last executing test programs: 27m26.329775648s ago: executing program 32 (id=31): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000), 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x5) r2 = openat$sysfs(0xffffff9c, 0x0, 0xf27c0, 0x1f7) preadv(r2, 0x0, 0x0, 0x20, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \''], 0x2a) close(r5) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bind$packet(r4, &(0x7f0000000180), 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000001ac0)={0x0, 'team0\x00', {0x4}, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r7, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x5, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={0x0, 0x0, 0x52e6a8fd22e483c}) 27m26.174423518s ago: executing program 33 (id=33): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) waitid(0x1, r2, &(0x7f0000000300), 0x1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {0xadffaf9ddd9a1b4c, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0xc542f4bfef524975) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x80000000000006) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x91, 0x2) 26m11.314575069s ago: executing program 34 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x18b) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000800) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000640)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRES32], 0xfe, 0x1508, &(0x7f0000000a00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000001f80)={0x2b29, 0x9b, 0x6}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 24m8.597722696s ago: executing program 35 (id=247): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r3, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0xc000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000040) socket$pppl2tp(0x18, 0x1, 0x1) 21m9.292556053s ago: executing program 36 (id=653): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 20m44.191674102s ago: executing program 37 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r3, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0xc000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000040) socket$pppl2tp(0x18, 0x1, 0x1) 17m43.19146127s ago: executing program 38 (id=1039): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 16m21.133373605s ago: executing program 39 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 8m30.708467336s ago: executing program 40 (id=2695): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5}}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 7m42.000850486s ago: executing program 2 (id=2889): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 7m38.608446698s ago: executing program 2 (id=2896): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x2}}, 0x18) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) 7m37.867383198s ago: executing program 2 (id=2900): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x101a2) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 7m36.973243433s ago: executing program 2 (id=2907): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 7m36.45033164s ago: executing program 2 (id=2911): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x2114, 0x1) getdents(r1, 0x0, 0x0) 7m35.828129388s ago: executing program 2 (id=2914): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000600)={0x84, @remote, 0x4e21, 0x3, 'fo\x00', 0x1f, 0xfffffffe, 0x11000008}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m34.971766492s ago: executing program 41 (id=2914): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000600)={0x84, @remote, 0x4e21, 0x3, 'fo\x00', 0x1f, 0xfffffffe, 0x11000008}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m14.082389315s ago: executing program 6 (id=2984): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000400)=""/137, 0x89, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 7m10.576759185s ago: executing program 6 (id=2999): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x60040090) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cd43bc444a506cd4fb40ada91ac7660b3"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m9.200248315s ago: executing program 6 (id=3007): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d40)="b2a2a59009045255e076020cf25a4f20f0f4a0a78e47f03158a2c0453ac916f0ce60722f", 0x24}, {&(0x7f0000000d80)="33179bfbbb24b95212e57f1c75570e81e7e9cc4a05800cfb0073a7b43f0ff5cad39794b202a84a4211e4eefc13e5ae57d09d7b7dedf522b1f3e289b6fc254d2bef078a8ae1", 0x45}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001740)="df22ff04fba7ae740124eaf7904da09598ef2a979de7bb6ab87ce7d22dc18f15c4e798812d973a43d282cb89c9e76b50f7a080", 0x33}], 0x1}}], 0x4, 0x2090) sendmsg$inet_sctp(r0, &(0x7f0000003f40)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x6, @remote, 0x9}, 0x1c, &(0x7f0000003dc0)=[{&(0x7f0000000140)="a92f6abaa6484b5dc3ddfbade1123030a0c98a82ab4755992e8957621017898ca76721a5a7359c58e4d48bed25edc490d5e77017205d40695a8610dfd6377eeeae980445c81bbc04c0cf7c7b53a986411dafad0f1d68570f04575f1967d64aeb7cd791220f6c64a7ed33cf94e5149a5af1ab45291dca65b413aaa24179951f4860058a243424b8e9771d1310ce99f61e5cc092df2429297bd85741991080143ffea033", 0xa3}, {&(0x7f0000000200)="071d8a42d7df762c1ade88a686ba23dd550f74", 0x13}, {&(0x7f00000002c0)="34d373acf2debbb6bff2b6e5db1305039a789a35551a8a0bbf52d427f40e6ca92e1cf11c4990e544fd43a1f6b50f61d817d96283d2fef8f76934cfed40835a482d34ecdc925e1bc4a61571ff2734d6b7755903bfc57e8b5b9a61bdd38c7065ec5882c7c8cdac4195ee1c33d6759c488440dc1657c552de93f79ba94ac18a871dd44410e21440f044f9118768b54aadd46a44ab88e45346a912c621acc873c3d9f7a3cbd3c74259215918884f0b03f24ce07999b56bdc8e446292618ba6571db376d369a2bd40ffa93e4ed5b4d65b20288e3ccd81088be519f5c4569a52668cb1494a565179912542a73447302c6bf0398784c76df1e52a", 0xf7}, {&(0x7f0000001c00)="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", 0xc00}, {0x0}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="92d0eb251da148f908eb14e37e3a2013ab4048c62c5254f2922854b5ee04a60e72e0d22c71fd75fa9ff623490011e1c2a7976c75f24c5561a828711d425a27da2aeac1d752700d52c40a34074f705e8e05d9f67b77a2a9ef0d1a45fc9251536d3a174fc2da4503b628eec6477bcde349e9134da9051f256821eb07056d6e46dbb4767255f8ac99522e6fe8a300053f3b1f707a97bfaba7a95bb5e8b2cafc44403c477d892e468c5a2d2aaa7357c0d194eab7acb6ee7ccf3999efd43c9bee0603978be3e9c4d6ed594505b139e9d8cc3589551420c761e905debfc8ac257d5ad8f0570884827c8dc1c0bed456f93035766ab880612ed64096", 0xf8}, {&(0x7f0000003d80)="060d56b33aa6c01ad51562b88b01f98b41a0237cbfe5e241742de1b11609ce76d3", 0x21}], 0x8, &(0x7f0000003ec0)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xe}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x8, 0x0, 0x6, 0x60, 0x2, 0x7, 0x7}}], 0x68}, 0x4000800) 7m8.332447006s ago: executing program 6 (id=3011): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {@fat=@debug}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_lower}, {@shortname_mixed}, {@fat=@flush}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 7m7.737438001s ago: executing program 6 (id=3015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 7m6.855854898s ago: executing program 6 (id=3020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfba) socket(0xa, 0x3, 0xff) syz_open_procfs(0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x10, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol, @generic={0x3, 0x2}]}}}}}}}}, 0x0) socket(0x21, 0x3, 0x0) 7m5.18716446s ago: executing program 42 (id=3020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfba) socket(0xa, 0x3, 0xff) syz_open_procfs(0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x10, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol, @generic={0x3, 0x2}]}}}}}}}}, 0x0) socket(0x21, 0x3, 0x0) 7m4.486904166s ago: executing program 0 (id=3028): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendto$packet(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000280)={0x11, 0x88a8, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 7m3.908705545s ago: executing program 0 (id=3032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 7m0.640234655s ago: executing program 0 (id=3048): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 6m59.482161163s ago: executing program 0 (id=3050): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x80054) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) 6m59.057306443s ago: executing program 0 (id=3051): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000500)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 6m57.972610699s ago: executing program 0 (id=3055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000440)={0x1}, 0x8, 0x0) 6m56.883627236s ago: executing program 43 (id=3055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000440)={0x1}, 0x8, 0x0) 6m1.212391425s ago: executing program 8 (id=3254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 6m0.818544295s ago: executing program 8 (id=3256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, 0x0, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 5m57.575860766s ago: executing program 8 (id=3271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 5m53.12066615s ago: executing program 8 (id=3289): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200041a, &(0x7f00000001c0)={[{@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-ru'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) pidfd_getfd(r0, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) getpid() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) 5m52.365350797s ago: executing program 8 (id=3294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) 5m51.999345244s ago: executing program 8 (id=3298): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000004380)=""/4124, 0xcde) 5m51.429398981s ago: executing program 44 (id=3298): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000004380)=""/4124, 0xcde) 1m45.296271725s ago: executing program 4 (id=3931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 1m44.075164748s ago: executing program 1 (id=3932): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.619241153s ago: executing program 4 (id=3941): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 1m40.476339284s ago: executing program 1 (id=3942): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(0x0, 0x6) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) epoll_create1(0x80000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) 1m39.366852852s ago: executing program 1 (id=3945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0903000000000000000029"], 0x14}}, 0x0) 1m35.931100888s ago: executing program 1 (id=3958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m35.919030246s ago: executing program 4 (id=3947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) 1m33.989820048s ago: executing program 1 (id=3950): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m32.376225705s ago: executing program 4 (id=3954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m32.318925163s ago: executing program 1 (id=3955): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 1m29.88788621s ago: executing program 4 (id=3959): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) 1m25.881636282s ago: executing program 4 (id=3962): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x45, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) socket$nl_generic(0x10, 0x3, 0x10) 1m25.880662678s ago: executing program 3 (id=3963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 1m24.008013166s ago: executing program 3 (id=3965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m22.620280093s ago: executing program 3 (id=3968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 1m19.711853723s ago: executing program 3 (id=3973): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/109, 0x6d}], 0x1}, 0x2000) 1m18.093628588s ago: executing program 3 (id=3975): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xaef62000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000180), 0x80, r3, 0x0, 0x7}, 0x38) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 1m16.22965641s ago: executing program 45 (id=3955): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 1m16.184585125s ago: executing program 3 (id=3979): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) 1m8.817459956s ago: executing program 46 (id=3962): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x45, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) socket$nl_generic(0x10, 0x3, 0x10) 59.938555385s ago: executing program 47 (id=3979): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) 18.795625837s ago: executing program 9 (id=4051): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 17.850051547s ago: executing program 7 (id=4052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 15.153555046s ago: executing program 9 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 13.975972312s ago: executing program 7 (id=4054): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x2000, 0x3ffffff, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 11.557326362s ago: executing program 9 (id=4055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 11.539906298s ago: executing program 5 (id=4056): r0 = userfaultfd(0x80001) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x0, 0x2, 0x0, {0x1, 0x8c7, 0x1}}], 0x800000000000166, 0x20, 0xd, 0x15d2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000005c0)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) mknodat$null(0xffffffffffffffff, 0x0, 0x100, 0x103) readv(r0, 0x0, 0x0) mmap(&(0x7f00003dc000/0x10000)=nil, 0x10000, 0x0, 0x8010, 0xffffffffffffffff, 0xc8408000) 9.032053042s ago: executing program 7 (id=4057): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigqueueinfo(r0, 0x37, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000001c0)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) 9.015535854s ago: executing program 5 (id=4058): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x2, 0x8, 0x3011, 0x7, 0x4, 0x3, 0x0, 0x1}}) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x3f}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/250, 0x1a, 0xfa, 0x9}, 0x28) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000002, &(0x7f0000000100)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x8}}, {@uid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@unhide}, {@noadinicb}, {@undelete}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") 7.642315606s ago: executing program 7 (id=4059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef17037236"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 7.621093468s ago: executing program 9 (id=4060): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = dup(0xffffffffffffffff) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x170, 0x168, 0x9, 0x170, 0xb, 0x3a0, 0x250, 0x250, 0x3a0, 0x250, 0x3, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [0x0, 0xff000000, 0xff000000], 'veth0_to_bridge\x00', 'sit0\x00', {}, {0xff}, 0x6c, 0x0, 0x0, 0x40}, 0x6000000, 0x108, 0x170, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x71e, 0x9, 0x5, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x0) 7.593422061s ago: executing program 5 (id=4061): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) r6 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x0) r7 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.437855076s ago: executing program 9 (id=4062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4d11d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c628b9b90195024ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd4c9a6e94acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x27, 0x558d, &(0x7f00000014c0)="$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") socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0xfffffffffffffffe) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) landlock_restrict_self(0xffffffffffffffff, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(r4, &(0x7f0000000100)='.