200cc9d830a433e31e1ebfd17e8df6f7070ef6fca57611d3e883a0e6d5b0d046cacb2553a3c20b61d7", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000001100)=ANY=[@ANYBLOB="030000000b"]) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r3, 0x703, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x26040000}, 0x4) 17m43.978680439s ago: executing program 0 (id=1989): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, 0x0, 0x0) 17m29.802006158s ago: executing program 3 (id=2020): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17m29.394957545s ago: executing program 3 (id=2023): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="91f8a9849519def28691bbc4173c", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002500)="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", 0x443}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000a80)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac305000000000000004f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0b", 0x6e, 0x10008095, 0x0, 0x0) 17m29.296839664s ago: executing program 3 (id=2025): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 17m27.028432947s ago: executing program 32 (id=1989): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, 0x0, 0x0) 17m26.969669063s ago: executing program 3 (id=2030): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e4de}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 17m26.217537634s ago: executing program 3 (id=2034): mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000280)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0x1) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0x100000a}}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1b, &(0x7f0000000400)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) 17m25.692212817s ago: executing program 3 (id=2039): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x5, 0x5, 0xb}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3ff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x80}}, 0x4080) 17m10.08931845s ago: executing program 33 (id=2039): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x5, 0x5, 0xb}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3ff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x80}}, 0x4080) 8m0.092797551s ago: executing program 2 (id=5086): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044038}, 0x0) 7m59.615729771s ago: executing program 2 (id=5089): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) 7m59.3483018s ago: executing program 2 (id=5091): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x4800) 7m59.027623651s ago: executing program 2 (id=5095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffe1d, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x672}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x9]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x6, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m57.497834195s ago: executing program 2 (id=5102): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000300), 0x0) 7m56.385710983s ago: executing program 2 (id=5106): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dffe) r3 = syz_open_dev$usbfs(&(0x7f0000000d00), 0x76, 0xf01) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045505, &(0x7f0000002a40)) 7m40.611678982s ago: executing program 34 (id=5106): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dffe) r3 = syz_open_dev$usbfs(&(0x7f0000000d00), 0x76, 0xf01) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045505, &(0x7f0000002a40)) 3m51.645800518s ago: executing program 7 (id=6064): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m50.977568612s ago: executing program 7 (id=6067): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xb7, @b={0x9, 0x2, 0x5, 0x1, 0x6, 0xfc, 0x81, {0x63, "a86147dfdf0d1d680efee8f0146bad3b833dcf33bdb0dac19fbc13c44853795e6fe9f91ce8f71352a2eed08f13e4f990b5568a462942a16eb996a20f08b7eb784851cd3f4f5e50c0dee2e97040e53e549894354e5a82fec749c25bf8f56a95f4ea59c9"}, 0x3, 0x9, 0x1, 0x7f, 0x47, "1c86b86eb78a7041094fc729cc1a2789d0ad327959e888018de420bca5008b7a9b6fd94b199a6ce5b9c3aadd4fb1e06b2926e287878ad16ee716d97e8c418789ba70a3fc57f454"}}, 0xba) 3m50.015924335s ago: executing program 7 (id=6069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m45.705165988s ago: executing program 7 (id=6081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m45.353609007s ago: executing program 7 (id=6082): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000280)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) 3m44.280272047s ago: executing program 7 (id=6087): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r4 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) close(r2) 3m28.461334806s ago: executing program 35 (id=6087): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r4 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) close(r2) 15.086927309s ago: executing program 5 (id=6804): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001d40)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x2, 0x4, {0xa, 0x4e22, 0x0, @private1, 0x5d8d}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000740)}, {&(0x7f00000007c0)="d508d252d7692478ebf0efc04c05261d0b80b03e983073a0b7381b5abee11af955a47aa53b2b8fd763ab2dee0663b58a", 0x30}, {&(0x7f0000000840)="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", 0xf75}], 0x3}}], 0x1, 0x810) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000500)='A', 0x1000) 12.966295328s ago: executing program 5 (id=6811): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x2000000000000387, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='10', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000a00000018210000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) 11.566006297s ago: executing program 5 (id=6815): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 10.078907167s ago: executing program 1 (id=6820): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) sendfile(r1, r0, 0x0, 0x20000) 9.824855262s ago: executing program 1 (id=6822): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x2004, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='e:_-group/myevent sched.sched_switch', 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.624774434s ago: executing program 1 (id=6825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40010) 8.267105598s ago: executing program 9 (id=6827): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x2000000000000387, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='10', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000a00000018210000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) 8.01591224s ago: executing program 1 (id=6828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x1, 0x0, &(0x7f0000000300)) 6.968215604s ago: executing program 5 (id=6829): socket$kcm(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x3, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xd, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 6.231817357s ago: executing program 6 (id=6831): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x7c}}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettaction={0x9c, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x383}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x6259ded0a9feb8d1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200400c1}, 0xc4) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f00000008c0)=ANY=[@ANYBLOB="2e2e0f2cfce5759869728660000c3713"]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xc0000008}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 6.168896324s ago: executing program 9 (id=6832): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 5.050856791s ago: executing program 9 (id=6833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.843645232s ago: executing program 6 (id=6834): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) sendfile(r1, r0, 0x0, 0x20000) 4.718246214s ago: executing program 9 (id=6836): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000000d80)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000ac0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 4.63090254s ago: executing program 6 (id=6837): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4.253885466s ago: executing program 6 (id=6840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40010) 4.156832811s ago: executing program 8 (id=6841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062726964676500000d0002800500070001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.122443673s ago: executing program 4 (id=6842): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2aaf2f6616608c3972a6931d2cbb0d8dc96ff4129df6b3fe993cac3e236351d86334f17545ccae8800000000000000", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64], 0x1, 0xa8f, &(0x7f0000001400)="$eJzs3UuMHEfdAPCe3Z31M5/H+WxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRQqJI2D5xI5FlboiHOOUSAUIiF2TlxCUSscQlp8CBA5aRInGABHvQzlbNzvw9k57ZV+/s/H5ST013VXdVz3b39quqCmBsTbQ+663Pq29dOf6Ph/6+beH74+0UjdbnVMfYQupaGp8Ky3t/cjG89cGrp3uFtWKu9ZnHJzvm3VEUxcXiQHGtaBT7r15//Z25p05eOnH54LtvHL2xBqsOAABj51vXjh7e+9c/37v7wzfvP1ZsaU/P5+eNNL4znfcfSyf+C8FULV8/LF0P1DqGTtMh3VQaJkK6yR7pio509Zxua/d8Mf/psNx6n3RbSvKfDNcotVAeGGV5O24UtYmZrvGJiZmZxWvyonVdP12bOX/23HMXKioosOr+9UBRFAcMhnEbmrvaO0HlZalu6PgVACoVnxfe4WK8s7Ay7aVNDZb/zScmes/frb6aZWR8rPf2L/+4/O5yrHf+Zev/60trvP6MlcG3pq1rWo7Vltcr70c703h8jhDfXxr2+JOXNxmWN+gJQL/nCKPyfKFfOSfXuRzL1a/8cbvYrL6Wwvw7fD3Ed+4/8W86Kn9joLd/b7j7/9uWCld5WQyGzT00qzz4ANUquayP7801kxwf3+uL8VtK4reWxG8rid++OLX9Gl+M31EyP4yz3734k+K1WtGzPl6xeP3f2lkGvR+W77PdlcL/G7I88X7ksPfj4nu/w1pp/vF9YtjI/nDq6TNffvaZ64vv/9fa2//ttL0fSOONtG9dSwny/cJ4X7397n+jO5+JPunuDuW5q0f61vc93elqe5aWU3QcZ+4ox77u+Xb1S3dfd7pGSLctDfF0KZ6fbA/z5fOPfFzNv9dUWN96WI/pUI58XNmdwtF6GsNGlbfHfu//5+1zX1GvPXf23JnH0njeTv80Wd+yMP3QOpcbWLlB6//sK7rr/+xsT69PdB4Xdi1Nr3UeFxph+lyf6fNpPP+f+87kttb0mdPfO/fsaq88jLkLL7/y3VPnzp35gS+++OJL+0vVRyZgrc2++ML3Zy+8/MqjZ1849fyZ58+cnz9yZH5u7shX5g/Pts7rZzvP7oHNZOmf/tCzetQFAAAAAAAAAAAAFXnpxPHrf3n7S+8t1v9fqv+X6//nN39z/f8fh/r/sZ58rgef6wHu7hHfShMaWJ0O6epp+P9Q3j0hn71hvk+ksN2PX6r/n7OL7brm8twTpsf2e3O60JzAHe2lTIc2SGJ/gZ9O4eUU/qqACtV+1ntyCsvat87ben4ZWLsUoyn/3XJ7Jrkdk1z/u1+7Tvn4v7v3Yn+02uVkda1HdcKq1xHo7Z8brv3vNRmWGvysvCwdVwyVl8Ww0YZbzWZzPfNrNj+uFw99TQHrp+r+P/N9zxye/+M3ti4MOdnNJ7qPl7H9UliJqvu/rCz/fGNxXNd/wPxXu//Pdv93Ax//Qo95jeXl+5+f33ivI9tif9/8txRd+cf1z+1A7xku/w9T/nltHi765d+9/s1fhvzjA6EBfRTy3z5g/nH9rwybccrwvyn//LM98uCg+S8uoDbRXY543zg//4v3jbNbYf1z257Drv9yO2q8nfKHcTYq/cwOq6v/30vN9e//d4U9DMX3ML6YxvOBML/nEPs7ubW1GKr8+f2K/H9gb1h+reT/m/5/R9tXU1i2P+T+f/P22OgxPtExXu/x227WYw2MqvdX7flfxxtzG+A5ymYYXtpVfRlGYajZ5pY9NJvNSh/yecJYrap//6qvE6rOv+rfv0zs/zeew8f+f2N87P83xsf+f2N8677iR0ud9sbfa3uYP8bH/n9j/D0h39g/8L6S+E+WxO8vib+3JP6+kvhPlcQfLIm/vyT+gZL4u0viHyyJ/0z4i8f4z5bM/1BJ/CMfHz//w5L5N7tcH2Vc1x/GWayfd+f+v8wHvMCGl5//9Nv/95TEA6Prp28eevKZ3367sVj/f7p9PyQ/xzuWxuvp2jleL8X7J5Mp7u00/rcQv9Hvd8A4ie1nxP/vD5fEA6Mrv+dl/4YxVOvdYs+g7Vb1O89ntHwuhZ9P4RdS+GgKZ1I4m8JDKZxbp/KxNp78ze+PvlZbut7fFeIHfR8+1geK7UTND1ieeH9g2PfxYzt+w1pp/susDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZidbn4cP7akVx9a0rx58+eXZ2Ycrj7RSN1udUx1i9PV9RPJbCyRT+In259cGrpzvD2ymsFXNFrai1pxffvNnOaUdRFBeLA8W1olHsv3r99Xfmnjp56cTlg+++cfTG2v0CAAAAsPn9LwAA//+1ThxH") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2\x00', 0x1ff) 3.938915357s ago: executing program 6 (id=6843): socket$kcm(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) close(0x3) 3.821969635s ago: executing program 8 (id=6844): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x2000000000000387, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae543"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='10', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000a00000018210000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) 3.720586407s ago: executing program 4 (id=6845): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 3.600348698s ago: executing program 9 (id=6846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 3.386776143s ago: executing program 4 (id=6847): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x7c}}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettaction={0x9c, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x383}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x6259ded0a9feb8d1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200400c1}, 0xc4) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f00000008c0)=ANY=[@ANYBLOB="2e2e0f2cfce5759869728660000c3713"]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xc0000008}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 2.736688566s ago: executing program 8 (id=6848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.460896448s ago: executing program 8 (id=6849): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0x20000) 1.594841178s ago: executing program 5 (id=6850): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) 1.535790522s ago: executing program 9 (id=6851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) dup3(r2, r1, 0x80000) 1.306820175s ago: executing program 4 (id=6852): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.080003334s ago: executing program 1 (id=6853): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 1.007540112s ago: executing program 4 (id=6854): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs/trace_options\x00', 0x43, 0x0) 405.838693ms ago: executing program 1 (id=6855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40010) 377.249523ms ago: executing program 5 (id=6856): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(0x0, 0x241, 0x1ff) write(r0, &(0x7f0000000540)='12', 0x2) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='1843', 0x4) 353.410699ms ago: executing program 8 (id=6857): fsopen(&(0x7f0000000080)='ext4\x00', 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 304.295226ms ago: executing program 4 (id=6858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xf8efc6028ed0514d}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000000d80)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000ac0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 10.912016ms ago: executing program 8 (id=6859): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = inotify_init1(0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x181002, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) syz_open_pts(r2, 0x20800) r3 = dup(r1) read$alg(r3, &(0x7f0000000740)=""/4096, 0x1000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 0s ago: executing program 6 (id=6860): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x2000000000000387, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae543"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='10', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000a00000018210000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) kernel console output (not intermixed with test programs): lue [ 1380.009540][T24984] TCP: TCP_TX_DELAY enabled [ 1380.359765][T24947] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1380.506001][T24947] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 1380.567478][ T7202] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1380.578089][T24947] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1380.625340][T24947] F2FS-fs (loop8): Start checkpoint disabled! [ 1380.649337][T24947] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 1380.664488][T24947] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1380.960348][T25003] netlink: zone id is out of range [ 1380.966361][T25003] netlink: zone id is out of range [ 1380.972027][T25003] netlink: zone id is out of range [ 1380.977884][T25003] netlink: zone id is out of range [ 1380.983404][T25003] netlink: zone id is out of range [ 1380.988860][T25003] netlink: zone id is out of range [ 1380.994087][T25003] netlink: zone id is out of range [ 1380.999597][T25003] netlink: zone id is out of range [ 1382.073769][T25005] loop6: detected capacity change from 0 to 8192 [ 1382.519658][T25012] loop1: detected capacity change from 0 to 512 [ 1382.599956][T25012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.643924][T25012] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.925461][T18197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.998634][T25017] syzkaller0: entered promiscuous mode [ 1383.021021][T25017] syzkaller0: entered allmulticast mode [ 1383.223369][T25031] netlink: 'syz.7.5971': attribute type 12 has an invalid length. [ 