\x02\x00', r4, &(0x7f0000000500)='./file0\x00', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}}, 0x0) 4.51727557s ago: executing program 9 (id=4063): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x81) semget$private(0x0, 0x207, 0x70d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r4 = io_uring_setup(0x2dfd, &(0x7f00000002c0)={0x0, 0x54fa, 0x8, 0x2, 0xa3}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.147988099s ago: executing program 7 (id=4064): write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read(r4, &(0x7f0000000180)=""/199, 0xc7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x4}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffd, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.513458456s ago: executing program 7 (id=4065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) connect$inet6(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8777, 0x0) write$binfmt_register(r6, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x50]}, 0x2e) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e01020301090224000100"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 2.243024921s ago: executing program 5 (id=4066): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) ioprio_get$pid(0x1, 0x0) dup(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 825.873395ms ago: executing program 5 (id=4067): open(&(0x7f0000000180)='.\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r3, 0x0) 0s ago: executing program 5 (id=4068): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x4000006, 0x8, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 0000-000000000000. [ 1459.010134][T20446] loop9: detected capacity change from 0 to 512 [ 1459.061735][T20446] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1459.138181][T20446] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3435: inode has both inline data and extents flags [ 1459.329887][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1459.335770][T20446] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1459.339810][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1459.355512][ C0] EXT4-fs (loop9): initial error at time 1780925903: ext4_orphan_get:1397: inode 15 [ 1459.365017][ C0] EXT4-fs (loop9): last error at time 1780925903: ext4_orphan_get:1397: inode 15 [ 1459.392781][T20446] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.3435: couldn't read orphan inode 15 (err -117) [ 1459.492922][T20446] loop9: lost filesystem error report for type 5 error -117 [ 1459.506034][T20446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.910215][ T5738] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1459.925339][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.102340][ T5738] usb 5-1: config 0 has no interfaces? [ 1460.133551][ T5738] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1460.180016][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.214412][ T5738] usb 5-1: Product: syz [ 1460.233845][ T5738] usb 5-1: Manufacturer: syz [ 1460.252132][ T5738] usb 5-1: SerialNumber: syz [ 1460.263351][T20471] fuse: fd is not a fuse device [ 1460.285028][ T5738] usb 5-1: config 0 descriptor?? [ 1460.369739][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1460.592192][ T5738] usb 5-1: USB disconnect, device number 30 [ 1461.409674][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1461.768553][T20496] binfmt_misc: register: failed to install interpreter file ./file0 [ 1462.439509][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1462.649892][ T5916] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1462.869681][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1462.881412][ T5916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.901648][ T5916] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1462.936878][ T5916] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1462.997917][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.023417][ T5916] usb 10-1: Product: syz [ 1463.031330][ T5916] usb 10-1: Manufacturer: syz [ 1463.048501][ T5916] usb 10-1: SerialNumber: syz [ 1463.069264][ T5916] usb 10-1: config 0 descriptor?? [ 1463.197772][T20520] overlayfs: failed to clone upperpath [ 1463.479591][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1463.585134][T20533] fuse: fd is not a fuse device [ 1464.519391][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1464.832600][T20540] binfmt_misc: register: failed to install interpreter file ./file0 [ 1465.559166][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1465.736673][ T5916] usb 10-1: USB disconnect, device number 82 [ 1465.786441][T20549] loop5: detected capacity change from 0 to 512 [ 1465.800932][ T5925] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1465.946366][T20549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1465.973001][T20549] ext4 filesystem being mounted at /602/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1465.987316][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 1466.034901][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.079297][ T5925] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1466.210603][ T5925] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1466.599051][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1466.695180][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.703320][ T5925] usb 5-1: Product: syz [ 1466.708106][ T5925] usb 5-1: Manufacturer: syz [ 1466.760489][ T5925] usb 5-1: SerialNumber: syz [ 1466.797587][ T5925] usb 5-1: config 0 descriptor?? [ 1466.847428][ T5925] usb 5-1: can't set config #0, error -71 [ 1466.900587][ T5925] usb 5-1: USB disconnect, device number 31 [ 1466.913712][T20558] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 1467.640276][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1467.874198][ T5648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.678864][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1469.340353][T20597] loop5: detected capacity change from 0 to 256 [ 1469.495671][T20597] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1469.728751][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1469.758954][ T5925] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1469.918773][ T5925] usb 10-1: Using ep0 maxpacket: 8 [ 1469.936221][ T5925] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.978653][ T5925] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1469.995150][ T5925] usb 10-1: config 1 has no interface number 0 [ 1470.034344][ T5925] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1470.094940][ T5925] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1470.124215][ T5925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.156509][ T5925] usb 10-1: Product: syz [ 1470.183444][ T5925] usb 10-1: Manufacturer: syz [ 1470.212222][ T5925] usb 10-1: SerialNumber: syz [ 1470.420490][T20621] overlayfs: failed to resolve './cgroup': -2 [ 1470.758550][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1471.259472][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1471.619955][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1471.644474][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.700869][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1471.763566][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1471.787350][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.798430][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1471.834333][ T24] usb 5-1: Product: syz [ 1471.852411][ T24] usb 5-1: Manufacturer: syz [ 1471.872825][ T24] usb 5-1: SerialNumber: syz [ 1471.924936][T20607] snd-usb-audio 10-1:1.1: Runtime PM usage count underflow! [ 1471.939565][ T24] usb 5-1: config 0 descriptor?? [ 1472.001844][ T5784] usb 10-1: USB disconnect, device number 83 [ 1472.249628][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3487'. [ 1472.838310][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1473.532225][ T5916] usb 5-1: USB disconnect, device number 32 [ 1473.674977][T20657] loop7: detected capacity change from 0 to 2048 [ 1473.830524][T20657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1473.888247][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1474.471290][T20665] fuse: Bad value for 'fd' [ 1474.554058][T20671] fuse: Bad value for 'fd' [ 1474.899664][ T24] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1474.918127][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1475.099986][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1475.130355][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.174343][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1475.256743][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1475.312904][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.370532][ T24] usb 10-1: Product: syz [ 1475.394886][ T24] usb 10-1: Manufacturer: syz [ 1475.418056][ T24] usb 10-1: SerialNumber: syz [ 1475.451832][ T24] usb 10-1: config 0 descriptor?? [ 1475.967956][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1477.007836][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1477.238735][ T5780] usb 10-1: USB disconnect, device number 84 [ 1477.948058][T20726] loop9: detected capacity change from 0 to 512 [ 1477.991997][T20726] EXT4-fs: Ignoring removed oldalloc option [ 1478.027923][T20726] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1478.047854][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1478.565193][T20726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.077602][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1479.199273][ T5916] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1479.207192][T20726] EXT4-fs (loop9): Online defrag not supported for encrypted files [ 1479.373687][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.408216][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 1479.415861][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.441137][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1479.501919][ T5916] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1479.521747][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.537486][ T5916] usb 5-1: Product: syz [ 1479.549754][ T5916] usb 5-1: Manufacturer: syz [ 1479.555909][ T5916] usb 5-1: SerialNumber: syz [ 1479.581939][ T5916] usb 5-1: config 0 descriptor?? [ 1479.958432][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 540 seconds [ 1479.969480][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 540 seconds [ 1479.980731][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 540 seconds [ 1479.992266][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 540 seconds [ 1480.117553][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1480.838250][T19867] Bluetooth: hci2: command 0x0406 tx timeout [ 1481.080491][ T30] audit: type=1326 audit(1780925925.047:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.131344][ T5752] usb 5-1: USB disconnect, device number 33 [ 1481.157346][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1481.204481][ T30] audit: type=1326 audit(1780925925.047:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.287565][ T30] audit: type=1326 audit(1780925925.047:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.343665][ T30] audit: type=1326 audit(1780925925.047:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.426131][ T30] audit: type=1326 audit(1780925925.047:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.494959][ T30] audit: type=1326 audit(1780925925.047:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.540496][ T30] audit: type=1326 audit(1780925925.047:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.570952][ T30] audit: type=1326 audit(1780925925.057:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.674927][ T30] audit: type=1326 audit(1780925925.057:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1481.959126][ T30] audit: type=1326 audit(1780925925.057:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.1.3514" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7fc00000 [ 1482.197712][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1482.860223][T20779] loop4: detected capacity change from 0 to 512 [ 1482.943542][T20781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.956183][T20779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.019068][T20779] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.237127][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1483.999531][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.138021][T17214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.277103][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1484.987740][ T24] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1485.184874][T20794] loop4: detected capacity change from 0 to 2048 [ 1485.197186][T20794] EXT4-fs: Ignoring removed nobh option [ 1485.233000][T20794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1485.270965][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1485.286109][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.297060][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1485.298054][T20794] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.309466][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1485.325805][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1485.333664][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.353669][ T24] usb 10-1: Product: syz [ 1485.358325][ T24] usb 10-1: Manufacturer: syz [ 1485.363083][ T24] usb 10-1: SerialNumber: syz [ 1485.371260][ T24] usb 10-1: config 0 descriptor?? [ 1485.468661][T20794] EXT4-fs (loop4): shut down requested (2) [ 1485.651982][T17214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.095238][T16729] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.149574][T16729] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.252622][T16729] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.344700][T16729] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.356790][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1487.117647][ T5752] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1487.353491][ T3507] usb 10-1: USB disconnect, device number 85 [ 1487.396735][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1487.450254][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 1487.470714][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.534501][ T5752] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1487.578570][ T5752] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1487.625985][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.658609][ T5752] usb 5-1: Product: syz [ 1487.690462][ T5752] usb 5-1: Manufacturer: syz [ 1487.706686][ T5752] usb 5-1: SerialNumber: syz [ 1487.716355][ T5752] usb 5-1: config 0 descriptor?? [ 1487.913950][T16739] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.437571][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1489.201229][ T5784] usb 5-1: USB disconnect, device number 34 [ 1489.486757][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1490.400295][T16739] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.516317][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1491.180423][T20871] loop9: detected capacity change from 0 to 32768 [ 1491.219261][T20871] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1491.235419][T16739] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.427322][T20871] XFS (loop9): Ending clean mount [ 1491.445180][T20871] XFS (loop9): Quotacheck needed: Please wait. [ 1491.556159][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1491.596146][T20878] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1492.025596][T20871] XFS (loop9): Quotacheck: Done. [ 1492.596627][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1493.635922][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1494.122665][T16739] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.587152][T20920] fuse: Bad value for 'fd' [ 1494.685975][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1495.194673][ T7511] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1495.715743][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1495.815365][T20928] loop7: detected capacity change from 0 to 128 [ 1495.871989][T20936] fuse: fd is not a fuse device [ 1495.985997][T20928] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1496.069780][T20928] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.504004][T20928] fscrypt (loop7, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 1496.755588][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1497.788361][T19863] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1497.805440][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1497.907252][T16739] team0: left allmulticast mode [ 1497.918169][T16739] team_slave_0: left allmulticast mode [ 1497.945292][T16739] team_slave_1: left allmulticast mode [ 1497.947447][ T5752] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1497.981564][T16739] bridge1: left allmulticast mode [ 1498.006980][T16739] team0: left promiscuous mode [ 1498.024641][T16739] team_slave_0: left promiscuous mode [ 1498.054824][T16739] team_slave_1: left promiscuous mode [ 1498.087686][T16739] bridge1: left promiscuous mode [ 1498.118184][T16739] bridge3: left promiscuous mode [ 1498.124114][T20964] loop5: detected capacity change from 0 to 1024 [ 1498.155966][T16739] bridge0: port 3(team0) entered disabled state [ 1498.175958][ T5752] usb 10-1: Using ep0 maxpacket: 32 [ 1498.177766][T20964] EXT4-fs: Ignoring removed bh option [ 1498.211698][ T5752] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.265251][ T5752] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1498.310882][T20964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.313567][ T5752] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1498.330569][T16739] bridge_slave_1: left allmulticast mode [ 1498.338288][ T5752] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.347240][ T5752] usb 10-1: Product: syz [ 1498.351535][ T5752] usb 10-1: Manufacturer: syz [ 1498.356948][ T5752] usb 10-1: SerialNumber: syz [ 1498.367018][ T5752] usb 10-1: config 0 descriptor?? [ 1498.416764][T16739] bridge_slave_1: left promiscuous mode [ 1498.422630][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.455467][T16739] bridge_slave_0: left allmulticast mode [ 1498.487331][T16739] bridge_slave_0: left promiscuous mode [ 1498.510136][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.775125][T20980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.835678][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1499.420055][ T5648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.762725][ T5752] usb 10-1: USB disconnect, device number 86 [ 1499.875379][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1500.838803][T16739] team0: Port device bridge1 removed [ 1500.915399][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1500.929178][T21009] loop5: detected capacity change from 0 to 2048 [ 1500.989696][T21009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1501.083822][T16739] team0: Port device bridge3 removed [ 1501.293457][T16739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.578423][T16739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.955161][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1502.605760][T16739] bond0 (unregistering): Released all slaves [ 1502.956592][T21028] binfmt_misc: register: failed to install interpreter file ./file0 [ 1502.995456][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1503.324826][ T5752] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1503.617726][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 1503.649222][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.671931][ T5752] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1503.702154][ T5752] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1503.724733][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.733121][ T5752] usb 5-1: Product: syz [ 1503.737765][ T5752] usb 5-1: Manufacturer: syz [ 1503.742396][ T5752] usb 5-1: SerialNumber: syz [ 1503.752212][T21029] syzkaller0: entered promiscuous mode [ 1503.769375][ T5752] usb 5-1: config 0 descriptor?? [ 1503.814048][T21029] syzkaller0: entered allmulticast mode [ 1504.034742][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1504.181919][T21042] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1505.074625][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1505.179137][ T5752] usb 5-1: USB disconnect, device number 35 [ 1506.114518][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1506.497842][ T5745] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1506.815765][ T5745] usb 10-1: Using ep0 maxpacket: 32 [ 1506.832901][ T5745] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.868912][ T5745] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1506.908117][ T5745] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1506.936226][ T5745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.965754][ T5745] usb 10-1: Product: syz [ 1506.981966][ T5745] usb 10-1: Manufacturer: syz [ 1507.006107][ T5745] usb 10-1: SerialNumber: syz [ 1507.066351][ T5745] usb 10-1: config 0 descriptor?? [ 1507.164414][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1507.448112][T21045] loop5: detected capacity change from 0 to 32768 [ 1507.553206][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1507.553235][ T30] audit: type=1800 audit(1780925951.560:254): pid=21045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3584" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 1508.204280][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1508.711416][ T30] audit: type=1800 audit(1780925952.730:255): pid=21069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3584" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 1508.795446][ T5745] usb 10-1: USB disconnect, device number 87 [ 1509.234229][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1510.037122][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 570 seconds [ 1510.052990][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 570 seconds [ 1510.064212][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 570 seconds [ 1510.075414][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 570 seconds [ 1510.274018][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1511.314331][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1512.353824][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1513.395109][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1514.429676][ T5752] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1514.437504][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1514.646880][ T5752] usb 10-1: Using ep0 maxpacket: 32 [ 1514.655299][ T5752] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.668387][ T5752] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1514.681900][ T5752] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1514.691316][ T5752] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.699484][ T5752] usb 10-1: Product: syz [ 1514.704159][ T5752] usb 10-1: Manufacturer: syz [ 1514.708878][ T5752] usb 10-1: SerialNumber: syz [ 1514.731054][ T5752] usb 10-1: config 0 descriptor?? [ 1515.487068][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1516.522664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1516.669598][T20736] usb 10-1: USB disconnect, device number 88 [ 1516.971887][T16739] hsr_slave_0: left promiscuous mode [ 1517.553209][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1517.715448][T16739] hsr_slave_1: left promiscuous mode [ 1517.730930][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.827861][T16739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.885337][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.928415][T16739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.943268][ T5752] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1518.123152][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 1518.146694][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.222277][ T5752] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1518.250411][ T5752] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1518.270015][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.297435][ T5752] usb 5-1: Product: syz [ 1518.306451][ T5752] usb 5-1: Manufacturer: syz [ 1518.349753][ T5752] usb 5-1: SerialNumber: syz [ 1518.593126][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1518.813615][ T5752] usb 5-1: config 0 descriptor?? [ 1519.008960][T16739] veth1_macvtap: left promiscuous mode [ 1519.024179][T16739] veth0_macvtap: left promiscuous mode [ 1519.030195][T16739] veth1_vlan: left promiscuous mode [ 1519.039559][T16739] veth0_vlan: left promiscuous mode [ 1519.199457][T21150] loop9: detected capacity change from 0 to 32768 [ 1519.302813][ T30] audit: type=1800 audit(1780925963.321:256): pid=21150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3606" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 1519.494907][ T30] audit: type=1800 audit(1780925963.511:257): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3606" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 1519.643050][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1520.204395][T20736] usb 5-1: USB disconnect, device number 36 [ 1520.320833][T16739] team0 (unregistering): Port device team_slave_1 removed [ 1520.352746][T16739] team0 (unregistering): Port device team_slave_0 removed [ 1520.682839][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1521.722759][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1522.462421][ T30] audit: type=1800 audit(1780925966.422:258): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3615" name="bus" dev="overlay" ino=3167 res=0 errno=0 [ 1522.712460][T21218] loop7: detected capacity change from 0 to 128 [ 1522.750495][T21218] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1522.762761][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1522.859405][T21218] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1523.792572][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1524.486340][T21229] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1524.507693][T21229] FAT-fs (loop7): Filesystem has been set read-only [ 1524.604416][ T24] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1524.762855][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1524.794572][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.832388][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1524.849199][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1524.894310][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1524.952174][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.045816][ T24] usb 10-1: Product: syz [ 1525.106962][ T24] usb 10-1: Manufacturer: syz [ 1525.134409][ T24] usb 10-1: SerialNumber: syz [ 1525.833566][ T24] usb 10-1: config 0 descriptor?? [ 1525.872282][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1526.178876][ T5752] usb 10-1: USB disconnect, device number 89 [ 1526.241516][T16739] IPVS: stop unused estimator thread 0... [ 1526.699445][T21260] syzkaller0: entered promiscuous mode [ 1526.742647][T21260] syzkaller0: entered allmulticast mode [ 1526.912120][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1527.450613][T21260] tipc: Enabled bearer , priority 0 [ 1527.466519][ T5752] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1527.697072][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 1527.716575][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.738409][ T5752] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1527.752330][T21277] syzkaller0: entered promiscuous mode [ 1527.773094][ T5752] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1527.780267][T21277] syzkaller0: entered allmulticast mode [ 1527.818213][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.854710][ T5752] usb 5-1: Product: syz [ 1527.884658][ T5752] usb 