1383.298351][T24992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1383.773428][T25046] loop7: detected capacity change from 0 to 128 [ 1383.814916][T25046] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1383.827085][T25043] loop8: detected capacity change from 0 to 4096 [ 1383.918319][T25043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1384.246679][T25046] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1384.972559][ T5628] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1385.012156][T25051] net_ratelimit: 326 callbacks suppressed [ 1385.012174][T25051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.078768][T21930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.389655][ T7045] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1385.411704][T25063] loop6: detected capacity change from 0 to 512 [ 1385.516386][T25063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.547053][T25063] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.629439][T25058] loop8: detected capacity change from 0 to 8192 [ 1385.694735][T22813] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.813146][ T1027] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1386.191408][T25047] loop4: detected capacity change from 0 to 40427 [ 1386.233925][T25047] F2FS-fs (loop4): invalid crc value [ 1386.647203][T25087] syzkaller0: entered promiscuous mode [ 1386.663396][T25087] syzkaller0: entered allmulticast mode [ 1386.685902][T25047] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1386.743481][T25047] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 1386.768605][T25047] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1386.796806][T25047] F2FS-fs (loop4): Start checkpoint disabled! [ 1386.885035][T25047] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 1387.666543][T25098] loop4: detected capacity change from 0 to 4096 [ 1387.708086][T25098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.746479][T25105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1388.228899][ T5628] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1388.573386][T25070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1388.706863][T17327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.849289][T25111] loop6: detected capacity change from 0 to 256 [ 1388.883669][T25111] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7fdff6b1, utbl_chksum : 0xe619d30d) [ 1389.160087][T25113] loop8: detected capacity change from 0 to 512 [ 1389.311604][T25113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.371645][T25113] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.471999][T25113] netlink: 324 bytes leftover after parsing attributes in process `syz.8.5998'. [ 1391.091154][T25138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6003'. [ 1391.100601][T21930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.317679][T25144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.421646][T25140] loop1: detected capacity change from 0 to 8192 [ 1391.461417][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6009'. [ 1391.636038][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6009'. [ 1391.860191][ T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1392.034686][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1392.051658][ T29] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1392.091615][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1392.121050][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1392.164472][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1392.189280][T25136] loop4: detected capacity change from 0 to 40427 [ 1392.197619][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1392.201663][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.232209][ T29] usb 8-1: Product: syz [ 1392.246130][ T29] usb 8-1: Manufacturer: syz [ 1392.259898][T25136] F2FS-fs (loop4): invalid crc value [ 1392.270440][ T29] usb 8-1: SerialNumber: syz [ 1392.299426][ T29] usb 8-1: config 0 descriptor?? [ 1392.314088][T25149] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1392.566322][ T29] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1392.588986][T25136] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1392.625830][ T29] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input39 [ 1392.684953][T25136] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 1392.725532][T25136] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1392.756502][T25136] F2FS-fs (loop4): Start checkpoint disabled! [ 1392.910144][T25159] syzkaller0: entered promiscuous mode [ 1392.931143][T25159] syzkaller0: entered allmulticast mode [ 1392.952861][T25136] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 1392.999566][ C1] powermate: config urb returned -71 [ 1393.007641][ C1] powermate: config urb returned -71 [ 1393.013770][ C1] powermate: config urb returned -71 [ 1393.021168][ C1] powermate: config urb returned -71 [ 1393.028320][ T29] usb 8-1: USB disconnect, device number 17 [ 1393.034317][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1393.297009][ T7206] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1393.816499][T25180] loop1: detected capacity change from 0 to 32768 [ 1394.879746][T25180] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1395.186904][T18197] ocfs2: Unmounting device (7,1) on (node local) [ 1395.244269][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6023'. [ 1395.289743][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6023'. [ 1395.766455][T25200] loop1: detected capacity change from 0 to 64 [ 1396.041723][T25200] hfs: get root inode failed [ 1396.149184][T25165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1396.808076][T25195] loop7: detected capacity change from 0 to 8192 [ 1397.129612][T25206] syzkaller0: entered promiscuous mode [ 1397.160766][T25206] syzkaller0: entered allmulticast mode [ 1397.468307][T25218] netlink: 'syz.5.6032': attribute type 12 has an invalid length. [ 1398.011011][T25230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1398.030730][T25226] loop6: detected capacity change from 0 to 32768 [ 1398.074714][T25226] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1398.288616][T22813] ocfs2: Unmounting device (7,6) on (node local) [ 1398.472571][T25242] loop7: detected capacity change from 0 to 512 [ 1398.538248][T25242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.568430][T25242] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.611995][T25242] netlink: 324 bytes leftover after parsing attributes in process `syz.7.6035'. [ 1398.672006][T25228] loop5: detected capacity change from 0 to 32768 [ 1398.723712][T25228] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1398.757659][T25240] loop1: detected capacity change from 0 to 4096 [ 1398.789196][T23474] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.885546][ T7202] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1399.142937][T16823] ocfs2: Unmounting device (7,5) on (node local) [ 1400.313613][T25281] netlink: 'syz.6.6046': attribute type 12 has an invalid length. [ 1400.337821][T25279] syzkaller0: entered promiscuous mode [ 1400.349031][T25279] syzkaller0: entered allmulticast mode [ 1400.928353][T25289] loop4: detected capacity change from 0 to 8192 [ 1401.593678][T25250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1401.883421][T25293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1402.316154][T24107] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1402.496607][T24107] usb 8-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1402.532178][T24107] usb 8-1: config 0 has no interfaces? [ 1402.558674][T24107] usb 8-1: config 0 has no interfaces? [ 1402.579334][T24107] usb 8-1: config 0 has no interfaces? [ 1402.595762][T24107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.642179][T24107] usb 8-1: config 0 descriptor?? [ 1402.908300][T25311] loop4: detected capacity change from 0 to 32768 [ 1402.957460][T25311] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1403.899015][T24107] usb 8-1: USB disconnect, device number 18 [ 1404.336328][T17327] ocfs2: Unmounting device (7,4) on (node local) [ 1404.709790][T25330] netlink: 'syz.5.6061': attribute type 12 has an invalid length. [ 1404.810183][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1404.974532][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1404.991459][ T24] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1405.040975][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1405.070681][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1405.122440][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1405.152309][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1405.179385][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.198948][ T24] usb 7-1: Product: syz [ 1405.203815][ T24] usb 7-1: Manufacturer: syz [ 1405.214128][ T24] usb 7-1: SerialNumber: syz [ 1405.233230][ T24] usb 7-1: config 0 descriptor?? [ 1405.243385][T25327] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1405.490963][ T24] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1405.504837][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input40 [ 1405.700793][T25346] syzkaller0: entered promiscuous mode [ 1405.706634][T25346] syzkaller0: entered allmulticast mode [ 1405.723285][T25345] loop5: detected capacity change from 0 to 32768 [ 1405.732769][T25345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6066 (25345) [ 1405.770360][T25345] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1405.780576][T25345] BTRFS info (device loop5): using sha256 checksum algorithm [ 1405.913462][ C1] powermate: config urb returned -71 [ 1405.915140][T24107] usb 7-1: USB disconnect, device number 11 [ 1405.918788][ C1] powermate: usb_submit_urb(config) failed [ 1405.924883][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1406.226075][T25345] BTRFS info (device loop5): enabling ssd optimizations [ 1406.234604][T25345] BTRFS info (device loop5): turning on sync discard [ 1406.242802][T25345] BTRFS info (device loop5): enabling free space tree [ 1406.277129][ T30] audit: type=1800 audit(1786802169.728:187): pid=25345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6066" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1408.086898][T16823] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1408.317962][T25381] syzkaller0: entered promiscuous mode [ 1408.364493][T25381] syzkaller0: entered allmulticast mode [ 1408.431419][T25381] tipc: Started in network mode [ 1408.471831][T25381] tipc: Node identity 960b544b7a3a, cluster identity 4711 [ 1408.535291][T25381] tipc: Enabled bearer , priority 0 [ 1409.094601][T16825] Bluetooth: hci6: command 0x0406 tx timeout [ 1409.471023][T25384] tipc: Resetting bearer [ 1409.542857][T25379] tipc: Resetting bearer [ 1409.759975][T25379] tipc: Disabling bearer [ 1409.962302][T25400] loop5: detected capacity change from 0 to 32768 [ 1409.978931][T25400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6077 (25400) [ 1409.997123][T25400] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1410.007398][T25400] BTRFS info (device loop5): using sha256 checksum algorithm [ 1410.123623][T25400] BTRFS info (device loop5): enabling ssd optimizations [ 1410.131315][T25400] BTRFS info (device loop5): turning on sync discard [ 1410.138199][T25400] BTRFS info (device loop5): enabling free space tree [ 1410.145049][T25400] BTRFS info (device loop5): use zlib compression, level 3 [ 1410.394488][T24108] tipc: Node number set to 3962655819 [ 1410.995920][T16823] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1411.148241][T25421] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6081'. [ 1411.197093][T25423] netlink: 'syz.1.6078': attribute type 12 has an invalid length. [ 1412.001077][T25441] loop8: detected capacity change from 0 to 256 [ 1412.080776][T25441] exfat: Deprecated parameter 'namecase' [ 1412.399536][T25441] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1413.659686][T25449] loop6: detected capacity change from 0 to 256 [ 1415.225812][T25463] syzkaller0: entered promiscuous mode [ 1415.250495][T25463] syzkaller0: entered allmulticast mode [ 1415.251704][T25467] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6094'. [ 1415.292573][T25463] tipc: Started in network mode [ 1415.315768][T25463] tipc: Node identity 0a64f6cb522e, cluster identity 4711 [ 1415.338688][T25463] tipc: Enabled bearer , priority 0 [ 1415.438899][T25468] tipc: Resetting bearer [ 1415.493214][T25462] tipc: Resetting bearer [ 1415.584152][T25462] tipc: Disabling bearer [ 1415.820141][T25458] loop5: detected capacity change from 0 to 32768 [ 1415.863897][T25458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6092 (25458) [ 1415.923114][T25458] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1415.953977][T25458] BTRFS info (device loop5): using sha256 checksum algorithm [ 1416.002624][T25476] siw: device registration error -23 [ 1416.092997][T25482] loop8: detected capacity change from 0 to 512 [ 1416.315122][T25458] BTRFS info (device loop5): enabling ssd optimizations [ 1416.374379][T25458] BTRFS info (device loop5): turning on sync discard [ 1416.414948][T25482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1416.445508][T25458] BTRFS info (device loop5): enabling free space tree [ 1416.452566][T25458] BTRFS info (device loop5): use zlib compression, level 3 [ 1416.703996][T25505] loop6: detected capacity change from 0 to 256 [ 1416.735556][T25505] exfat: Deprecated parameter 'namecase' [ 1416.883201][T25505] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1417.077663][ T30] audit: type=1800 audit(1786802180.528:188): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6099" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 1417.458392][T21930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.632022][T25512] loop6: detected capacity change from 0 to 4096 [ 1417.684978][T25512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1417.730907][T25512] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 1417.897232][T25512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1418.057272][T25512] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 1418.097726][T25512] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1418.226923][T16823] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1418.347929][T22813] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.692308][T25520] loop8: detected capacity change from 0 to 1024 [ 1418.767267][T25510] loop1: detected capacity change from 0 to 32768 [ 1418.858552][T25510] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1420.429366][T18197] ocfs2: Unmounting device (7,1) on (node local) [ 1420.969521][T25547] loop5: detected capacity change from 0 to 256 [ 1421.139012][T25547] exfat: Deprecated parameter 'namecase' [ 1421.195669][T19953] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1421.246197][T25547] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1421.374983][T19953] usb 5-1: Using ep0 maxpacket: 8 [ 1421.403483][T19953] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1421.450386][T19953] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1421.501693][T19953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.539024][T19953] usb 5-1: config 0 has no interface number 0 [ 1421.571013][T19953] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1421.635633][T19953] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.694006][T19953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.720952][T25532] loop6: detected capacity change from 0 to 32768 [ 1421.765320][T19953] usb 5-1: config 0 descriptor?? [ 1421.839698][T19953] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1421.995201][T25532] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1422.025562][T19953] usb 5-1: USB disconnect, device number 38 [ 1422.092701][T25532] XFS (loop6): AIL initialisation failed: error -12 [ 1422.216126][T25532] XFS (loop6): log mount failed [ 1422.397272][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.403716][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.954695][T25578] loop1: detected capacity change from 0 to 131072 [ 1423.976948][T25578] F2FS-fs (loop1): invalid crc value [ 1424.070081][T25578] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1424.089007][T25578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1426.000626][T25597] loop6: detected capacity change from 0 to 8192 [ 1426.018644][T25597] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1426.051024][T25597] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 