5-1: Manufacturer: syz [ 1527.962158][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1528.142078][ T5752] usb 5-1: SerialNumber: syz [ 1528.157022][ T5752] usb 5-1: config 0 descriptor?? [ 1528.927101][T21298] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1528.991887][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1530.031798][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1530.291710][ T5752] usb 5-1: USB disconnect, device number 37 [ 1530.443799][T21307] tipc: Started in network mode [ 1530.518449][T21307] tipc: Node identity 4, cluster identity 4711 [ 1530.601511][T21307] tipc: Node number set to 4 [ 1531.081651][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1532.111561][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1532.858568][T21331] fuse: fd is not a fuse device [ 1533.151410][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1533.341610][T21342] tipc: Enabling of bearer rejected, failed to enable media [ 1533.560494][T21345] netlink: 'syz.5.3644': attribute type 26 has an invalid length. [ 1534.191316][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1535.231762][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1535.686240][T16739] bridge_slave_1: left allmulticast mode [ 1535.701454][ T6879] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1535.711455][T16739] bridge_slave_1: left promiscuous mode [ 1535.737673][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.754015][T16739] bridge_slave_0: left allmulticast mode [ 1535.762226][T16739] bridge_slave_0: left promiscuous mode [ 1535.770668][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.892476][ T6879] usb 5-1: Using ep0 maxpacket: 32 [ 1535.923832][ T6879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.944005][ T6879] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1535.976194][ T6879] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1535.999674][ T6879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.011555][ T13] Bluetooth: (null): Too short H5 packet [ 1536.047540][ T6879] usb 5-1: Product: syz [ 1536.064019][ T6879] usb 5-1: Manufacturer: syz [ 1536.080860][ T13] Bluetooth: (null): Invalid header checksum [ 1536.088891][ T6879] usb 5-1: SerialNumber: syz [ 1536.195898][ T6879] usb 5-1: config 0 descriptor?? [ 1536.273073][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1536.757349][T16739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.830558][T16739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.870390][T16739] bond0 (unregistering): Released all slaves [ 1536.903819][T21397] tipc: Enabled bearer , priority 0 [ 1537.310955][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1538.156211][ T9] usb 5-1: USB disconnect, device number 38 [ 1538.360854][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1539.397078][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1539.523638][T21419] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1539.531680][T21419] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1539.540704][T21419] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1539.548517][T21419] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1540.152530][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 600 seconds [ 1540.163512][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 600 seconds [ 1540.174665][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 600 seconds [ 1540.185813][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 600 seconds [ 1540.430664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1540.623105][T16739] hsr_slave_0: left promiscuous mode [ 1541.480484][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1541.847465][T21433] program syz.4.3665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1542.346419][T16739] hsr_slave_1: left promiscuous mode [ 1542.353031][T16739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.368782][T16739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.520384][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1543.550269][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1544.590314][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1545.281123][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.630024][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1545.997542][T16739] team0 (unregistering): Port device team_slave_1 removed [ 1546.206044][T16739] team0 (unregistering): Port device team_slave_0 removed [ 1546.669936][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1547.610199][T18671] Bluetooth: hci3: command 0x0406 tx timeout [ 1547.719772][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1548.749721][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1548.941318][T21506] overlayfs: failed to clone upperpath [ 1549.789570][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1550.829494][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1551.059962][T21519] fuse: fd is not a fuse device [ 1551.869329][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1552.909391][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1553.540756][T21548] overlayfs: failed to resolve './file0': -2 [ 1553.949079][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1554.988958][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1556.028840][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1556.051258][T21571] binfmt_misc: register: failed to install interpreter file ./file0 [ 1556.837439][T21577] tipc: Enabling of bearer rejected, failed to enable media [ 1556.948808][T11888] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1557.078727][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1557.151815][T11888] usb 10-1: Using ep0 maxpacket: 32 [ 1557.416379][T11888] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.607003][T11888] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1557.697193][T11888] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1557.743910][T11888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.802023][T11888] usb 10-1: Product: syz [ 1557.870717][T11888] usb 10-1: Manufacturer: syz [ 1557.937781][T11888] usb 10-1: SerialNumber: syz [ 1558.118619][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1558.627118][T11888] usb 10-1: config 0 descriptor?? [ 1558.962316][T11888] usb 10-1: can't set config #0, error -71 [ 1559.158515][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1559.174074][T11888] usb 10-1: USB disconnect, device number 90 [ 1560.198376][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1561.228366][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1562.278149][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1562.468844][T21605] 9p: Bad value for 'rfdno' [ 1562.547818][T21606] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[18821] was attempted by ""[21606] [ 1563.318044][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1563.616713][T21612] fuse: fd is not a fuse device [ 1564.347916][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1564.530841][T21618] loop5: detected capacity change from 0 to 128 [ 1564.583066][T21618] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1565.387920][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1566.427701][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1567.394688][T21632] fuse: fd is not a fuse device [ 1567.467581][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1568.507438][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1569.395228][ T30] audit: type=1326 audit(1780926013.417:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7ffc0000 [ 1569.528499][ T30] audit: type=1326 audit(1780926013.427:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7ffc0000 [ 1569.553878][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1569.682275][ T30] audit: type=1326 audit(1780926013.427:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ed9ce59 code=0x7ffc0000 [ 1569.754395][T21655] loop7: detected capacity change from 0 to 2048 [ 1569.800533][ T30] audit: type=1326 audit(1780926013.427:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe50ed9ce59 code=0x7ffc0000 [ 1569.902171][ T30] audit: type=1326 audit(1780926013.537:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe50ed5d68e code=0x7ffc0000 [ 1569.928659][ T30] audit: type=1326 audit(1780926013.557:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe50ed5d68e code=0x7ffc0000 [ 1569.954991][ T30] audit: type=1326 audit(1780926013.617:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe50ed5d68e code=0x7ffc0000 [ 1570.007681][ T30] audit: type=1326 audit(1780926013.817:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe50ed9ce59 code=0x7ffc0000 [ 1570.045698][ T30] audit: type=1326 audit(1780926013.817:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21636 comm="syz.1.3720" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe50ed9ce59 code=0x7ffc0000 [ 1570.073465][T21655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1570.419227][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 630 seconds [ 1570.430836][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 630 seconds [ 1570.441948][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 630 seconds [ 1570.453046][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 630 seconds [ 1570.587202][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1571.486735][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3727'. [ 1571.512286][ T8399] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1571.627109][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1572.427910][ T8399] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1572.483152][ T8399] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1572.483152][ T8399] [ 1572.544474][ T8399] EXT4-fs (loop7): Total free blocks count 0 [ 1572.585041][ T8399] EXT4-fs (loop7): Free/Dirty block details [ 1572.639821][ T8399] EXT4-fs (loop7): free_blocks=2415919504 [ 1572.666993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1572.709525][ T8399] EXT4-fs (loop7): dirty_blocks=3856 [ 1572.761626][ T8399] EXT4-fs (loop7): Block reservation details [ 1572.833523][ T8399] EXT4-fs (loop7): i_reserved_data_blocks=241 [ 1573.408199][T16718] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 2048 with error 28 [ 1573.716876][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1574.602600][T19863] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1574.746894][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1575.796700][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1576.130559][ T5745] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1576.826594][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1577.866478][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1577.895012][ T5745] usb 10-1: device descriptor read/64, error -71 [ 1578.906271][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1579.795150][T21737] loop9: detected capacity change from 0 to 512 [ 1579.806038][T21737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1579.956168][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1580.015460][T21737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.087278][T21748] loop5: detected capacity change from 0 to 512 [ 1580.106902][T21737] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.140489][T21748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1580.157354][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3747'. [ 1580.206551][T21748] EXT4-fs (loop5): 1 truncate cleaned up [ 1580.254966][T21748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1580.315188][T21756] syzkaller0: entered promiscuous mode [ 1580.345044][T21756] syzkaller0: entered allmulticast mode [ 1580.986079][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1582.025932][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1582.248110][ T5648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.075826][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1583.849141][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.105718][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1584.540764][T21792] fuse: Bad value for 'fd' [ 1585.145716][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1585.595614][ T5752] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1586.080891][T21812] loop5: detected capacity change from 0 to 40427 [ 1586.101189][ T5752] usb 10-1: Using ep0 maxpacket: 32 [ 1586.157487][T21812] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1586.165329][T21812] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1586.188088][T21812] F2FS-fs (loop5): invalid crc value [ 1586.196023][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1586.419073][ T5752] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.470510][T21812] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1586.521412][T21812] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1586.528652][T21812] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1586.583429][ T5752] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1586.671002][ T5752] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1586.767352][ T5752] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.235400][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1587.763122][ T5752] usb 10-1: Product: syz [ 1587.772632][ T5752] usb 10-1: Manufacturer: syz [ 1587.790711][ T5752] usb 10-1: SerialNumber: syz [ 1587.811543][ T5752] usb 10-1: config 0 descriptor?? [ 1588.153778][ T5752] usb 10-1: can't set config #0, error -71 [ 1588.161621][ T5752] usb 10-1: USB disconnect, device number 93 [ 1588.265903][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1588.339281][T21812] syz.5.3764: attempt to access beyond end of device [ 1588.339281][T21812] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1588.356517][T21812] CPU: 1 UID: 0 PID: 21812 Comm: syz.5.3764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1588.356577][T21812] Tainted: [L]=SOFTLOCKUP [ 1588.356590][T21812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1588.356613][T21812] Call Trace: [ 1588.356625][T21812] [ 1588.356640][T21812] dump_stack_lvl+0x100/0x190 [ 1588.356686][T21812] f2fs_stop_checkpoint+0x600/0x9b0 [ 1588.356728][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.356782][T21812] ? errseq_set+0xe3/0x150 [ 1588.356838][T21812] ? errseq_set+0xe3/0x150 [ 1588.356893][T21812] f2fs_write_end_io+0xf59/0x1340 [ 1588.356944][T21812] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1588.356995][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.357052][T21812] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1588.357096][T21812] bio_endio+0x78f/0x8f0 [ 