1426.059308][T25597] FAT-fs (loop6): Filesystem has been set read-only [ 1426.314684][T25599] block device autoloading is deprecated and will be removed. [ 1427.016769][T25603] loop6: detected capacity change from 0 to 256 [ 1428.119439][T25603] exfat: Deprecated parameter 'namecase' [ 1428.240479][T25603] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1428.890328][T16825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1428.898956][T16825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1428.913744][T16825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1428.933551][T16825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1428.944815][T16825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1430.645702][T25629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6142'. [ 1430.737263][T25631] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6142'. [ 1430.797588][T25632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6142'. [ 1431.017656][T16825] Bluetooth: hci0: command tx timeout [ 1431.283170][T25615] loop6: detected capacity change from 0 to 32768 [ 1431.479111][T25615] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1431.537048][T25623] loop4: detected capacity change from 0 to 32768 [ 1431.685131][T25623] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1431.700679][ T1158] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.958435][T25623] XFS (loop4): Ending clean mount [ 1432.072325][T25653] tipc: Enabled bearer , priority 0 [ 1432.123870][T17327] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1432.161112][T25653] tipc: Resetting bearer [ 1432.806164][ T1158] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.061704][T25660] syzkaller0: entered promiscuous mode [ 1433.067448][T25660] syzkaller0: entered allmulticast mode [ 1433.096472][T16825] Bluetooth: hci0: command tx timeout [ 1433.113089][T25648] tipc: Resetting bearer [ 1433.153991][T25648] tipc: Disabling bearer [ 1433.361960][T22813] ocfs2: Unmounting device (7,6) on (node local) [ 1433.386679][ T1158] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.705730][ T1158] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.041562][T25672] loop4: detected capacity change from 0 to 32768 [ 1434.114081][T25672] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1434.161575][T25677] loop1: detected capacity change from 0 to 4096 [ 1434.357102][T25677] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1434.375400][T25685] loop6: detected capacity change from 0 to 256 [ 1434.438114][T25677] NILFS (loop1): trying rollback from an earlier position [ 1434.457886][T25685] exfat: Deprecated parameter 'namecase' [ 1434.661020][T25677] NILFS (loop1): recovery complete [ 1434.750229][T25685] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1434.753294][T25687] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1435.062709][T17327] ocfs2: Unmounting device (7,4) on (node local) [ 1435.176460][T16825] Bluetooth: hci0: command tx timeout [ 1435.347321][T25674] loop5: detected capacity change from 0 to 32768 [ 1435.455890][T25694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1435.470096][T25674] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1435.509134][T25694] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1435.642161][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1435.661798][T25674] XFS (loop5): Ending clean mount [ 1435.802794][ T1158] bridge_slave_1: left allmulticast mode [ 1435.862111][ T1158] bridge_slave_1: left promiscuous mode [ 1435.905811][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.973660][T25717] jffs2: notice: (25717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1436.015413][ T1158] bridge_slave_0: left allmulticast mode [ 1436.035017][ T1158] bridge_slave_0: left promiscuous mode [ 1436.068303][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.182017][T16823] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1436.237316][T25724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1436.290435][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1436.300911][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1436.377760][T25726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1437.254505][T16825] Bluetooth: hci0: command tx timeout [ 1437.789261][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.826041][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.859365][ T1158] bond0 (unregistering): Released all slaves [ 1438.081198][ T5266] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1438.114671][ T5908] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.142889][T25616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.174677][T25616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.220415][T25616] bridge_slave_0: entered allmulticast mode [ 1438.278554][T25616] bridge_slave_0: entered promiscuous mode [ 1438.297857][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6161'. [ 1438.331934][ T1158] tipc: Left network mode [ 1438.334774][T25616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.373150][T25616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.425561][T25616] bridge_slave_1: entered allmulticast mode [ 1438.467553][T25616] bridge_slave_1: entered promiscuous mode [ 1438.918369][T25616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.948831][T25743] syzkaller0: entered promiscuous mode [ 1438.981436][T25743] syzkaller0: entered allmulticast mode [ 1439.108460][ T7206] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.120640][T25757] loop1: detected capacity change from 0 to 256 [ 1439.187363][T25747] tipc: Enabled bearer , priority 0 [ 1439.207633][T25757] exfat: Deprecated parameter 'namecase' [ 1439.324728][ T7202] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.363743][T25757] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1439.525701][T25616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.538612][T25738] loop5: detected capacity change from 0 to 40427 [ 1439.573458][T25756] tipc: Resetting bearer [ 1439.664434][ T7045] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.717030][T25742] tipc: Resetting bearer [ 1439.832040][T25769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6167'. [ 1439.895346][T25742] tipc: Disabling bearer [ 1439.932735][T25774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6167'. [ 1439.953419][T25738] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1439.992704][T25751] loop6: detected capacity change from 0 to 32768 [ 1439.993561][T25738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1440.008101][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6167'. [ 1440.152925][T25751] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1440.219247][T25738] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 1440.293998][T25767] tipc: Started in network mode [ 1440.342539][T25767] tipc: Node identity 4ee47d9b7277, cluster identity 4711 [ 1440.389691][T25767] tipc: Enabled bearer , priority 0 [ 1440.473505][T25784] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6166'. [ 1440.518505][T25771] syzkaller0: entered promiscuous mode [ 1440.529234][T22813] ocfs2: Unmounting device (7,6) on (node local) [ 1440.553385][T25771] syzkaller0: entered allmulticast mode [ 1440.661680][T25616] team0: Port device team_slave_0 added [ 1440.733285][T25616] team0: Port device team_slave_1 added [ 1440.763316][T25759] tipc: Resetting bearer [ 1440.871201][T25805] loop4: detected capacity change from 0 to 512 [ 1440.915860][T25759] tipc: Disabling bearer [ 1440.965889][T25805] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1441.026884][T25805] System zones: 0-2, 18-18, 34-35 [ 1441.163170][T25805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.251378][T25805] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.298411][ T1158] hsr_slave_0: left promiscuous mode [ 1441.333078][ T1158] hsr_slave_1: left promiscuous mode [ 1441.352958][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.374728][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.397992][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.413090][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.449007][ T1158] veth1_macvtap: left promiscuous mode [ 1441.463809][T17327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.473867][ T1158] veth0_macvtap: left promiscuous mode [ 1441.482090][ T1158] veth1_vlan: left promiscuous mode [ 1441.487574][ T1158] veth0_vlan: left promiscuous mode [ 1441.739160][T25823] loop5: detected capacity change from 0 to 4096 [ 1441.762771][T25823] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1441.906214][T25823] ntfs3(loop5): ino=19, mi_enum_attr [ 1441.917994][T25823] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1441.971177][T25823] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1442.211877][T25833] loop8: detected capacity change from 0 to 256 [ 1442.335501][T25833] exfat: Deprecated parameter 'namecase' [ 1442.502695][T25833] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1442.592666][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 1442.678979][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 1443.126502][T25841] loop8: detected capacity change from 0 to 32768 [ 1443.141813][ T5266] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1443.170844][T25841] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1443.269116][T25841] XFS (loop8): Ending clean mount [ 1443.357703][T25845] tipc: Enabled bearer , priority 0 [ 1443.389408][T25842] syzkaller0: entered promiscuous mode [ 1443.410086][T25842] syzkaller0: entered allmulticast mode [ 1443.455990][T25616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.466867][T25861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6182'. [ 1443.528032][T25616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.584896][T25616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.603932][T25616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.624496][T25616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.674930][T25867] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6182'. [ 1443.731581][T25616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.322129][T25870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6182'. [ 1444.693286][ T3091] tipc: Node number set to 1250717568 [ 1444.900949][T25878] tipc: Enabled bearer , priority 0 [ 1444.952733][T25876] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1445.035076][T21930] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1445.106608][T25616] hsr_slave_0: entered promiscuous mode [ 1445.139153][T25616] hsr_slave_1: entered promiscuous mode [ 1445.218047][T25858] tipc: Resetting bearer [ 1445.383824][T25858] tipc: Disabling bearer [ 1445.456994][T25866] loop1: detected capacity change from 0 to 32768 [ 1445.525605][T25875] tipc: Disabling bearer [ 1445.653000][T25866] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1446.316685][T18197] ocfs2: Unmounting device (7,1) on (node local) [ 1446.447863][T25898] loop4: detected capacity change from 0 to 256 [ 1446.455406][T25898] exfat: Deprecated parameter 'namecase' [ 1446.470096][T25898] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1446.992800][T25922] netlink: 277 bytes leftover after parsing attributes in process `syz.5.6195'. [ 1447.514647][T25900] pim6reg: entered allmulticast mode [ 1448.002342][T25947] trusted_key: encrypted_key: master key parameter '' is invalid [ 1448.232003][ T5266] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1448.412783][T25955] tipc: Enabled bearer , priority 0 [ 1448.593321][T25962] loop5: detected capacity change from 0 to 256 [ 1448.600514][T25962] exfat: Deprecated parameter 'namecase' [ 1448.628831][T25962] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1448.876343][T25951] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6202'. [ 1448.914873][T25952] tipc: Resetting bearer [ 1448.937440][T25945] loop6: detected capacity change from 0 to 32768 [ 1448.943999][T25956] syzkaller0: entered promiscuous mode [ 1448.976934][T25956] syzkaller0: entered allmulticast mode [ 1449.003140][T25945] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1449.040862][T25950] tipc: Resetting bearer [ 1449.115478][T25950] tipc: Disabling bearer [ 1449.259340][T25973] netlink: 'syz.4.6209': attribute type 4 has an invalid length. [ 1449.314966][T25973] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1449.329954][T22813] ocfs2: Unmounting device (7,6) on (node local) [ 1449.421204][T25978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1449.542307][T25978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.549770][T25978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.731868][T25616] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1449.801152][T25616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1449.850440][T25616] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1450.229170][T25996] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 1451.033669][T25981] loop8: detected capacity change from 0 to 32768 [ 1451.079391][T25981] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6212 (25981) [ 1451.225566][T25981] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1451.330081][ T3091] IPVS: starting estimator thread 0... [ 1451.349354][T25981] BTRFS info (device loop8): using crc32c checksum algorithm [ 1451.454619][T26010] IPVS: using max 23 ests per chain, 55200 per kthread [ 1451.594772][T26008] loop4: detected capacity change from 0 to 256 [ 1451.716675][T26008] exfat: Deprecated parameter 'namecase' [ 1451.896657][T26008] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1452.028040][T25616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1452.072808][T25981] BTRFS info (device loop8): enabling ssd optimizations [ 1452.085245][T25616] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1452.164548][T25981] BTRFS info (device loop8): turning on flush-on-commit [ 1452.178830][T25616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1452.199111][T25981] BTRFS info (device loop8): enabling free space tree [ 1452.232904][T25616] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1452.245294][T25981] BTRFS info (device loop8): enabling auto defrag [ 1452.292949][T25981] BTRFS info (device loop8): use lzo compression, level 1 [ 1452.316699][T25616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1452.351706][T25981] BTRFS info (device loop8): max_inline set to 4096 [ 1452.369530][T26033] loop5: detected capacity change from 0 to 1024 [ 1452.405612][T26033] EXT4-fs: Ignoring removed nobh option [ 1452.427271][T26033] EXT4-fs: Ignoring removed bh option [ 1452.448055][T26033] EXT4-fs: Ignoring removed nobh option [ 1452.480939][T26033] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1452.557735][T21930] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1452.576857][T26033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1452.762374][T26049] syzkaller0: entered promiscuous mode [ 1452.793888][T26049] syzkaller0: entered allmulticast mode [ 1452.817507][ T5266] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1452.990820][T16823] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /416/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1453.090276][T16823] EXT4-fs (loop5): Remounting filesystem read-only [ 1453.157472][T16823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.411788][T26078] loop5: detected capacity change from 0 to 256 [ 1454.427003][T26078] exfat: Deprecated parameter 'namecase' [ 1454.649498][T26078] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1456.101891][T26090] loop8: detected capacity change from 0 to 1024 [ 1456.127483][T26090] EXT4-fs: Ignoring removed nobh option [ 1456.157233][T26090] EXT4-fs: Ignoring removed bh option [ 1456.189338][T26090] EXT4-fs: Ignoring removed nobh option [ 1456.219450][T26090] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1456.348085][T26090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1456.483573][T21930] EXT4-fs error (device loop8): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /162/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1456.516992][T21930] EXT4-fs (loop8): Remounting filesystem read-only [ 1456.549738][T21930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.275955][T26103] loop8: detected capacity change from 0 to 32768 [ 1457.384738][T26103] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6239 (26103) [ 1457.442600][T26103] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1457.453220][T26103] BTRFS