1588.357143][T21812] submit_bio_noacct+0x64c/0x2000 [ 1588.357212][T21812] f2fs_submit_write_bio+0x135/0x340 [ 1588.357256][T21812] __submit_merged_bio+0x331/0x780 [ 1588.357309][T21812] __submit_merged_write_cond+0x3fe/0x510 [ 1588.357367][T21812] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1588.357425][T21812] ? __pfx___might_resched+0x10/0x10 [ 1588.357477][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.357534][T21812] f2fs_write_cache_pages+0x20e9/0x2630 [ 1588.357611][T21812] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1588.357671][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.357720][T21812] ? __page_table_check_zero+0x333/0x410 [ 1588.357811][T21812] ? __lock_acquire+0x4a5/0x2630 [ 1588.357875][T21812] ? filemap_get_entry+0x22d/0x450 [ 1588.357926][T21812] ? filemap_get_entry+0x22d/0x450 [ 1588.357972][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.358054][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.358100][T21812] ? folios_put_refs+0x716/0xa90 [ 1588.358151][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.358195][T21812] ? rcu_is_watching+0x12/0xc0 [ 1588.358255][T21812] f2fs_write_data_pages+0x799/0x16d0 [ 1588.358308][T21812] ? _raw_spin_unlock+0x28/0x50 [ 1588.358371][T21812] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1588.358441][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.358489][T21812] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1588.358548][T21812] do_writepages+0x278/0x600 [ 1588.358615][T21812] ? __pfx_do_writepages+0x10/0x10 [ 1588.358673][T21812] ? do_raw_spin_unlock+0x145/0x1e0 [ 1588.358724][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.358777][T21812] ? _raw_spin_unlock+0x28/0x50 [ 1588.358831][T21812] filemap_writeback+0x22d/0x2e0 [ 1588.358897][T21812] ? __pfx_filemap_writeback+0x10/0x10 [ 1588.359013][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359060][T21812] ? find_held_lock+0x2b/0x80 [ 1588.359116][T21812] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1588.359171][T21812] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1588.359225][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359283][T21812] f2fs_sync_dirty_inodes+0x469/0x990 [ 1588.359357][T21812] block_operations+0x2a6/0xfc0 [ 1588.359424][T21812] ? __pfx_block_operations+0x10/0x10 [ 1588.359533][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359577][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359623][T21812] ? rcu_is_watching+0x12/0xc0 [ 1588.359675][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359729][T21812] f2fs_write_checkpoint+0x582/0x5550 [ 1588.359801][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359852][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359900][T21812] ? __pfx___might_resched+0x10/0x10 [ 1588.359950][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.359996][T21812] ? find_held_lock+0x2b/0x80 [ 1588.360056][T21812] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1588.360112][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.360158][T21812] ? down_write+0x146/0x1f0 [ 1588.360197][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.360255][T21812] f2fs_issue_checkpoint+0x1a4/0x760 [ 1588.360316][T21812] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 1588.360370][T21812] ? filemap_writeback+0x164/0x2e0 [ 1588.360496][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.360542][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.360588][T21812] ? find_held_lock+0x2b/0x80 [ 1588.360652][T21812] f2fs_sync_fs+0x360/0x420 [ 1588.360712][T21812] f2fs_symlink+0x702/0x8f0 [ 1588.360777][T21812] ? __pfx_f2fs_symlink+0x10/0x10 [ 1588.360825][T21812] ? generic_permission+0xae/0x800 [ 1588.360875][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.360920][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.360972][T21812] ? tomoyo_path_symlink+0x97/0xe0 [ 1588.361036][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.361089][T21812] vfs_symlink+0x178/0x4d0 [ 1588.361139][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.361192][T21812] filename_symlinkat+0x2a6/0x560 [ 1588.361244][T21812] ? __pfx_filename_symlinkat+0x10/0x10 [ 1588.361289][T21812] ? strncpy_from_user+0x19d/0x2d0 [ 1588.361351][T21812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.361397][T21812] ? do_getname+0x191/0x390 [ 1588.361449][T21812] __x64_sys_symlink+0x79/0xb0 [ 1588.361494][T21812] do_syscall_64+0x115/0x870 [ 1588.361555][T21812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.361595][T21812] RIP: 0033:0x7fac4bb9ce59 [ 1588.361626][T21812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.361662][T21812] RSP: 002b:00007fac4cb21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1588.361698][T21812] RAX: ffffffffffffffda RBX: 00007fac4be15fa0 RCX: 00007fac4bb9ce59 [ 1588.361724][T21812] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000200000000280 [ 1588.361749][T21812] RBP: 00007fac4bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1588.361779][T21812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.361803][T21812] R13: 00007fac4be16038 R14: 00007fac4be15fa0 R15: 00007fffdd70ea38 [ 1588.361853][T21812] [ 1588.361868][T21812] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1589.305114][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1590.345047][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1590.506808][ T5752] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1590.665077][ T5752] usb 5-1: device descriptor read/64, error -71 [ 1590.956627][ T5752] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1591.124998][ T5752] usb 5-1: device descriptor read/64, error -71 [ 1591.275434][ T5752] usb usb5-port1: attempt power cycle [ 1591.385295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1591.706299][ T5752] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1591.745446][ T5752] usb 5-1: device descriptor read/8, error -71 [ 1592.435300][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1593.464692][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1594.094772][T20736] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1594.277244][T20736] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1594.305323][T20736] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1594.335618][T20736] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1594.353873][T20736] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1594.363761][T20736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.374422][T20736] usb 6-1: Product: syz [ 1594.379064][T20736] usb 6-1: Manufacturer: syz [ 1594.383906][T20736] usb 6-1: SerialNumber: syz [ 1594.402602][T20736] cdc_mbim 6-1:1.0: skipping garbage [ 1594.514621][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1594.626087][T21885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1594.647957][T21885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1595.544419][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1595.947015][T21885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1595.959327][T21885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1595.988560][T20736] cdc_mbim 6-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 1596.000680][T20736] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 1596.198374][T21918] fuse: fd is not a fuse device [ 1596.384359][T20736] cdc_mbim 6-1:1.0: setting tx_max = 60 [ 1596.404749][T20736] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1596.413618][T20736] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1596.584314][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1597.099517][T20736] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1597.115543][T20736] usb 6-1: USB disconnect, device number 97 [ 1597.624187][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1598.664091][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1599.703959][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1600.743880][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1601.217678][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 660 seconds [ 1601.228852][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 660 seconds [ 1601.240061][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 660 seconds [ 1601.251277][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 660 seconds [ 1601.567324][T21954] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1601.584876][T21954] gretap0: entered promiscuous mode [ 1601.783723][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1602.645109][T21954] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1602.833598][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1602.903318][T21958] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1603.112962][T21954] 0ªî{X¹¦: renamed from gretap0 [ 1603.686364][T21954] 0ªî{X¹¦: left promiscuous mode [ 1603.723007][T21954] 0ªî{X¹¦: entered allmulticast mode [ 1603.786916][T21954] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1603.820863][T20736] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1603.831836][T21958] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1603.859565][T21958] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1603.883471][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1603.983578][T20736] usb 6-1: Using ep0 maxpacket: 32 [ 1603.998470][T20736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.033005][T20736] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1604.047517][ T30] audit: type=1326 audit(1780926048.071:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.1.3806" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe50ed9ce59 code=0x0 [ 1604.081706][T20736] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1604.105963][T20736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.128207][T20736] usb 6-1: Product: syz [ 1604.139237][T20736] usb 6-1: Manufacturer: syz [ 1604.153846][T20736] usb 6-1: SerialNumber: syz [ 1604.177753][T20736] usb 6-1: config 0 descriptor?? [ 1604.459409][T21991] loop4: detected capacity change from 0 to 32768 [ 1604.481117][T21991] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3807 (21991) [ 1604.513406][T21991] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1604.523904][T21991] BTRFS info (device loop4): using sha256 checksum algorithm [ 1604.615026][T21991] BTRFS info (device loop4): enabling ssd optimizations [ 1604.622706][T21991] BTRFS info (device loop4): turning on async discard [ 1604.630194][T21991] BTRFS info (device loop4): enabling free space tree [ 1604.903385][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1605.442326][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1605.599381][ T5916] usb 6-1: USB disconnect, device number 98 [ 1605.937301][ T30] audit: type=1326 audit(1780926049.971:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49faf9ce59 code=0x7ffc0000 [ 1605.962670][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1606.710809][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.756437][ T30] audit: type=1326 audit(1780926050.741:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49faf9ce59 code=0x7ffc0000 [ 1606.788884][ T30] audit: type=1326 audit(1780926050.741:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49faf9ce59 code=0x7ffc0000 [ 1606.826452][ T30] audit: type=1326 audit(1780926050.741:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49faf9ce59 code=0x7ffc0000 [ 1606.993150][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1607.103156][ T30] audit: type=1326 audit(1780926050.751:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f49faf9ce59 code=0x7ffc0000 [ 1607.156280][ T5916] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1607.180723][ T30] audit: type=1326 audit(1780926050.821:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f49faf5d68e code=0x7ffc0000 [ 1607.590600][T17214] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1607.674436][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 1608.023013][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1608.263391][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1608.300351][ T30] audit: type=1326 audit(1780926050.851:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f49faf5d68e code=0x7ffc0000 [ 1608.326604][ T30] audit: type=1326 audit(1780926050.851:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f49faf5d68e code=0x7ffc0000 [ 1608.352139][ T30] audit: type=1326 audit(1780926050.851:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.3.3809" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f49faf5d68e code=0x7ffc0000 [ 1608.696128][ T5916] usb 10-1: device descriptor read/all, error -71 [ 1609.062949][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1610.118193][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1611.142811][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1612.182558][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1612.519962][T22067] loop9: detected capacity change from 0 to 1024 [ 1612.593820][T22067] EXT4-fs: Ignoring removed bh option [ 1612.770845][T22067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1613.232512][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1614.262336][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1614.703334][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.734830][T22095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1614.869093][T22095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1614.903338][T22095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1615.184619][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3827'. [ 1615.302901][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1616.342170][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1616.870928][T19867] block nbd1: Receive control failed (result -1) [ 1617.035396][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1617.344377][T22127] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.3830'. [ 1617.391998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1618.421858][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1618.851643][T22134] fuse: fd is not a fuse device [ 1618.873511][ T5916] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1619.091956][ T5916] usb 6-1: device descriptor read/64, error -71 [ 1619.461986][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1619.640292][T22149] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1620.378136][ T5916] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1620.501659][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1621.541577][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1622.591412][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1623.621295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1624.211541][ T4994] udevd[4994]: worker [7102] /devices/virtual/block/nbd0 timeout; kill it [ 1624.257808][ T4994] udevd[4994]: seq 20432 '/devices/virtual/block/nbd0' killed [ 1624.370837][T22181] fuse: fd is not a fuse device [ 1624.661181][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1625.711089][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1626.750944][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1626.865748][T22204] overlayfs: failed to clone lowerpath [ 1627.064388][T22210] syz_tun: entered allmulticast mode [ 1627.780843][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1628.820759][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1629.794358][T22226] tipc: Enabled bearer , priority 0 [ 1629.860615][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1629.895400][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1630.900513][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1631.785027][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 690 seconds [ 1631.795862][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 690 seconds [ 1631.806923][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 690 seconds [ 1631.810404][T22222] tipc: Disabling bearer [ 1631.817943][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 690 seconds [ 1631.843767][T22250] fuse: fd is not a fuse device [ 1631.896562][ T6879] tipc: Node number set to 1133742010 [ 1631.940570][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1632.522037][ T6879] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1632.990436][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1633.163979][ T6879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.190356][ T6879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1633.215622][ T6879] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1633.333313][ T6879] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1633.365699][ T6879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.030165][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1634.353568][ T6879] usb 5-1: Product: syz [ 1634.374710][ T6879] usb 5-1: Manufacturer: syz [ 1634.664588][T22279] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1634.692944][ T6879] usb 5-1: SerialNumber: syz [ 1634.790591][ T6879] usb 5-1: config 0 descriptor?? [ 1634.861544][ T6879] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 1635.060019][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1635.199447][ T6879] usb 5-1: USB disconnect, device number 43 [ 1636.109928][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1637.139782][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1638.179685][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1638.758075][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1639.219553][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1639.758152][T22326] loop9: detected capacity change from 0 to 512 [ 1639.876821][T22326] EXT4-fs: Ignoring removed oldalloc option [ 1639.972364][T22326] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1640.100064][T22326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.259496][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1640.409469][T22326] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1641.299409][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1641.391198][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.339229][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1643.043641][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1643.379111][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1644.419055][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1644.729030][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1644.729058][ T30] audit: type=1326 audit(1780926088.755:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.7.3893" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aa8d9ce59 code=0x0 [ 1645.458883][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1646.498841][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1647.538657][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1648.578538][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1649.618412][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1649.714919][T22414] loop9: detected capacity change from 0 to 512 [ 1649.773909][T22414] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1650.658652][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1651.084970][T22414] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.3898: corrupted xattr entries [ 1651.157431][T22414] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1651.159822][ C1] EXT4-fs (loop9): initial error at time 1780926095: xattr_find_entry:337: inode 15 [ 1651.178563][ C1] EXT4-fs (loop9): last error at time 1780926095: xattr_find_entry:337: inode 15 [ 1651.226708][T22414] EXT4-fs (loop9): Remounting filesystem read-only [ 1651.243809][T22414] EXT4-fs (loop9): 1 truncate cleaned up [ 1651.270424][T22414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1651.698213][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1652.738127][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1653.064758][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 1653.777951][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1653.946160][T19867] block nbd2: Receive control failed (result -1) [ 1654.817877][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1655.857734][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1656.897656][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1657.871643][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.937500][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1658.525520][ T24] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1658.870932][ T24] usb 6-1: device descriptor read/64, error -71 [ 1658.977400][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1660.017278][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1660.217778][ T24] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1661.057268][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1661.366449][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3920'. [ 1661.396339][T22505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.435131][T22505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.097209][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1662.348019][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 720 seconds [ 1662.358850][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 720 seconds [ 1662.369961][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 720 seconds [ 1662.381157][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 720 seconds [ 1663.137114][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1664.151334][T22532] tipc: Enabling of bearer rejected, already enabled [ 1664.176903][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1665.216737][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1666.256600][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1667.296555][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1668.336390][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1668.429063][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.376286][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1670.416141][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1670.602349][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1670.736331][ T24] usb 5-1: device descriptor read/64, error -71 [ 1671.456024][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1671.463185][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1671.968457][ T24] usb 5-1: device descriptor read/64, error -71 [ 1672.174701][ T24] usb usb5-port1: attempt power cycle [ 1672.313007][T22600] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3938'. [ 1672.495907][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1672.586314][T13437] libceph: connect (1)[c::]:6789 error -99 [ 1673.517101][T13437] libceph: mon0 (1)[c::]:6789 connect error [ 1673.545789][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1673.606375][T22602] ceph: No mds server is up or the cluster is laggy [ 1674.575698][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1674.847808][T13437] libceph: connect (1)[c::]:6789 error -99 [ 1674.853904][T13437] libceph: mon0 (1)[c::]:6789 connect error [ 1675.625578][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1676.051060][T22635] loop5: detected capacity change from 0 to 128 [ 1676.057516][T13437] libceph: connect (1)[c::]:6789 error -99 [ 1676.077304][T13437] libceph: mon0 (1)[c::]:6789 connect error [ 1676.655493][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1676.732995][T22635] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1676.779455][T22635] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1676.876241][ T5916] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1677.583874][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1677.695449][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1677.772877][ T5916] usb 10-1: device not accepting address 96, error -71 [ 1678.745223][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1679.775132][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1680.475169][ T6879] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1680.814992][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1681.583952][ T6879] usb 6-1: Using ep0 maxpacket: 32 [ 1681.854927][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1682.594608][ T6879] usb 6-1: device descriptor read/all, error -71 [ 1682.894763][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1683.934703][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1684.974609][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1686.014469][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1687.054347][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1688.094228][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1689.144094][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1690.183998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1691.213857][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1692.253748][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1692.422962][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 750 seconds [ 1692.434731][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 750 seconds [ 1692.446235][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 750 seconds [ 1692.457872][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 750 seconds [ 1693.293622][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1694.343719][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1694.763580][ T6879] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1695.373413][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1695.523917][T22760] trusted_key: encrypted_key: key user:syz not found [ 1696.394733][ T6879] usb 10-1: Using ep0 maxpacket: 32 [ 1696.413297][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1696.605002][ T6879] usb 10-1: device descriptor read/all, error -71 [ 1697.453168][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1697.878621][T22775] overlayfs: failed to resolve './file0': -2 [ 1698.493077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1698.632153][T10787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1698.668943][T10787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1698.698883][T10787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1698.709521][T10787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1698.721376][T10787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1699.340833][T22794] loop9: detected capacity change from 0 to 16 [ 1699.468847][T22794] erofs (device loop9): mounted with root inode @ nid 36. [ 1699.532997][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1700.572895][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1701.202236][T19867] Bluetooth: hci6: command tx timeout [ 1701.612734][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1702.558781][T22808] Bluetooth: MGMT ver 1.23 [ 1702.652690][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1703.692524][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1703.766125][T19867] Bluetooth: hci6: command tx timeout [ 1704.732399][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1705.772274][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1706.150030][T19867] Bluetooth: hci6: command tx timeout [ 1706.812173][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1707.852042][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1708.052306][T10787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1708.077511][T10787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1708.096196][T10787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1708.109738][T10787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1708.126616][T10787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1708.176588][T10787] Bluetooth: hci6: command tx timeout [ 1708.891944][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1709.931918][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1710.173083][T10787] Bluetooth: hci2: command tx timeout [ 1710.971813][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1712.011604][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1712.757858][T10787] Bluetooth: hci2: command tx timeout [ 1713.052844][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1713.739674][T19867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1713.776647][T19867] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1713.788952][T19867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1713.802027][T19867] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1713.825054][T19867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1714.091370][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1714.303091][T22884] loop9: detected capacity change from 0 to 8192 [ 1714.828548][T19867] Bluetooth: hci2: command tx timeout [ 1715.131272][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1715.931187][T19867] Bluetooth: hci7: command tx timeout [ 1716.074645][T22896] netlink: 'syz.7.3998': attribute type 2 has an invalid length. [ 1716.171134][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1716.891100][T19867] Bluetooth: hci2: command tx timeout [ 1717.210057][ T24] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1717.217911][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1717.438256][T22903] Process accounting resumed [ 