info (device loop8): using sha256 checksum algorithm [ 1457.565243][T26103] BTRFS info (device loop8): enabling ssd optimizations [ 1457.589694][T26103] BTRFS info (device loop8): turning on sync discard [ 1457.597985][T26103] BTRFS info (device loop8): enabling free space tree [ 1457.632476][ T30] audit: type=1800 audit(1786802221.078:189): pid=26103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6239" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1458.039681][T26131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6241'. [ 1458.117531][T21930] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1460.004224][T25616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.638091][T26148] jffs2: notice: (26148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1461.122389][T26148] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 1461.186430][T25616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.213776][T26155] loop8: detected capacity change from 0 to 4096 [ 1461.431947][T26157] loop4: detected capacity change from 0 to 40427 [ 1461.441468][T26155] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512). [ 1461.473988][T26157] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1461.483452][T26157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1461.484657][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.499063][ T7202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.706718][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.713873][ T7202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.734251][T26157] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1461.763757][T26157] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1461.771001][T26157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1462.510228][T25616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1462.523102][T25616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1462.729381][T26157] syz.4.6250: attempt to access beyond end of device [ 1462.729381][T26157] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1462.983176][T26174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1463.274914][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1463.430880][T26155] overlayfs: upper fs does not support tmpfile. [ 1463.474805][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1463.499874][T26155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1463.516277][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1463.567307][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1463.614479][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1463.651223][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1463.706056][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1463.735580][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.791286][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.453409][T25616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.453792][T26182] loop5: detected capacity change from 0 to 32768 [ 1464.525677][T26182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6256 (26182) [ 1464.651830][T26182] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1464.692750][T26182] BTRFS info (device loop5): using crc32c checksum algorithm [ 1464.795719][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1464.899628][T26182] BTRFS info (device loop5): enabling ssd optimizations [ 1464.924408][T26182] BTRFS info (device loop5): turning on flush-on-commit [ 1464.933146][T26182] BTRFS info (device loop5): enabling free space tree [ 1464.941016][T26182] BTRFS info (device loop5): enabling auto defrag [ 1464.947932][T26182] BTRFS info (device loop5): use lzo compression, level 1 [ 1464.955392][T26182] BTRFS info (device loop5): max_inline set to 4096 [ 1465.250716][T16823] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1465.479672][T26231] bridge1: entered promiscuous mode [ 1465.516582][T26231] bridge1: entered allmulticast mode [ 1465.614896][T26231] team0: Port device bridge1 added [ 1465.661078][ T24] usb 7-1: usb_control_msg returned -32 [ 1465.686561][ T24] usbtmc 7-1:16.0: can't read capabilities [ 1465.696480][T26233] bridge0: port 3(team0) entered blocking state [ 1465.726328][T26233] bridge0: port 3(team0) entered disabled state [ 1465.773567][T26233] team0: entered allmulticast mode [ 1465.805909][T26233] team_slave_0: entered allmulticast mode [ 1465.830147][T26233] team_slave_1: entered allmulticast mode [ 1465.938480][T26233] team0: entered promiscuous mode [ 1465.965127][T26233] team_slave_0: entered promiscuous mode [ 1465.989593][T26233] team_slave_1: entered promiscuous mode [ 1466.464763][T25616] veth0_vlan: entered promiscuous mode [ 1466.522619][T25616] veth1_vlan: entered promiscuous mode [ 1466.628556][T25616] veth0_macvtap: entered promiscuous mode [ 1466.675260][T25616] veth1_macvtap: entered promiscuous mode [ 1466.678308][T26232] loop8: detected capacity change from 0 to 32768 [ 1466.705296][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1466.759475][T26262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1466.789405][T26232] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1466.813834][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1466.843374][T25616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.892317][T26232] XFS (loop8): Ending clean mount [ 1466.911448][T25616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.010120][T26232] XFS (loop8): Quotacheck needed: Please wait. [ 1467.027559][ T7202] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.079858][ T7202] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.136052][ T7202] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.236359][ T7202] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.236898][T26268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1467.326897][T26268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1467.427584][T26232] XFS (loop8): Quotacheck: Done. [ 1467.467166][ T5908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.487899][ T5908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.652471][ T7202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.689247][ T7202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.718259][T21930] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1468.607718][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1468.725259][ T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1468.794424][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1468.811797][ T24] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1468.824202][T24108] usb 7-1: USB disconnect, device number 12 [ 1468.833936][ T24] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1468.851727][T26296] syzkaller0: entered promiscuous mode [ 1468.865609][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.893486][T26296] syzkaller0: entered allmulticast mode [ 1468.901532][ T29] usb 9-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1468.910965][ T24] usb 10-1: config 0 has no interface number 0 [ 1468.923718][ T24] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1468.943801][ T29] usb 9-1: config 0 has no interfaces? [ 1468.958611][T26297] tipc: Enabled bearer , priority 0 [ 1468.971655][ T29] usb 9-1: config 0 has no interfaces? [ 1468.988644][ T29] usb 9-1: config 0 has no interfaces? [ 1468.996485][ T24] usb 10-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1469.013533][T26296] tipc: Resetting bearer [ 1469.027034][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.057775][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.078067][ T29] usb 9-1: config 0 descriptor?? [ 1469.103741][T26295] tipc: Resetting bearer [ 1469.116090][ T24] usb 10-1: config 0 descriptor?? [ 1469.146009][ T24] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1469.191078][T26295] tipc: Disabling bearer [ 1469.497752][T24108] usb 9-1: USB disconnect, device number 6 [ 1469.597479][T18150] usb 10-1: USB disconnect, device number 2 [ 1469.790609][T26300] loop5: detected capacity change from 0 to 4096 [ 1472.359463][T26318] loop4: detected capacity change from 0 to 8192 [ 1472.369973][T26318] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1472.396850][T26318] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 1472.405240][T26318] FAT-fs (loop4): Filesystem has been set read-only [ 1473.393458][ T5908] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1473.480016][T26342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6297'. [ 1473.718968][T26312] loop1: detected capacity change from 0 to 32768 [ 1473.791057][T26312] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1473.877330][T26312] XFS (loop1): Ending clean mount [ 1473.931437][T26312] XFS (loop1): Quotacheck needed: Please wait. [ 1474.165362][T26366] loop8: detected capacity change from 0 to 4096 [ 1474.215861][T26312] XFS (loop1): Quotacheck: Done. [ 1474.305762][T26366] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1474.408757][T18197] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1475.666852][T26386] loop1: detected capacity change from 0 to 4096 [ 1476.183715][T26334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1477.420211][T26397] loop4: detected capacity change from 0 to 32768 [ 1477.430021][T26397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6304 (26397) [ 1477.452853][T26397] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1477.463978][T26397] BTRFS info (device loop4): using sha256 checksum algorithm [ 1478.171408][T26419] tipc: Started in network mode [ 1478.191750][T26400] loop6: detected capacity change from 0 to 4096 [ 1478.273497][T26419] tipc: Node identity 1e9ba2b1db16, cluster identity 4711 [ 1478.278241][T26397] BTRFS info (device loop4): enabling ssd optimizations [ 1478.288403][T26397] BTRFS info (device loop4): turning on sync discard [ 1478.295232][T26397] BTRFS info (device loop4): enabling free space tree [ 1478.313933][T26400] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1478.367941][T26419] tipc: Enabled bearer , priority 0 [ 1478.413279][ T30] audit: type=1800 audit(1786802241.848:190): pid=26397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6304" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1478.591237][T26418] syzkaller0: entered promiscuous mode [ 1478.719847][T26418] syzkaller0: entered allmulticast mode [ 1478.817119][T26400] ntfs3(loop6): ino=19, mi_enum_attr [ 1478.971319][T26400] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1478.996895][T26418] netlink: 116 bytes leftover after parsing attributes in process `syz.9.6307'. [ 1479.052429][T26418] tipc: Resetting bearer [ 1479.079478][T26400] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1479.159662][T26406] tipc: Resetting bearer [ 1479.321077][T26406] tipc: Disabling bearer [ 1479.447394][T17327] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1480.392937][T26420] loop5: detected capacity change from 0 to 32768 [ 1481.009141][T26420] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop5": -EINTR [ 1481.069499][T26444] loop6: detected capacity change from 0 to 4096 [ 1481.171896][T26444] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1482.267445][T26434] loop1: detected capacity change from 0 to 32768 [ 1482.340284][T26434] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1482.505253][T26472] loop8: detected capacity change from 0 to 4096 [ 1482.543636][T26472] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1482.596717][T26434] XFS (loop1): Ending clean mount [ 1482.660083][T26434] XFS (loop1): Quotacheck needed: Please wait. [ 1482.699665][T26472] ntfs3(loop8): ino=19, mi_enum_attr [ 1482.739868][T26472] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1482.810550][T26472] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1482.900504][T26497] syzkaller0: entered promiscuous mode [ 1482.952651][T26497] syzkaller0: entered allmulticast mode [ 1483.079756][T26434] XFS (loop1): Quotacheck: Done. [ 1483.236436][T18197] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1483.829270][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.837268][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.967387][T26513] loop4: detected capacity change from 0 to 4096 [ 1484.055638][T26513] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1484.176821][T26517] loop1: detected capacity change from 0 to 8192 [ 1484.204847][T26517] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1484.233673][T26517] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 1484.241787][T26517] FAT-fs (loop1): Filesystem has been set read-only [ 1485.150878][T26493] loop5: detected capacity change from 0 to 40427 [ 1485.571873][T26537] netlink: zone id is out of range [ 1485.615853][T26537] netlink: zone id is out of range [ 1485.623250][T26506] loop8: detected capacity change from 0 to 32768 [ 1485.669066][T26537] netlink: zone id is out of range [ 1485.679809][T26493] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1485.734903][T26506] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1485.776245][T26537] netlink: zone id is out of range [ 1485.778309][T26493] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1485.795350][T26537] netlink: zone id is out of range [ 1485.836597][T26537] netlink: zone id is out of range [ 1485.874743][T26537] netlink: zone id is out of range [ 1485.936418][T26537] netlink: zone id is out of range [ 1485.989091][T26537] netlink: zone id is out of range [ 1486.007441][T26537] netlink: zone id is out of range [ 1486.008459][T26506] XFS (loop8): Ending clean mount [ 1486.153241][T26506] XFS (loop8): Quotacheck needed: Please wait. [ 1486.492948][T26506] XFS (loop8): Quotacheck: Done. [ 1486.656063][T21930] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1487.443015][T26571] bridge2: entered promiscuous mode [ 1487.483686][T26571] bridge2: entered allmulticast mode [ 1487.572098][T26571] team0: Port device bridge2 added [ 1487.747071][T26578] syzkaller0: entered promiscuous mode [ 1487.776676][T26578] syzkaller0: entered allmulticast mode [ 1487.841588][T26573] loop6: detected capacity change from 0 to 4096 [ 1487.916109][T26579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input41 [ 1488.020631][T26562] loop4: detected capacity change from 0 to 32768 [ 1488.176848][T26584] loop9: detected capacity change from 0 to 40427 [ 1488.292860][T26584] F2FS-fs (loop9): invalid crc value [ 1488.344564][T26573] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1488.365743][T26562] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1488.402533][T26584] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1488.417997][T26584] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 1488.426495][T26584] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1488.437345][T26584] F2FS-fs (loop9): Start checkpoint disabled! [ 1488.456606][T26584] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 1488.465889][T26584] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1488.768678][T26562] XFS (loop4): Ending clean mount [ 1488.946215][T26562] XFS (loop4): Quotacheck needed: Please wait. [ 1488.995854][ T6202] kworker/u8:15: attempt to access beyond end of device [ 1488.995854][ T6202] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1489.019189][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 1489.019223][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1489.019240][ T6202] Workqueue: writeback wb_workfn (flush-7:9) [ 1489.019278][ T6202] Call Trace: [ 1489.019288][ T6202] [ 1489.019299][ T6202] dump_stack_lvl+0xe8/0x150 [ 1489.019337][ T6202] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1489.019375][ T6202] f2fs_write_end_io+0x124b/0x1710 [ 1489.019434][ T6202] __submit_merged_bio+0x258/0x6a0 [ 1489.019462][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.019492][ T6202] ? rcu_is_watching+0x15/0xb0 [ 1489.019538][ T6202] __submit_merged_write_cond+0x3c9/0x4e0 [ 1489.019578][ T6202] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1489.019628][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.019674][ T6202] f2fs_write_data_pages+0x2a27/0x36f0 [ 1489.019750][ T6202] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1489.019801][ T6202] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1489.019878][ T6202] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1489.019931][ T6202] ? __lock_acquire+0x683/0x2cf0 [ 1489.019982][ T6202] ? set_shrinker_bit+0x7c/0x350 [ 1489.020025][ T6202] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1489.020061][ T6202] do_writepages+0x338/0x560 [ 1489.020102][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020132][ T6202] ? reacquire_held_locks+0x104/0x190 [ 1489.020169][ T6202] ? writeback_sb_inodes+0x450/0x1b00 [ 1489.020209][ T6202] __writeback_single_inode+0x12e/0xf90 [ 1489.020252][ T6202] writeback_sb_inodes+0x9de/0x1b00 [ 1489.020284][ T6202] ? __lock_acquire+0x683/0x2cf0 [ 1489.020345][ T6202] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1489.020425][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020454][ T6202] ? rcu_is_watching+0x15/0xb0 [ 1489.020490][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020518][ T6202] ? queue_io+0x2d3/0x470 [ 1489.020554][ T6202] wb_writeback+0x41c/0xad0 [ 1489.020589][ T6202] ? queue_io+0x271/0x470 [ 1489.020628][ T6202] ? __pfx_wb_writeback+0x10/0x10 [ 1489.020664][ T6202] ? do_raw_spin_lock+0x12b/0x2f0 [ 1489.020711][ T6202] wb_workfn+0x431/0x10f0 [ 1489.020757][ T6202] ? __pfx_wb_workfn+0x10/0x10 [ 1489.020785][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020827][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020856][ T6202] ? do_raw_spin_lock+0x12b/0x2f0 [ 1489.020887][ T6202] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1489.020917][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020950][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.020988][ T6202] ? rcu_is_watching+0x15/0xb0 [ 1489.021027][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.021059][ T6202] ? process_scheduled_works+0xa20/0x14e0 [ 1489.021089][ T6202] process_scheduled_works+0xa8e/0x14e0 [ 1489.021151][ T6202] ? __pfx_process_scheduled_works+0x10/0x10 [ 1489.021187][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.021216][ T6202] ? assign_work+0x3cf/0x5d0 [ 1489.021250][ T6202] worker_thread+0xa47/0xfb0 [ 1489.021282][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.021323][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.021353][ T6202] ? __kthread_parkme+0x71/0x1f0 [ 1489.021396][ T6202] kthread+0x388/0x470 [ 1489.021433][ T6202] ? __pfx_worker_thread+0x10/0x10 [ 1489.021460][ T6202] ? __pfx_kthread+0x10/0x10 [ 1489.021498][ T6202] ret_from_fork+0x514/0xb70 [ 1489.021539][ T6202] ? __pfx_ret_from_fork+0x10/0x10 [ 1489.021574][ T6202] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.021604][ T6202] ? __switch_to+0xc89/0x1420 [ 1489.021646][ T6202] ? __pfx_kthread+0x10/0x10 [ 1489.021683][ T6202] ret_from_fork_asm+0x1a/0x30 [ 1489.021739][ T6202] [ 1489.376722][ T6202] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1489.613834][ T5926] loop9: lost filesystem error report for type 5 error -108 [ 1489.700670][T26608] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6355'. [ 1489.855232][T26608] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6355'. [ 1489.956106][T26562] XFS (loop4): Quotacheck: Done. [ 1490.651157][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6355'. [ 1490.828682][T17327] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1491.372775][T26624] net_ratelimit: 10 callbacks suppressed [ 1491.372792][T26624] netlink: zone id is out of range [ 1491.394560][T26624] netlink: zone id is out of range [ 1491.463145][T26624] netlink: zone id is out of range [ 1491.548877][T26624] netlink: zone id is out of range [ 1491.591802][T26624] netlink: zone id is out of range [ 1491.621257][T26624] netlink: zone id is out of range [ 1493.310465][T26624] netlink: zone id is out of range [ 1493.355344][T26624] netlink: zone id is out of range [ 1493.401085][T26624] netlink: zone id is out of range [ 1493.469823][T26624] netlink: set zone limit has 4 unknown bytes [ 1493.477688][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1493.806188][ T29] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1493.838012][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.201041][T26640] loop9: detected capacity change from 0 to 4096 [ 1494.563343][T26640] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1494.679071][ T29] cxacru 9-1:1.0: send of cm 0x84 failed (-71) [ 1494.735448][T26640] ntfs3(loop9): ino=19, mi_enum_attr [ 1494.749300][T26640] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1494.750160][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1494.771563][T26640] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 1494.843836][ T29] cxacru 9-1:1.0: send of cm 0x88 failed (-71) [ 1494.879841][ T29] ATM dev 0: poll status: error -71 [ 1494.906193][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1495.140615][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807b3e2b00 failed (-71)! [ 1495.148612][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807b3e2e00 failed (-71)! [ 1495.156548][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801f79af00 failed (-71)! [ 1495.164498][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801f79a500 failed (-71)! [ 1495.182348][ T29] usb 9-1: USB disconnect, device number 7 [ 1496.421667][T26655] loop4: detected capacity change from 0 to 40427 [ 1496.437977][T26655] F2FS-fs (loop4): Image doesn't support compression [ 1496.444722][T26655] F2FS-fs (loop4): build fault injection rate: 690 [ 1496.456477][T26655] F2FS-fs (loop4): invalid crc value [ 1496.576669][T26655] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1496.605825][T26655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1497.080392][T26671] netlink: zone id is out of range [ 1497.102805][T26671] netlink: zone id is out of range [ 1497.127153][T26671] netlink: zone id is out of range [ 1497.146100][T26671] netlink: zone id is out of range [ 1497.166622][T26671] netlink: zone id is out of range [ 1497.186201][T26671] netlink: zone id is out of range [ 1497.203835][T26671] netlink: zone id is out of range [ 1497.230824][T26671] netlink: zone id is out of range [ 1497.245003][T26671] netlink: zone id is out of range [ 1497.289442][T26671] netlink: set zone limit has 4 unknown bytes [ 1497.637202][T26674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input42 [ 1499.927356][T26694] loop9: detected capacity change from 0 to 4096 [ 1499.978157][T26695] loop5: detected capacity change from 0 to 4096 [ 1499.979247][T26694] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1500.053542][T26695] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1500.261610][T26694] ntfs3(loop9): ino=19, mi_enum_attr [ 1500.294611][T26694] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1500.355980][T26694] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 1500.428991][T26695] overlayfs: upper fs does not support tmpfile. [ 1500.478903][T26695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1503.723225][T26719] loop6: detected capacity change from 0 to 40427 [ 1503.741533][T26719] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1503.749315][T26719] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1503.865709][T26719] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1503.952293][T26719] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1503.959437][T26719] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1504.083431][T26719] syz.6.6398: attempt to access beyond end of device [ 1504.083431][T26719] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1506.272120][T26745] loop1: detected capacity change from 0 to 4096 [ 1506.344662][T26745] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1507.628171][T26745] overlayfs: upper fs does not support tmpfile. [ 1507.686153][T26745] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1507.750748][T26745] overlayfs: failed to clone lowerpath [ 1508.857459][T26754] loop8: detected capacity change from 0 to 4096 [ 1508.914486][T26754] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1509.150512][T26754] ntfs3(loop8): ino=19, mi_enum_attr [ 1509.173117][T26754] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1509.216850][T26754] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1509.687574][T26762] loop4: detected capacity change from 0 to 40427 [ 1509.708833][T26762] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1509.716697][T26762] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1509.803092][T26762] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1509.859047][T26762] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1509.866192][T26762] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1509.901768][T26762] syz.4.6413: attempt to access beyond end of device [ 1509.901768][T26762] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1511.948061][T26768] loop9: detected capacity change from 0 to 32768 [ 1512.471494][T26768] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1516.970065][T25616] ocfs2: Unmounting device (7,9) on (node local) [ 1518.030802][T26812] tipc: Enabled bearer , priority 0 [ 1518.040301][T26809] loop4: detected capacity change from 0 to 4096 [ 1518.071610][T26812] syzkaller0: entered promiscuous mode [ 1518.079709][T26809] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1518.101384][T26812] syzkaller0: entered allmulticast mode [ 1518.200375][T26817] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1518.251808][T26809] ntfs3(loop4): ino=19, mi_enum_attr [ 1518.270619][T26812] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6427'. [ 1518.275794][T26809] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1518.333642][T26809] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1518.382192][T26812] tipc: Resetting bearer [ 1518.462169][T26810] tipc: Resetting bearer [ 1518.506737][T26811] loop6: detected capacity change from 0 to 4096 [ 1519.067996][T26811] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1519.162981][T26810] tipc: Disabling bearer [ 1519.758654][T26832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input43 [ 1519.786932][T26829] loop4: detected capacity change from 0 to 4096 [ 1519.827190][T26829] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1519.949320][T26829] ntfs3(loop4): ino=19, mi_enum_attr [ 1519.968756][T26829] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1520.236169][T26829] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1520.310760][T26837] loop5: detected capacity change from 0 to 4096 [ 1520.841089][T26837] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1520.950455][T26837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.984773][T16823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.168918][T26854] loop8: detected capacity change from 0 to 512 [ 1522.339698][T26854] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1522.440209][T26854] System zones: 0-2, 18-18, 34-35 [ 1522.639038][T26861] loop5: detected capacity change from 0 to 40427 [ 1522.647380][T26861] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1522.655287][T26861] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1522.703219][T26854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1522.779524][T26854] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.794786][T26861] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1522.827037][T26861] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1522.834135][T26861] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1522.899369][T26861] syz.5.6441: attempt to access beyond end of device [ 1522.899369][T26861] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1523.254732][T21930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.389282][T26883] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6446'. [ 1524.634976][T26889] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6446'. [ 1524.768356][T26891] bridge0: port 3(veth0) entered blocking state [ 1524.792101][T26891] bridge0: port 3(veth0) entered disabled state [ 1524.799242][T26891] veth0: entered allmulticast mode [ 1524.816751][T26891] veth0: entered promiscuous mode [ 1524.848658][T26891] bridge0: port 3(veth0) entered blocking state [ 1524.855134][T26891] bridge0: port 3(veth0) entered forwarding state [ 1525.002829][T26888] loop4: detected capacity change from 0 to 4096 [ 1525.164825][T26897] loop8: detected capacity change from 0 to 32768 [ 1525.192061][T26897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6452 (26897) [ 1525.221733][T26888] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 1525.254675][T26897] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1525.264954][T26897] BTRFS info (device loop8): using sha256 checksum algorithm [ 1525.443920][T26896] loop1: detected capacity change from 0 to 4096 [ 1525.491177][T26897] BTRFS info (device loop8): enabling ssd optimizations [ 1525.498286][T26897] BTRFS info (device loop8): turning on sync discard [ 1525.505796][T26897] BTRFS info (device loop8): enabling free space tree [ 1525.576092][ T30] audit: type=1800 audit(1786802289.008:191): pid=26897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6452" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1526.112846][T26896] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1526.521597][T21930] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1526.787213][T26924] tipc: Enabled bearer , priority 0 [ 1526.866923][T26927] syzkaller0: entered promiscuous mode [ 1526.903907][T26927] syzkaller0: entered allmulticast mode [ 1526.971656][T26924] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1527.079904][T26930] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6458'. [ 1527.190416][T26927] tipc: Resetting bearer [ 1527.263377][T26923] tipc: Resetting bearer [ 1527.371913][T26945] loop9: detected capacity change from 0 to 512 [ 1527.441912][T26945] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1527.457261][T26945] System zones: 0-2, 18-18, 34-35 [ 1527.479708][T26923] tipc: Disabling bearer [ 1527.509902][T26945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.584613][T26945] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.886274][T26957] loop1: detected capacity change from 0 to 8 [ 1528.897357][T26959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6466'. [ 1528.981829][T26959] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6466'. [ 1529.259091][T25616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.486555][T26968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input44 [ 1529.551979][T26942] loop8: detected capacity change from 0 to 32768 [ 1529.651822][T26942] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1529.783953][T26942] XFS (loop8): Ending clean mount [ 1529.845421][T26942] XFS (loop8): Quotacheck needed: Please wait. [ 1529.860163][T26971] loop5: detected capacity change from 0 to 4096 [ 1529.984724][T26990] loop4: detected capacity change from 0 to 1024 [ 1530.022331][T26990] EXT4-fs: Ignoring removed nobh option [ 1530.057335][T26990] EXT4-fs: Ignoring removed bh option [ 1530.083070][T26971] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1530.092786][T26990] EXT4-fs: Ignoring removed nobh option [ 1530.126397][T26990] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1530.200948][T26942] XFS (loop8): Quotacheck: Done. [ 1530.276337][T26990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.360817][T21930] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1530.407692][T26997] loop1: detected capacity change from 0 to 128 [ 1530.511583][T26997] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1530.525772][T26997] ext4 filesystem being mounted at /407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.684272][T17327] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /435/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1530.739637][T17327] EXT4-fs (loop4): Remounting filesystem read-only [ 1530.808877][T18197] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1530.905212][T17327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.766256][T27033] bridge1: entered promiscuous mode [ 1532.815699][T27033] bridge1: entered allmulticast mode [ 1532.881576][T27033] team0: Port device bridge1 added [ 1532.937110][T27037] bridge0: port 3(team0) entered blocking state [ 1532.971085][T27037] bridge0: port 3(team0) entered disabled state [ 1532.995778][T27037] team0: entered allmulticast mode [ 1533.039068][T27037] team_slave_0: entered allmulticast mode [ 1533.057159][T27037] team_slave_1: entered allmulticast mode [ 1533.134729][T27037] team0: entered promiscuous mode [ 1533.153053][T27037] team_slave_0: entered promiscuous mode [ 1533.169627][T27037] team_slave_1: entered promiscuous mode [ 1533.183826][T27037] bridge0: port 3(team0) entered blocking state [ 1533.193154][T27037] bridge0: port 3(team0) entered forwarding state [ 1533.221468][ T29] IPVS: starting estimator thread 0... [ 1533.327219][T27050] IPVS: using max 25 ests per chain, 60000 per kthread [ 1533.791843][T27060] loop1: detected capacity change from 0 to 128 [ 1534.056742][T27062] loop8: detected capacity change from 0 to 32768 [ 1534.077862][T27062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6493 (27062) [ 1534.105434][T27060] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1534.143726][T27060] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.156824][T27062] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1534.167021][T27062] BTRFS info (device loop8): using sha256 checksum algorithm [ 1534.308177][T27062] BTRFS info (device loop8): enabling ssd optimizations [ 1534.316042][T27062] BTRFS info (device loop8): turning on sync discard [ 1534.322739][T27062] BTRFS info (device loop8): enabling free space tree [ 1534.749387][ T30] audit: type=1800 audit(1786802297.828:192): pid=27062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6493" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1534.925145][T27080] loop6: detected capacity change from 0 to 4096 [ 1534.946352][T18197] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1535.137610][T27080] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1536.156197][T27080] ntfs3(loop6): ino=19, mi_enum_attr [ 1536.200176][T27080] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1536.268119][T21930] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1536.284158][T27080] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1537.188516][T27109] fuse: Bad value for 'fd' [ 1537.903464][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6510'. [ 1537.943669][T27124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6510'. [ 1538.028279][T27124] geneve2: entered promiscuous mode [ 1538.059864][T27124] geneve2: entered allmulticast mode [ 1538.118670][ T48] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 1038 - 0 [ 1538.166498][ T48] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 1038 - 0 [ 1538.209377][ T48] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 1038 - 0 [ 1538.433480][ T48] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 1038 - 0 [ 1539.410847][T27136] loop9: detected capacity change from 0 to 128 [ 1539.814071][T19953] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1540.048038][T19953] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1540.213257][T19953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.305949][T27136] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1540.325153][T19953] usb 7-1: config 0 descriptor?? [ 1540.424536][T27136] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.823811][T19953] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1541.379393][T27145] loop7: detected capacity change from 0 to 16384 [ 1541.878524][T19953] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 1541.894413][T19953] [drm] Initialized udl on minor 1 [ 1541.974739][T27147] loop7: detected capacity change from 16384 to 0 [ 1541.982556][ C0] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1541.983400][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1542.047528][T25616] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1542.058861][T19953] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1542.083830][T19953] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1542.150034][ T5737] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1542.168433][T19953] usb 7-1: USB disconnect, device number 13 [ 1542.176335][ T5737] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1542.482016][T27154] fuse: Bad value for 'fd' [ 1542.875022][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6523'. [ 1542.887243][T27164] netlink: 'syz.6.6521': attribute type 12 has an invalid length. [ 1542.921687][T27162] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6523'. [ 1542.976150][T27167] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6523'. [ 1543.028732][T27167] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6523'. [ 1543.166869][ T36] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.214029][ T36] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.255053][ T36] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.293565][ T36] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.465025][ T5926] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1543.765513][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1543.866477][ T5926] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1544.085234][ T5926] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.187225][ T5926] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.263101][T27180] loop4: detected capacity change from 0 to 4096 [ 1544.375506][T27182] loop9: detected capacity change from 0 to 128 [ 1544.417565][ T5926] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.431058][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1544.451315][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.471536][ T5926] usb 6-1: config 0 descriptor?? [ 1544.477898][T27182] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1544.525942][T27180] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1544.599985][T27182] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.976461][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1544.983636][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.010820][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.153936][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.168282][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.193125][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.210581][T25616] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1545.214253][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.265006][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.271417][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.282919][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.309071][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.342065][ T5926] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0 [ 1545.424573][T27169] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1545.500695][T27196] Bluetooth: MGMT ver 1.23 [ 1545.577120][ T5926] zeroplus 0003:0C12:0005.0006: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.5-1/input0 [ 1545.591875][T19953] libceph: connect (1)[c::]:6789 error -101 [ 1545.613828][ T5926] zeroplus 0003:0C12:0005.0006: no inputs found [ 1545.661403][T19953] libceph: mon0 (1)[c::]:6789 connect error [ 1545.671445][ T5926] usb 6-1: USB disconnect, device number 38 [ 1545.751490][T19953] libceph: connect (1)[c::]:6789 error -101 [ 1545.788304][T19953] libceph: mon0 (1)[c::]:6789 connect error [ 1545.932235][T27202] fido_id[27202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1546.098240][T25733] libceph: connect (1)[c::]:6789 error -101 [ 1546.111027][T25733] libceph: mon0 (1)[c::]:6789 connect error [ 1546.166830][T27190] loop4: detected capacity change from 0 to 32768 [ 1546.254037][T27190] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1546.317598][T27196] ceph: No mds server is up or the cluster is laggy [ 1546.544877][T27215] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6542'. [ 1546.782841][T27217] loop6: detected capacity change from 0 to 32768 [ 1546.794749][T27217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6541 (27217) [ 1546.816562][T27217] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1546.827227][T27217] BTRFS info (device loop6): using sha256 checksum algorithm [ 1546.901549][T27209] loop8: detected capacity change from 0 to 32768 [ 1547.086443][T27217] BTRFS info (device loop6): enabling ssd optimizations [ 1547.095720][T27217] BTRFS info (device loop6): turning on sync discard [ 1547.102619][T27217] BTRFS info (device loop6): enabling free space tree [ 1547.109482][T27217] BTRFS info (device loop6): use zlib compression, level 3 [ 1547.121581][T27209] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1547.407695][T27245] loop9: detected capacity change from 0 to 4096 [ 1549.799800][T27209] XFS (loop8): Ending clean mount [ 1549.856228][T27209] XFS (loop8): Quotacheck needed: Please wait. [ 1550.770901][T27250] loop5: detected capacity change from 0 to 4096 [ 1550.863093][T27250] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1550.901764][T27209] XFS (loop8): Quotacheck: Done. [ 1551.017091][T22813] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1551.146576][T17327] ocfs2: Unmounting device (7,4) on (node local) [ 1551.162210][T21930] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1551.258426][T27250] overlayfs: missing 'lowerdir' [ 1551.967236][T27268] loop9: detected capacity change from 0 to 40427 [ 1551.978242][T27268] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1551.986391][T27268] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1552.230660][T27268] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1552.285425][T27268] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1552.292498][T27268] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1553.227990][T27294] loop4: detected capacity change from 0 to 4096 [ 1553.249618][T27269] loop6: detected capacity change from 0 to 32768 [ 1553.272767][T27294] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1553.303087][T27269] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1553.509429][T27269] XFS (loop6): Ending clean mount [ 1553.527596][T27294] ntfs3(loop4): ino=19, mi_enum_attr [ 1553.561455][T27294] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1553.569361][T27269] XFS (loop6): Quotacheck needed: Please wait. [ 1553.604964][T27294] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1553.935395][T27311] loop5: detected capacity change from 0 to 32768 [ 1554.025159][T27311] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1554.900737][T27317] loop8: detected capacity change from 0 to 4096 [ 1556.109721][T27269] XFS (loop6): Quotacheck: Done. [ 1556.323949][T22813] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1558.365361][ T7045] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1558.705306][T27357] loop6: detected capacity change from 0 to 512 [ 1558.750817][T27357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1558.769270][T27357] System zones: 0-2, 18-18, 34-35 [ 1558.787521][T27357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1558.873479][T27357] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1559.075919][T16823] ocfs2: Unmounting device (7,5) on (node local) [ 1559.088491][T22813] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.041944][T27376] loop9: detected capacity change from 0 to 32768 [ 1560.062518][T27376] XFS (loop9): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1560.100684][T27376] XFS (loop9): Ending clean mount [ 1560.119544][T27376] XFS (loop9): Quotacheck needed: Please wait. [ 1560.211716][T27376] XFS (loop9): Quotacheck: Done. [ 1560.252510][T25616] XFS (loop9): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1561.080704][T27344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1561.124736][T27389] loop5: detected capacity change from 0 to 4096 [ 1563.480645][T27410] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6590'. [ 1563.937401][T27413] loop1: detected capacity change from 0 to 32768 [ 1563.946791][T27413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6591 (27413) [ 1563.976432][T27413] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1563.986765][T27413] BTRFS info (device loop1): using sha256 checksum algorithm [ 1564.718210][T27413] BTRFS info (device loop1): enabling ssd optimizations [ 1564.725315][T27413] BTRFS info (device loop1): turning on sync discard [ 1564.732001][T27413] BTRFS info (device loop1): enabling free space tree [ 1564.787571][ T30] audit: type=1800 audit(1786802328.238:193): pid=27413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6591" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1565.511989][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1565.564565][T27438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1565.910801][T27436] loop5: detected capacity change from 0 to 4096 [ 1565.968303][T18197] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1566.004382][T27436] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1566.439865][T27447] loop8: detected capacity change from 0 to 4096 [ 1566.493883][T27436] overlayfs: missing 'lowerdir' [ 1566.669438][T27447] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1567.004797][T27459] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1568.625198][T27465] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6606'. [ 1568.659328][T27465] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6606'. [ 1568.705609][T27465] bridge0: port 4(veth0) entered blocking state [ 1568.752830][T27465] bridge0: port 4(veth0) entered disabled state [ 1568.777488][T27465] veth0: entered allmulticast mode [ 1568.847725][T27465] veth0: entered promiscuous mode [ 1568.915511][T27465] bridge0: port 4(veth0) entered blocking state [ 1568.921953][T27465] bridge0: port 4(veth0) entered forwarding state [ 1568.984776][T27470] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6606'. [ 1569.333646][T27469] vlan2: entered promiscuous mode [ 1569.371542][T27469] hsr0: entered promiscuous mode [ 1569.409682][T27469] vlan2: entered allmulticast mode [ 1569.445108][T27469] hsr0: entered allmulticast mode [ 1569.468049][T27469] hsr_slave_0: entered allmulticast mode [ 1569.491858][T27469] hsr_slave_1: entered allmulticast mode [ 1569.663306][T27490] debugfs: 'netdev:syzkaller0' already exists in 'phy43' [ 1571.307931][T27503] bridge0: port 3(veth0) entered disabled state [ 1571.319545][T27503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.398892][T27503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.857674][T27506] vlan3: entered promiscuous mode [ 1571.884660][T27506] bridge0: entered promiscuous mode [ 1572.010769][T27512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6623'. [ 1572.097416][T27512] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6623'. [ 1572.149763][T27512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6623'. [ 1572.779813][T27528] vlan3: entered promiscuous mode [ 1572.809372][T27528] hsr0: entered promiscuous mode [ 1572.827428][T27528] vlan3: entered allmulticast mode [ 1572.869877][T27528] hsr0: entered allmulticast mode [ 1572.894716][T27528] hsr_slave_0: entered allmulticast mode [ 1572.978240][T27528] hsr_slave_1: entered allmulticast mode [ 1573.125060][T27536] loop9: detected capacity change from 0 to 32768 [ 1573.143940][T27536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6631 (27536) [ 1573.177593][T27536] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1573.187807][T27536] BTRFS info (device loop9): using sha256 checksum algorithm [ 1573.352210][T27536] BTRFS info (device loop9): enabling ssd optimizations [ 1573.359412][T27536] BTRFS info (device loop9): turning on sync discard [ 1573.366187][T27536] BTRFS info (device loop9): enabling free space tree [ 1573.396891][ T30] audit: type=1800 audit(1786802336.838:194): pid=27536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6631" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 1574.882532][T19953] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1576.284649][T19953] usb 9-1: Using ep0 maxpacket: 32 [ 1576.304383][T19953] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1576.346326][T19953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.398257][T19953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.443190][T19953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.496603][T25616] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1576.515213][T19953] usb 9-1: config 0 descriptor?? [ 1576.972256][T19953] hid_parser_main: 14 callbacks suppressed [ 1576.972282][T19953] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 1577.032828][T19953] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 1577.192312][T19953] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 1577.399885][T19953] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 1577.613054][T19953] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 1577.656328][T19953] ft260 0003:0403:6030.0007: failed to retrieve status: -32 [ 1578.468814][T27599] syzkaller0: entered promiscuous mode [ 1578.509811][T27599] syzkaller0: entered allmulticast mode [ 1580.165357][T27616] loop4: detected capacity change from 0 to 256 [ 1580.175880][T27616] exfat: Deprecated parameter 'utf8' [ 1580.237413][T19953] usb 9-1: USB disconnect, device number 8 [ 1580.302367][T27616] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1582.478672][T27652] loop1: detected capacity change from 0 to 1024 [ 1582.625893][T27652] syz.1.6664: attempt to access beyond end of device [ 1582.625893][T27652] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1582.693868][T27652] Buffer I/O error on dev loop1, logical block 2889, async page read [ 1582.788915][T27652] syz.1.6664: attempt to access beyond end of device [ 1582.788915][T27652] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1582.879192][T27652] Buffer I/O error on dev loop1, logical block 2889, async page read [ 1582.951292][ T30] audit: type=1800 audit(1786802346.398:195): pid=27652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6664" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1583.266830][T27634] loop6: detected capacity change from 0 to 40427 [ 1583.443254][T27665] vlan4: entered promiscuous mode [ 1583.476274][T27665] hsr0: entered promiscuous mode [ 1583.508329][T27665] vlan4: entered allmulticast mode [ 1583.542290][T27665] hsr0: entered allmulticast mode [ 1583.572564][T27665] hsr_slave_0: entered allmulticast mode [ 1583.604165][T27665] hsr_slave_1: entered allmulticast mode [ 1583.870182][T27634] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1584.935944][T27648] loop4: detected capacity change from 0 to 32768 [ 1585.598819][T27648] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1585.643718][T27648] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop4": -EINTR [ 1585.761286][T27648] XFS (loop4): log mount failed [ 1587.199199][T27705] loop9: detected capacity change from 0 to 512 [ 1587.273477][T27705] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1587.303685][T27705] System zones: 0-2, 18-18, 34-35 [ 1587.345764][T27705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.465390][T27705] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.678477][T25616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.732074][T27706] loop5: detected capacity change from 0 to 4096 [ 1587.802841][T27713] syzkaller0: entered promiscuous mode [ 1587.834464][T27713] syzkaller0: entered allmulticast mode [ 1587.869852][T27706] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1588.272853][T27706] ntfs3(loop5): ino=19, mi_enum_attr [ 1588.324815][T27706] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1588.427237][T27706] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1588.799297][T27723] loop1: detected capacity change from 0 to 40427 [ 1588.823879][T27723] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1588.853601][T27723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1589.279580][T27723] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1589.393307][T27723] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1589.424534][T27723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1591.143811][T27745] loop1: detected capacity change from 0 to 256 [ 1591.177941][T27743] loop5: detected capacity change from 0 to 32768 [ 1591.197897][T27745] exfat: Deprecated parameter 'utf8' [ 1591.308144][T27745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x595b5861, utbl_chksum : 0xe619d30d) [ 1592.026180][T27749] loop5: detected capacity change from 0 to 32768 [ 1592.045969][T27749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6693 (27749) [ 1592.096192][T27749] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1592.115207][T27749] BTRFS info (device loop5): using sha256 checksum algorithm [ 1592.152855][T27747] loop1: detected capacity change from 0 to 40427 [ 1592.426182][T27749] BTRFS info (device loop5): enabling ssd optimizations [ 1592.447171][T27749] BTRFS info (device loop5): turning on sync discard [ 1592.488673][T27749] BTRFS info (device loop5): enabling free space tree [ 1592.540930][T27747] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1592.598740][ T30] audit: type=1800 audit(1786802356.028:196): pid=27749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6693" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1592.639911][T27747] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1592.811002][T27747] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 1593.130418][T16823] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1593.972978][ T7206] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xf1 [ 1595.499044][T27726] vlan3: entered promiscuous mode [ 1595.504106][T27726] hsr0: entered promiscuous mode [ 1595.516616][T27726] vlan3: entered allmulticast mode [ 1595.526595][T27726] hsr0: entered allmulticast mode [ 1595.533511][T27726] hsr_slave_0: entered allmulticast mode [ 1595.539541][T27726] hsr_slave_1: entered allmulticast mode [ 1595.580608][T27796] netlink: 'syz.5.6702': attribute type 12 has an invalid length. [ 1595.750004][T27802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6706'. [ 1595.809100][T27799] loop9: detected capacity change from 0 to 4096 [ 1595.902795][T27806] loop6: detected capacity change from 0 to 1024 [ 1595.914777][T27806] EXT4-fs: Ignoring removed bh option [ 1595.960525][T27806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1595.999572][ T3091] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1596.194704][ T3091] usb 9-1: Using ep0 maxpacket: 16 [ 1596.206795][ T3091] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1596.228411][ T3091] usb 9-1: config 4 has an invalid interface number: 9 but max is 0 [ 1596.270468][ T3091] usb 9-1: config 4 has no interface number 0 [ 1596.306749][ T3091] usb 9-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1596.361092][ T3091] usb 9-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 1596.374113][ T3091] usb 9-1: config 4 interface 9 has no altsetting 0 [ 1596.406710][T22813] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.408984][ T3091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.443343][ T3091] usb 9-1: Product: syz [ 1596.447796][ T3091] usb 9-1: Manufacturer: syz [ 1596.546206][ T3091] usb 9-1: SerialNumber: syz [ 1596.600488][T27803] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1596.609839][T27803] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1596.764055][ T3091] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1596.796493][T27776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1596.838340][ T3091] usb 9-1: USB disconnect, device number 9 [ 1596.841490][ T1027] usb 9-1: Failed to submit usb control message: -71 [ 1596.887241][ T1027] usb 9-1: unable to send the bmi data to the device: -71 [ 1596.906957][ T1027] usb 9-1: unable to get target info from device [ 1596.960930][ T1027] usb 9-1: could not get target info (-71) [ 1597.003306][T27824] loop4: detected capacity change from 0 to 764 [ 1597.012814][ T1027] usb 9-1: could not probe fw (-71) [ 1597.108708][T27825] loop9: detected capacity change from 0 to 2048 [ 1597.151402][T27825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1597.211062][T27827] tipc: Enabled bearer , priority 0 [ 1597.237114][T27824] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 1597.260561][T27827] syzkaller0: entered promiscuous mode [ 1597.307391][T27827] syzkaller0: entered allmulticast mode [ 1597.347137][T27832] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1598.401362][T27840] udc dummy_udc.0: failed to start g1: -4 [ 1598.407954][T27840] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 1598.408376][ T6236] udevd[6236]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1598.419946][T27840] UDC core: g1: couldn't find an available UDC or it's busy [ 1598.503299][T27838] syzkaller0: entered promiscuous mode [ 1598.526228][T27838] syzkaller0: entered allmulticast mode [ 1598.561502][T27832] tipc: Resetting bearer [ 1598.580001][T27826] tipc: Resetting bearer [ 1598.652093][T27826] tipc: Disabling bearer [ 1600.077525][T27860] loop5: detected capacity change from 0 to 256 [ 1600.091669][T27860] exfat: Deprecated parameter 'namecase' [ 1600.205805][T27860] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 1601.523323][T24108] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1601.759401][T24108] usb 10-1: Using ep0 maxpacket: 16 [ 1601.770281][T24108] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1601.783052][T24108] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 1601.791981][T24108] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1601.802068][T24108] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1601.810806][T24108] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1601.819259][T24108] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1601.828338][T24108] usb 10-1: config 0 has no interface number 0 [ 1601.834685][T24108] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1601.845979][T24108] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1601.864399][T24108] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1601.888930][T24108] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.907085][T24108] usb 10-1: config 0 interface 125 has no altsetting 0 [ 1601.914026][T24108] usb 10-1: config 0 interface 125 has no altsetting 2 [ 1601.923421][T24108] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.932875][T24108] usb 10-1: Product: syz [ 1601.937549][T24108] usb 10-1: Manufacturer: syz [ 1601.942264][T24108] usb 10-1: SerialNumber: syz [ 1601.951367][T27869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6726'. [ 1601.961546][T24108] usb 10-1: config 0 descriptor?? [ 1601.976312][T24108] usb 10-1: selecting invalid altsetting 2 [ 1602.622303][ C0] usb 10-1: async_complete: urb error -71 [ 1602.628178][ C0] usb 10-1: async_complete: urb error -71 [ 1602.634010][ C0] usb 10-1: async_complete: urb error -71 [ 1602.644359][T24108] get_1284_register: usb error -71 [ 1602.665790][T24108] usb 10-1: USB disconnect, device number 3 [ 1603.140191][T27872] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6727'. [ 1604.103076][T27869] lo: entered promiscuous mode [ 1604.123310][T27869] tunl0: entered promiscuous mode [ 1604.150710][T27869] gre0: entered promiscuous mode [ 1604.179154][T27869] gretap0: entered promiscuous mode [ 1604.197209][T27869] erspan0: entered promiscuous mode [ 1604.222584][T27869] ip_vti0: entered promiscuous mode [ 1604.255690][T27869] ip6_vti0: entered promiscuous mode [ 1604.279093][T27869] sit0: entered promiscuous mode [ 1604.302328][T27869] ip6tnl0: entered promiscuous mode [ 1604.330464][T27869] ip6gre0: entered promiscuous mode [ 1604.369512][T27869] syz_tun: entered promiscuous mode [ 1604.381132][T27885] loop1: detected capacity change from 0 to 1024 [ 1604.395865][T27869] ip6gretap0: entered promiscuous mode [ 1604.415919][T27869] bridge0: entered promiscuous mode [ 1604.431868][T27869] vcan0: entered promiscuous mode [ 1604.431957][ T30] audit: type=1800 audit(1786802367.878:197): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6731" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1604.449163][T27869] bond0: entered promiscuous mode [ 1604.482718][T27885] syz.1.6731: attempt to access beyond end of device [ 1604.482718][T27885] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1604.502959][T27869] bond_slave_0: entered promiscuous mode [ 1604.503916][T27885] Buffer I/O error on dev loop1, logical block 2889, async page read [ 1604.515965][T27869] bond_slave_1: entered promiscuous mode [ 1604.524165][T27869] team0: entered promiscuous mode [ 1604.531551][T27869] team_slave_0: entered promiscuous mode [ 1604.542327][T27869] team_slave_1: entered promiscuous mode [ 1604.552514][T27885] syz.1.6731: attempt to access beyond end of device [ 1604.552514][T27885] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1604.563941][T27869] dummy0: entered promiscuous mode [ 1604.569556][T27885] Buffer I/O error on dev loop1, logical block 2889, async page read [ 1604.582510][T27869] nlmon0: entered promiscuous mode [ 1604.589106][ T30] audit: type=1800 audit(1786802368.028:198): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6731" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1604.610639][T27869] batadv0: entered promiscuous mode [ 1604.623356][T27869] veth1: entered promiscuous mode [ 1604.641852][T27869] wg0: entered promiscuous mode [ 1604.652698][T27869] wg1: entered promiscuous mode [ 1604.663965][T27869] wg2: entered promiscuous mode [ 1604.688318][T27869] veth0_to_bridge: entered promiscuous mode [ 1604.714624][T27869] veth1_to_bridge: entered promiscuous mode [ 1604.733126][T27869] veth0_to_bond: entered promiscuous mode [ 1604.748889][T19953] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1604.769598][T27869] veth1_to_bond: entered promiscuous mode [ 1604.786788][T27869] veth0_to_team: entered promiscuous mode [ 1604.805597][T27869] veth1_to_team: entered promiscuous mode [ 1604.816876][T27869] veth0_to_batadv: entered promiscuous mode [ 1604.842493][T27869] batadv_slave_0: entered promiscuous mode [ 1604.852572][T27869] veth1_to_batadv: entered promiscuous mode [ 1604.862423][T27869] batadv_slave_1: entered promiscuous mode [ 1604.870890][T27869] xfrm0: entered promiscuous mode [ 1604.876753][T27869] veth0_to_hsr: entered promiscuous mode [ 1604.883274][T27869] veth1_to_hsr: entered promiscuous mode [ 1604.909926][T27887] tipc: Enabled bearer , priority 0 [ 1604.924880][T19953] usb 5-1: Using ep0 maxpacket: 8 [ 1604.941224][T19953] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1604.968160][T27892] syzkaller0: entered promiscuous mode [ 1604.982391][T19953] usb 5-1: config 0 has an invalid interface number: 255 but max is 14 [ 1604.983865][T27892] syzkaller0: entered allmulticast mode [ 1605.022102][T19953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.057813][T19953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1605.076653][T19953] usb 5-1: config 0 has no interface number 0 [ 1605.100386][T19953] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1605.138099][T19953] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1605.157399][T19953] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1605.168642][T19953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.186508][T19953] usb 5-1: Product: syz [ 1605.188444][T27912] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 1605.197509][T19953] usb 5-1: Manufacturer: syz [ 1605.197532][T19953] usb 5-1: SerialNumber: syz [ 1605.207292][T27882] tipc: Resetting bearer [ 1605.219497][T27912] netlink: 'syz.5.6738': attribute type 13 has an invalid length. [ 1605.225496][T19953] usb 5-1: config 0 descriptor?? [ 1605.260449][T19953] powermate 5-1:0.255: probe with driver powermate failed with error -22 [ 1605.273789][T27882] tipc: Disabling bearer [ 1605.312832][T27914] loop8: detected capacity change from 0 to 4096 [ 1605.329261][T24108] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1605.358333][T27914] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1605.367621][T25733] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1605.494979][T24108] usb 2-1: Using ep0 maxpacket: 8 [ 1605.519512][T27905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.524627][T25733] usb 10-1: Using ep0 maxpacket: 32 [ 1605.552443][T27917] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6740'. [ 1605.554029][T25733] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1605.565867][T27905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.620775][T27905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.622060][T25733] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 1605.647781][T27905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.679828][T25733] usb 10-1: config 0 has no interface number 0 [ 1605.708414][T25733] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1605.738490][T24108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1605.755546][T25733] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1605.769794][T24108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice= 0.06 [ 1605.796746][T25733] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1605.818578][T24108] usb 2-1: too many configurations: 250, using maximum allowed: 8 [ 1605.848314][T25733] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1605.862922][T24108] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1605.874053][T24108] usb 2-1: can't read configurations, error -71 [ 1605.904105][T25733] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.943069][T25733] usb 10-1: Product: syz [ 1605.954844][T25733] usb 10-1: Manufacturer: syz [ 1605.966579][T25733] usb 10-1: SerialNumber: syz [ 1605.987457][T25733] usb 10-1: config 0 descriptor?? [ 1606.017413][T25733] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input45 [ 1606.110481][ C0] bcm5974 10-1:0.119: trackpad urb failed: -1 [ 1606.124142][T27929] syzkaller0: entered promiscuous mode [ 1606.131514][T27929] syzkaller0: entered allmulticast mode [ 1606.336012][ T5926] usb 10-1: USB disconnect, device number 4 [ 1606.718485][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.726332][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.927803][T18150] usb 5-1: USB disconnect, device number 39 [ 1610.413763][T27973] netlink: 'syz.9.6756': attribute type 13 has an invalid length. [ 1610.477929][T27976] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6755'. [ 1611.181663][T27974] loop6: detected capacity change from 0 to 4096 [ 1611.293682][T27974] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1611.337702][T27983] jffs2: notice: (27983) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1611.673218][T27986] loop5: detected capacity change from 0 to 32768 [ 1611.681536][T27986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6760 (27986) [ 1611.699593][T27986] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1611.710561][T27986] BTRFS info (device loop5): using sha256 checksum algorithm [ 1611.858058][T27986] BTRFS info (device loop5): enabling ssd optimizations [ 1611.865248][T27986] BTRFS info (device loop5): turning on sync discard [ 1611.871972][T27986] BTRFS info (device loop5): enabling free space tree [ 1611.874879][T28004] loop9: detected capacity change from 0 to 256 [ 1611.878940][T27986] BTRFS info (device loop5): use zlib compression, level 3 [ 1612.015080][T28004] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1612.299659][ T5926] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1612.539805][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1612.563226][ T5926] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1612.590617][T16823] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1612.594641][ T5926] usb 2-1: config 0 has an invalid interface number: 255 but max is 14 [ 1612.651201][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.683825][ T30] audit: type=1800 audit(1786802376.128:199): pid=28004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6762" name="file1" dev="loop9" ino=1048695 res=0 errno=0 [ 1612.695323][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1612.753218][ T5926] usb 2-1: config 0 has no interface number 0 [ 1612.763103][ T5926] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1612.791989][ T5926] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1612.859425][ T5926] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1612.883115][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.898335][ T5926] usb 2-1: Product: syz [ 1612.932815][ T5926] usb 2-1: Manufacturer: syz [ 1612.952485][ T5926] usb 2-1: SerialNumber: syz [ 1612.979050][ T5926] usb 2-1: config 0 descriptor?? [ 1613.016816][ T5926] powermate 2-1:0.255: probe with driver powermate failed with error -22 [ 1613.026021][T28023] ip6tnl0: Caught tx_queue_len zero misconfig [ 1613.420936][T28033] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6771'. [ 1613.436663][T28032] tipc: Enabled bearer , priority 0 [ 1613.445724][T28032] syzkaller0: entered promiscuous mode [ 1613.456803][T28032] syzkaller0: entered allmulticast mode [ 1613.530390][T28032] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1613.693989][T28043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6774'. [ 1613.724608][T28032] tipc: Resetting bearer [ 1613.776956][T28031] tipc: Resetting bearer [ 1613.787302][T28041] loop8: detected capacity change from 0 to 2048 [ 1613.899507][T28031] tipc: Disabling bearer [ 1614.004961][T28041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.139260][T28041] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #12: block 2: comm syz.8.6773: lblock 0 mapped to illegal pblock 2 (length 1) [ 1614.392471][T28052] netlink: 'syz.5.6775': attribute type 13 has an invalid length. [ 1614.434189][T28050] loop6: detected capacity change from 0 to 32768 [ 1614.481229][T28050] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1614.633465][T21930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.896516][ T5926] usb 2-1: USB disconnect, device number 39 [ 1615.039918][T22813] ocfs2: Unmounting device (7,6) on (node local) [ 1615.627970][T28070] loop5: detected capacity change from 0 to 32768 [ 1616.512924][T28070] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1617.791494][T16823] ocfs2: Unmounting device (7,5) on (node local) [ 1618.919415][T28091] loop1: detected capacity change from 0 to 256 [ 1618.940167][T28091] exfat: Deprecated parameter 'utf8' [ 1619.013738][T28091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1619.567481][T28097] tipc: Enabled bearer , priority 0 [ 1619.610394][T28097] syzkaller0: entered promiscuous mode [ 1619.628881][T28097] syzkaller0: entered allmulticast mode [ 1619.679031][T28095] loop4: detected capacity change from 0 to 32768 [ 1619.777895][T28097] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1619.824010][T28095] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1620.402328][T28109] tipc: Resetting bearer [ 1620.503429][T28096] tipc: Resetting bearer [ 1620.630987][T17327] ocfs2: Unmounting device (7,4) on (node local) [ 1620.648454][T28096] tipc: Disabling bearer [ 1620.741969][T28115] binder: 28114:28115 ioctl 4018620d 0 returned -22 [ 1620.760532][T18150] tipc: Node number set to 1920608734 [ 1620.819544][T28113] ip6tnl0: Caught tx_queue_len zero misconfig [ 1621.200874][T28125] netlink: 'syz.9.6791': attribute type 13 has an invalid length. [ 1621.786706][T28136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6805'. [ 1621.806696][T28135] jffs2: notice: (28135) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1621.838807][T28136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6805'. [ 1621.865376][T28136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6805'. [ 1623.975458][T28147] loop4: detected capacity change from 0 to 32768 [ 1624.012946][T28147] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1625.194138][T17327] ocfs2: Unmounting device (7,4) on (node local) [ 1625.264538][T28155] loop9: detected capacity change from 0 to 4096 [ 1625.325042][T28155] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1625.408745][T28155] ntfs3(loop9): ino=19, mi_enum_attr [ 1625.443303][T28155] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1625.480008][T28155] ntfs3(loop9): ino=1a, mi_enum_attr [ 1625.508423][T28155] ntfs3(loop9): ino=1a, mi_enum_attr [ 1625.533706][T28155] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1626.509431][T28173] binder: 28172:28173 ioctl 4018620d 0 returned -22 [ 1626.578066][T28175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1627.058953][T28165] loop5: detected capacity change from 0 to 32768 [ 1627.340615][T28165] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1628.057793][T28197] netlink: 'syz.4.6823': attribute type 12 has an invalid length. [ 1628.083853][T28165] XFS (loop5): Ending clean mount [ 1629.898449][T16823] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1630.469313][T28216] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 1630.521227][T28216] netlink: 'syz.4.6830': attribute type 13 has an invalid length. [ 1631.837060][T28229] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6833'. [ 1632.199653][T28239] syz.1.6828 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1632.239140][T28240] binder: 28238:28240 ioctl 4018620d 0 returned -22 [ 1632.529571][T28248] netlink: 'syz.4.6839': attribute type 12 has an invalid length. [ 1632.677173][T28252] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6841'. [ 1632.715804][T28252] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6841'. [ 1632.727887][T28254] loop4: detected capacity change from 0 to 2048 [ 1632.750827][T28254] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1632.850786][T28256] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1633.814208][T28266] loop9: detected capacity change from 0 to 32768 [ 1633.978367][T28266] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1635.143399][T28281] jffs2: notice: (28281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1635.248582][T28276] ip6tnl0: Caught tx_queue_len zero misconfig [ 1635.257231][T28284] loop5: detected capacity change from 0 to 128 [ 1635.304266][T28284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1635.321055][T28284] System zones: 1-3, 19-19, 35-36 [ 1635.351778][T28284] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1635.370391][T28284] ext4 filesystem being mounted at /515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.809708][T28292] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 1636.380949][T16823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1636.512263][T28296] binder: BINDER_SET_CONTEXT_MGR already set [ 1636.529779][T28296] binder: 28295:28296 ioctl 4018620d 200000004a80 returned -16 [ 1636.530844][T25616] ocfs2: Unmounting device (7,9) on (node local) [ 1636.778021][T28306] [ 1636.780416][T28306] ====================================================== [ 1636.787436][T28306] WARNING: possible circular locking dependency detected [ 1636.794887][T28306] syzkaller #0 Tainted: G L [ 1636.800911][T28306] ------------------------------------------------------ [ 1636.807962][T28306] syz.5.6856/28306 is trying to acquire lock: [ 1636.814018][T28306] ffffffff8f9eb728 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1636.826661][T28306] [ 1636.826661][T28306] but task is already holding lock: [ 1636.834030][T28306] ffff88803523b070 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 1636.843511][T28306] [ 1636.843511][T28306] which lock already depends on the new lock. [ 1636.843511][T28306] [ 1636.853928][T28306] [ 1636.853928][T28306] the existing dependency chain (in reverse order) is: [ 1636.863099][T28306] [ 1636.863099][T28306] -> #3 (&p->frag_sem){++++}-{4:4}: [ 1636.870635][T28306] down_write_killable+0xa6/0x240 [ 1636.876205][T28306] configfs_rmdir+0x3b0/0x950 [ 1636.881408][T28306] vfs_rmdir+0x3e6/0x6a0 [ 1636.886176][T28306] filename_rmdir+0x292/0x520 [ 1636.891368][T28306] __se_sys_unlinkat+0x71/0x1a0 [ 1636.896821][T28306] do_syscall_64+0x174/0x580 [ 1636.901929][T28306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.908338][T28306] [ 1636.908338][T28306] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 1636.917041][T28306] down_write+0x96/0x200 [ 1636.921838][T28306] configfs_depend_item_unlocked+0x153/0x420 [ 1636.928416][T28306] usbg_make_tpg+0x1f6/0x590 [ 1636.933521][T28306] target_fabric_make_tpg+0xa8/0x6d0 [ 1636.939329][T28306] configfs_mkdir+0x4f6/0x9e0 [ 1636.944516][T28306] vfs_mkdir+0x406/0x620 [ 1636.949267][T28306] filename_mkdirat+0x285/0x510 [ 1636.954640][T28306] __se_sys_mkdirat+0x35/0x150 [ 1636.959954][T28306] do_syscall_64+0x174/0x580 [ 1636.965081][T28306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.971494][T28306] [ 1636.971494][T28306] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1636.979163][T28306] __mutex_lock+0x19d/0x1550 [ 1636.984460][T28306] tcm_set_name+0x2b/0xd0 [ 1636.989324][T28306] function_make+0x1a8/0x360 [ 1636.994435][T28306] configfs_mkdir+0x4f6/0x9e0 [ 1636.999630][T28306] vfs_mkdir+0x406/0x620 [ 1637.004459][T28306] filename_mkdirat+0x285/0x510 [ 1637.009835][T28306] __se_sys_mkdirat+0x35/0x150 [ 1637.015136][T28306] do_syscall_64+0x174/0x580 [ 1637.020334][T28306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.026742][T28306] [ 1637.026742][T28306] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1637.034995][T28306] __lock_acquire+0x1520/0x2cf0 [ 1637.040365][T28306] lock_acquire+0x106/0x350 [ 1637.045390][T28306] __mutex_lock+0x19d/0x1550 [ 1637.050585][T28306] uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1637.058649][T28306] configfs_write_iter+0x337/0x430 [ 1637.064288][T28306] vfs_write+0x612/0xba0 [ 1637.069053][T28306] ksys_write+0x150/0x270 [ 1637.074164][T28306] do_syscall_64+0x174/0x580 [ 1637.079268][T28306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.085680][T28306] [ 1637.085680][T28306] other info that might help us debug this: [ 1637.085680][T28306] [ 1637.095923][T28306] Chain exists of: [ 1637.095923][T28306] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#24 --> &p->frag_sem [ 1637.095923][T28306] [ 1637.110383][T28306] Possible unsafe locking scenario: [ 1637.110383][T28306] [ 1637.117823][T28306] CPU0 CPU1 [ 1637.123181][T28306] ---- ---- [ 1637.128529][T28306] rlock(&p->frag_sem); [ 1637.132769][T28306] lock(&sb->s_type->i_mutex_key#24); [ 1637.140784][T28306] lock(&p->frag_sem); [ 1637.147459][T28306] lock(gadget_subsys.su_mutex); [ 1637.152484][T28306] [ 1637.152484][T28306] *** DEADLOCK *** [ 1637.152484][T28306] [ 1637.160610][T28306] 4 locks held by syz.5.6856/28306: [ 1637.165794][T28306] #0: ffff888078c67cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1637.174879][T28306] #1: ffff88801d71a450 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1637.183876][T28306] #2: ffff88807f11de80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430 [ 1637.193731][T28306] #3: ffff88803523b070 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 1637.203510][T28306] [ 1637.203510][T28306] stack backtrace: [ 1637.209392][T28306] CPU: 0 UID: 0 PID: 28306 Comm: syz.5.6856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1637.209423][T28306] Tainted: [L]=SOFTLOCKUP [ 1637.209431][T28306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1637.209445][T28306] Call Trace: [ 1637.209454][T28306] [ 1637.209464][T28306] dump_stack_lvl+0xe8/0x150 [ 1637.209497][T28306] print_circular_bug+0x2e1/0x300 [ 1637.209535][T28306] check_noncircular+0x12e/0x150 [ 1637.209574][T28306] __lock_acquire+0x1520/0x2cf0 [ 1637.209612][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.209639][T28306] ? __lock_acquire+0x683/0x2cf0 [ 1637.209670][T28306] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1637.209709][T28306] lock_acquire+0x106/0x350 [ 1637.209737][T28306] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1637.209772][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.209802][T28306] __mutex_lock+0x19d/0x1550 [ 1637.209830][T28306] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1637.209861][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.209887][T28306] ? __lock_acquire+0x683/0x2cf0 [ 1637.209919][T28306] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1637.209949][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.209976][T28306] ? __pfx___mutex_lock+0x10/0x10 [ 1637.210007][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.210032][T28306] ? kstrtoull+0x12f/0x1d0 [ 1637.210059][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.210087][T28306] uvcg_frame_dw_max_video_frame_buffer_size_store+0x114/0x370 [ 1637.210121][T28306] ? __pfx_uvcg_frame_dw_max_video_frame_buffer_size_store+0x10/0x10 [ 1637.210154][T28306] ? down_read+0x2be/0x330 [ 1637.210182][T28306] ? __pfx_uvcg_frame_dw_max_video_frame_buffer_size_store+0x10/0x10 [ 1637.210215][T28306] configfs_write_iter+0x337/0x430 [ 1637.210252][T28306] vfs_write+0x612/0xba0 [ 1637.210290][T28306] ? __pfx_vfs_write+0x10/0x10 [ 1637.210328][T28306] ? __fget_files+0x2a/0x420 [ 1637.210361][T28306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1637.210389][T28306] ksys_write+0x150/0x270 [ 1637.210424][T28306] ? __pfx_ksys_write+0x10/0x10 [ 1637.210462][T28306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.210486][T28306] do_syscall_64+0x174/0x580 [ 1637.210513][T28306] ? trace_irq_disable+0x3b/0x140 [ 1637.210543][T28306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.210566][T28306] RIP: 0033:0x7f451779e0d9 [ 1637.210586][T28306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.210606][T28306] RSP: 002b:00007f451858a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1637.210628][T28306] RAX: ffffffffffffffda RBX: 00007f4517a25fa0 RCX: 00007f451779e0d9 [ 1637.210645][T28306] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1637.210660][T28306] RBP: 00007f4517835024 R08: 0000000000000000 R09: 0000000000000000 [ 1637.210680][T28306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1637.210694][T28306] R13: 00007f4517a26038 R14: 00007f4517a25fa0 R15: 00007ffd3ad99718 [ 1637.210720][T28306]