1717.502121][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1717.542019][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1717.582821][ T24] usb 6-1: can't read configurations, error -61 [ 1717.912195][ T24] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1718.250915][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1718.570985][T19867] Bluetooth: hci7: command tx timeout [ 1718.794713][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1718.824897][ T30] audit: type=1800 audit(1780926162.863:299): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4002" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 1718.863873][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1718.897728][ T24] usb 6-1: can't read configurations, error -61 [ 1718.919465][ T24] usb usb6-port1: attempt power cycle [ 1719.245906][T22780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.270859][ T24] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1719.290807][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1719.396605][T22780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.440915][T22780] bridge_slave_0: entered allmulticast mode [ 1719.479696][T22780] bridge_slave_0: entered promiscuous mode [ 1719.611022][ T24] usb 6-1: device not accepting address 108, error -71 [ 1720.330918][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1720.650759][T19867] Bluetooth: hci7: command tx timeout [ 1720.921018][T22780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.972669][T22780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.045166][T22955] ubi16: attaching mtd0 [ 1721.157783][T22955] ubi16: scanning is finished [ 1721.162765][T22955] ubi16: empty MTD device detected [ 1721.254982][T22780] bridge_slave_1: entered allmulticast mode [ 1721.370614][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1721.768217][T22780] bridge_slave_1: entered promiscuous mode [ 1722.410476][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1722.535573][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 780 seconds [ 1722.546408][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 780 seconds [ 1722.563301][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 780 seconds [ 1722.574339][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 780 seconds [ 1722.730688][T19867] Bluetooth: hci7: command tx timeout [ 1722.880703][T20736] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1723.062956][T22780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.230700][T20736] usb 10-1: device descriptor read/64, error -71 [ 1723.450378][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1723.917552][T16718] bridge_slave_1: left allmulticast mode [ 1723.928490][T16718] bridge_slave_1: left promiscuous mode [ 1723.946230][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.125561][T22955] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 1724.161814][T16718] bridge_slave_0: left allmulticast mode [ 1724.167638][T16718] bridge_slave_0: left promiscuous mode [ 1724.174545][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.490240][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1725.344776][T22981] loop5: detected capacity change from 0 to 512 [ 1725.361444][T22981] EXT4-fs: Ignoring removed mblk_io_submit option [ 1725.401974][T22981] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1725.465122][T22981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1725.501918][T22981] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1725.530154][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1725.561251][T22981] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.4011: bg 0: block 361: padding at end of block bitmap is not set [ 1725.626138][T22981] loop5: lost filesystem error report for type 5 error -117 [ 1725.630149][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1725.643957][ C0] EXT4-fs (loop5): initial error at time 1780926169: ext4_validate_block_bitmap:440 [ 1725.653385][ C0] EXT4-fs (loop5): last error at time 1780926169: ext4_validate_block_bitmap:440 [ 1725.675759][T22981] EXT4-fs (loop5): Remounting filesystem read-only [ 1725.711688][T22979] loop9: detected capacity change from 0 to 40427 [ 1725.720191][T22979] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1725.727969][T22979] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1725.734244][T22981] EXT4-fs (loop5): 1 truncate cleaned up [ 1725.752395][T22979] F2FS-fs (loop9): invalid crc value [ 1725.801507][T22981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1725.848987][T22979] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1725.875000][T22979] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1725.882228][T22979] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1725.906012][T16718] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1725.990116][T16718] macvlan2 (unregistering): left allmulticast mode [ 1726.303960][T22992] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.4011: dx entry: limit 0 != root limit 125 [ 1726.316110][T22992] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.4011: Corrupt directory, running e2fsck is recommended [ 1726.570007][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1727.610039][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1728.028059][ T5648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1728.287278][T16718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1728.364899][T16718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.397791][T16718] bond0 (unregistering): Released all slaves [ 1728.420666][T16718] bond1 (unregistering): Released all slaves [ 1728.482436][T22780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.650029][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1728.685180][T22780] team0: Port device team_slave_0 added [ 1728.754598][T22780] team0: Port device team_slave_1 added [ 1728.866843][T23000] loop5: detected capacity change from 0 to 40427 [ 1728.876057][T23000] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1728.883923][T23000] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1728.896400][T23000] F2FS-fs (loop5): invalid crc value [ 1729.094507][T23000] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1729.124819][T23000] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1729.132674][T23000] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1729.525584][T16718] tipc: Left network mode [ 1729.531682][T22780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.550911][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.559957][T22780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.586399][T22780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.689686][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1730.400545][T15034] syz_tun (unregistering): left allmulticast mode [ 1730.692812][T22780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.710062][T22780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.736149][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1730.756183][T22780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.990752][T23018] loop9: detected capacity change from 0 to 32768 [ 1731.002443][T23018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4015 (23018) [ 1731.035679][T23018] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1731.045884][T23018] BTRFS info (device loop9): using sha256 checksum algorithm [ 1731.205274][T23018] BTRFS info (device loop9): enabling ssd optimizations [ 1731.212396][T23018] BTRFS info (device loop9): turning on sync discard [ 1731.219096][T23018] BTRFS info (device loop9): enabling free space tree [ 1731.769470][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1732.700462][ T7511] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1732.809335][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1733.849234][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1733.900355][T16718] hsr_slave_0: left promiscuous mode [ 1734.192637][T16718] hsr_slave_1: left promiscuous mode [ 1734.211261][T16718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.889106][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1734.957545][T16718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.929113][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1736.968906][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1737.102602][T16718] team0 (unregistering): Port device team_slave_1 removed [ 1737.136603][T16718] team0 (unregistering): Port device team_slave_0 removed [ 1737.360538][T22826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.378152][T22826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.409511][T22826] bridge_slave_0: entered allmulticast mode [ 1737.473532][T22826] bridge_slave_0: entered promiscuous mode [ 1737.504423][T22780] hsr_slave_0: entered promiscuous mode [ 1737.511586][T22780] hsr_slave_1: entered promiscuous mode [ 1737.586199][T22780] debugfs: 'hsr0' already exists in 'hsr' [ 1737.777031][T22780] Cannot create hsr debugfs directory [ 1737.922051][T23071] tipc: Enabling of bearer rejected, already enabled [ 1737.988488][ T5752] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1738.008786][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1738.157411][T23085] tipc: Resetting bearer [ 1738.198127][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1738.211798][T22826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.251799][T22826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.259342][T22826] bridge_slave_1: entered allmulticast mode [ 1738.267557][T22826] bridge_slave_1: entered promiscuous mode [ 1738.318748][ T5752] usb 6-1: Using ep0 maxpacket: 32 [ 1738.340466][ T5752] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.403598][ T5752] usb 6-1: config 0 has no interfaces? [ 1738.438223][ T5752] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1738.478095][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.509912][T22826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1738.528064][ T5752] usb 6-1: Product: syz [ 1738.542468][ T5752] usb 6-1: Manufacturer: syz [ 1738.568244][ T5752] usb 6-1: SerialNumber: syz [ 1738.591825][ T5752] usb 6-1: config 0 descriptor?? [ 1738.682970][T22826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.015457][ T30] audit: type=1326 audit(1780926183.056:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23105 comm="syz.9.4028" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6539ce59 code=0x0 [ 1739.048753][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1739.184127][T22826] team0: Port device team_slave_0 added [ 1739.234032][T22826] team0: Port device team_slave_1 added [ 1740.088587][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1740.113953][T23120] loop9: detected capacity change from 0 to 512 [ 1740.154789][T23120] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.4029: iget: bad i_size value: 38620345925642 [ 1740.170434][T23120] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1740.176312][T23120] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.4029: couldn't read orphan inode 15 (err -117) [ 1740.185532][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1740.185565][ C0] EXT4-fs (loop9): initial error at time 1780926184: ext4_orphan_get:1397: inode 15 [ 1740.185622][ C0] EXT4-fs (loop9): last error at time 1780926184: ext4_orphan_get:1397: inode 15 [ 1740.229179][T23120] loop9: lost filesystem error report for type 5 error -117 [ 1740.370084][ T24] usb 6-1: USB disconnect, device number 110 [ 1740.382610][T23120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.628017][T23122] tipc: Enabling of bearer rejected, failed to enable media [ 1740.661672][T23136] loop5: detected capacity change from 0 to 16 [ 1740.670774][T22826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.692258][T22826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.736121][T23136] erofs (device loop5): mounted with root inode @ nid 36. [ 1740.871306][T22826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.128434][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1741.359894][T22885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.422930][T22885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.444031][T22885] bridge_slave_0: entered allmulticast mode [ 1741.461011][T22885] bridge_slave_0: entered promiscuous mode [ 1741.511874][T23138] EXT4-fs error (device loop9): ext4_validate_block_bitmap:431: comm syz.9.4029: bg 0: block 5: invalid block bitmap [ 1741.558632][T22826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.577371][T22826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.626751][T23138] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 220 with error 28 [ 1741.656208][T22826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.680157][T22885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.696621][T23138] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1741.696621][T23138] [ 1741.698495][T22885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.727870][T22885] bridge_slave_1: entered allmulticast mode [ 1741.745158][T22885] bridge_slave_1: entered promiscuous mode [ 1741.763983][T23138] EXT4-fs (loop9): Total free blocks count 0 [ 1741.795316][T23138] EXT4-fs (loop9): Free/Dirty block details [ 1741.828765][T23138] EXT4-fs (loop9): free_blocks=0 [ 1741.841009][T23138] EXT4-fs (loop9): dirty_blocks=224 [ 1741.863743][T23138] EXT4-fs (loop9): Block reservation details [ 1741.891652][T23138] EXT4-fs (loop9): i_reserved_data_blocks=224 [ 1742.102104][T22885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.169723][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1742.281978][T22885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.337991][ T7511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1743.208390][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1743.437952][T22826] hsr_slave_0: entered promiscuous mode [ 1743.589089][T22826] hsr_slave_1: entered promiscuous mode [ 1744.248230][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1744.383403][T22826] debugfs: 'hsr0' already exists in 'hsr' [ 1744.391528][T22826] Cannot create hsr debugfs directory [ 1744.641305][T22885] team0: Port device team_slave_0 added [ 1744.650756][T22885] team0: Port device team_slave_1 added [ 1744.679211][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1745.287998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1746.178864][T22885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.327900][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1746.385099][T22885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.413868][T22885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.446275][T22885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.453352][T22885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.140925][T22885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.368690][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1747.659447][T22885] hsr_slave_0: entered promiscuous mode [ 1747.675559][T22885] hsr_slave_1: entered promiscuous mode [ 1747.684525][T22885] debugfs: 'hsr0' already exists in 'hsr' [ 1747.691155][T22885] Cannot create hsr debugfs directory [ 1748.407721][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1749.447537][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1750.487458][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1751.527423][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1751.907934][T23198] tipc: Enabling of bearer rejected, already enabled [ 1752.567295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1753.500079][ T5897] block nbd0: Possible stuck request ffff888027db7000: control (read@0,1024B). Runtime 810 seconds [ 1753.512743][ T5897] block nbd0: Possible stuck request ffff888027db71c0: control (read@1024,1024B). Runtime 810 seconds [ 1753.523872][ T5897] block nbd0: Possible stuck request ffff888027db7380: control (read@2048,1024B). Runtime 810 seconds [ 1753.536414][ T5897] block nbd0: Possible stuck request ffff888027db7540: control (read@3072,1024B). Runtime 810 seconds [ 1753.607195][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1753.705221][T23219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1754.647034][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1755.686882][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1756.726993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1757.766864][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1758.688606][ T5752] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1758.806554][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1758.916158][T10787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1758.939149][T10787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1758.946560][ T5752] usb 10-1: Using ep0 maxpacket: 32 [ 1758.948581][ T5752] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.966013][T10787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1758.989025][T10787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1759.000133][T10787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1759.043846][ T5752] usb 10-1: config 0 has no interfaces? [ 1759.072492][ T5752] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1759.094036][ T5752] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.112475][ T5752] usb 10-1: Product: syz [ 1759.123114][ T5752] usb 10-1: Manufacturer: syz [ 1759.133224][ T5752] usb 10-1: SerialNumber: syz [ 1759.148842][ T5752] usb 10-1: config 0 descriptor?? [ 1759.418573][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1759.846491][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1760.923992][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1761.209877][T10787] Bluetooth: hci0: command tx timeout [ 1761.223275][ T5752] usb 10-1: USB disconnect, device number 102 [ 1762.035140][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1763.146504][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1763.403028][T10787] Bluetooth: hci0: command tx timeout [ 1763.660590][ T5916] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1763.851885][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1763.882128][ T5916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.904784][ T5916] usb 10-1: config 0 has no interfaces? [ 1763.919427][ T5916] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1764.257826][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1764.410205][T23288] loop5: detected capacity change from 0 to 2048 [ 1764.845804][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.870521][ T5916] usb 10-1: Product: syz [ 1764.874717][T23288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1764.883849][ T5916] usb 10-1: Manufacturer: syz [ 1764.944516][ T5916] usb 10-1: SerialNumber: syz [ 1764.956167][T23289] Can't find ip_set type hash:net,po [ 1765.213115][ T5916] usb 10-1: config 0 descriptor?? [ 1765.264209][ T5916] usb 10-1: can't set config #0, error -71 [ 1765.369190][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1765.552082][ T5916] usb 10-1: USB disconnect, device number 103 [ 1765.625669][T10787] Bluetooth: hci0: command tx timeout [ 1766.444046][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1766.480550][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1766.690242][T19867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1766.715177][T19867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1766.726936][T19867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1766.735311][T19867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1766.744398][T19867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1766.896904][T23304] loop9: detected capacity change from 0 to 40427 [ 1766.906245][T23304] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1766.916554][T23304] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1766.927975][T23304] F2FS-fs (loop9): invalid crc value [ 1767.012204][T23304] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1767.026883][T23304] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1767.034076][T23304] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1767.591931][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1767.867592][T19867] Bluetooth: hci0: command tx timeout [ 1768.703218][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1769.814688][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1769.848404][T23319] xt_hashlimit: size too large, truncated to 1048576 [ 1769.855356][T23319] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 1769.955126][T19867] Bluetooth: hci4: command tx timeout [ 1769.957010][ T31] INFO: task udevd:7102 blocked in I/O wait for more than 143 seconds. [ 1770.272903][ T31] Tainted: G L syzkaller #0 [ 1770.311597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1770.348419][ T31] task:udevd state:D stack:23464 pid:7102 tgid:7102 ppid:4994 task_flags:0x400140 flags:0x00080002 [ 1770.397177][ T31] Call Trace: [ 1770.408336][ T31] [ 1770.419298][ T31] __schedule+0x1295/0x67a0 [ 1770.440267][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.460681][ T31] ? __pfx___schedule+0x10/0x10 [ 1770.486470][ T31] ? find_held_lock+0x2b/0x80 [ 1770.511926][ T31] ? schedule+0x2bf/0x390 [ 1770.541198][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.583446][ T31] schedule+0xdd/0x390 [ 1770.608591][ T31] io_schedule+0x8a/0xf0 [ 1770.628726][ T31] folio_wait_bit_common+0x414/0xa70 [ 1770.663565][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 1770.684717][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1770.709772][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.732330][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1770.751466][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.770339][ T31] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 1770.925983][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1771.015330][ T31] do_read_cache_folio+0x3bc/0x6b0 [ 1771.020526][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1771.026412][ T31] read_part_sector+0xd1/0x370 [ 1771.031239][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1771.037679][ T31] adfspart_check_POWERTEC+0x8a/0x630 [ 1771.043184][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1771.050269][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1771.056569][ T31] bdev_disk_changed+0x7a3/0x1250 [ 1771.066558][ T31] ? nbd_open+0x320/0x700 [ 1771.075568][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1771.090120][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.117904][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.202433][ T31] blkdev_get_whole+0x187/0x290 [ 1771.457998][ T31] bdev_open+0x2c7/0xe40 [ 1771.580224][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.841666][ T31] blkdev_open+0x34e/0x4f0 [ 1771.860482][ T31] do_dentry_open+0x6ab/0x14d0 [ 1771.881245][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1771.901725][ T31] vfs_open+0x82/0x3f0 [ 1771.919518][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.948070][ T31] path_openat+0x208c/0x31a0 [ 1771.956684][ T31] ? __pfx_path_openat+0x10/0x10 [ 1771.962983][ T31] do_file_open+0x20e/0x430 [ 1771.973407][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1771.990123][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.996564][ T31] ? alloc_fd+0x476/0x790 [ 1772.000951][ T31] ? do_getname+0x191/0x390 [ 1772.005906][ T31] do_sys_openat2+0x10d/0x1e0 [ 1772.010732][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1772.016762][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.022458][ T31] ? __sys_recvmsg+0x18c/0x220 [ 1772.027680][ T31] ? __pfx___sys_recvmsg+0x10/0x10 [ 1772.032855][ T31] __x64_sys_openat+0x12d/0x210 [ 1772.037296][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1772.038307][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1772.050306][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.056096][ T31] ? rcu_is_watching+0x12/0xc0 [ 1772.061448][ T31] do_syscall_64+0x115/0x870 [ 1772.066112][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.072686][ T31] RIP: 0033:0x7f7e853de407 [ 1772.077702][ T31] RSP: 002b:00007ffdd16b9540 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1772.101086][ T31] RAX: ffffffffffffffda RBX: 00007f7e85352880 RCX: 00007f7e853de407 [ 1772.113640][T23245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.123867][T19867] Bluetooth: hci4: command tx timeout [ 1772.135052][ T31] RDX: 00000000000a0800 RSI: 0000557e9c936730 RDI: ffffffffffffff9c [ 1772.136108][T23245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.156398][ T31] RBP: 0000557e9c91a910 R08: 0000000000000000 R09: 0000000000000000 [ 1772.176384][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557e9c92ebf0 [ 1772.185006][ T31] R13: 0000557e9c9281e0 R14: 0000000000000000 R15: 0000557e9c92ebf0 [ 1772.190259][ T30] audit: type=1326 audit(1780926215.450:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.193210][ T31] [ 1772.226533][T23245] bridge_slave_0: entered allmulticast mode [ 1772.246589][T23245] bridge_slave_0: entered promiscuous mode [ 1772.264362][T23245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.286413][T23245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.298049][ T30] audit: type=1326 audit(1780926215.468:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.329985][T23245] bridge_slave_1: entered allmulticast mode [ 1772.349468][T23245] bridge_slave_1: entered promiscuous mode [ 1772.377159][ T31] [ 1772.377159][ T31] Showing all locks held in the system: [ 1772.388206][ T30] audit: type=1326 audit(1780926215.468:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.468764][ T31] 3 locks held by kworker/1:0/24: [ 1772.476622][ T31] #0: ffff8880b843b620 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1772.540573][ T30] audit: type=1326 audit(1780926215.506:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.610826][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 1772.620578][ T31] #2: ffffffff8f38d0f8 (pool_lock#2){-.-.}-{2:2}, at: free_obj_work+0x1ab/0x390 [ 1772.627294][T23245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.634561][ T31] 1 lock held by khungtaskd/31: [ 1772.641072][ T30] audit: type=1326 audit(1780926215.506:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.645092][ T31] #0: [ 1772.690104][T23245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.738645][ T30] audit: type=1326 audit(1780926215.525:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.751411][ T31] ffffffff8e7e5560 [ 1772.825249][ T30] audit: type=1326 audit(1780926215.525:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.827262][ T31] ( [ 1772.849595][ T30] audit: type=1326 audit(1780926215.525:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.924229][ T30] audit: type=1326 audit(1780926215.525:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1772.925700][T23245] team0: Port device team_slave_0 added [ 1772.955376][ T31] rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1772.963600][ T31] 2 locks held by getty/5384: [ 1772.973524][ T31] #0: ffff8880382b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1772.985907][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1773.007890][ T30] audit: type=1326 audit(1780926215.525:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.5.4067" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fac4bb9ce59 code=0x7ffc0000 [ 1773.044348][T23245] team0: Port device team_slave_1 added [ 1773.049981][ T31] 1 lock held by udevd/7102: [ 1773.063673][ T31] #0: ffff888027ced350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1773.091746][ T31] 4 locks held by kworker/u8:21/16718: [ 1773.102757][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1773.126979][ T31] #1: ffffc90007d77d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1773.138074][ T31] #2: ffffffff90606e60 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1773.147239][ T31] #3: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1773.148619][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1773.158277][ T31] 6 locks held by kworker/u8:23/16720: [ 1773.187942][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1773.220340][ T31] #1: ffffc90007d97d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1773.241843][ T31] #2: ffffffff905ee108 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1773.269684][ T31] #3: ffff88802faa4128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1773.300461][ T31] #4: ffff88803825a258 (&devlink->lock_key#22){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 1773.327211][ T31] #5: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1773.348923][ T31] 2 locks held by kworker/u8:36/16735: [ 1773.354784][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1773.366573][ T31] #1: ffffc900087a7d08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1773.383741][ T31] 3 locks held by syz-executor/19863: [ 1773.390923][ T31] 4 locks held by syz-executor/22826: [ 1773.405053][ T31] #0: ffff888034f44410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1773.425022][ T31] #1: ffff888054c25880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1773.447584][ T31] #2: ffff88802a2c21e8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1773.472074][ T31] #3: ffffffff8fb87cc0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700 [ 1773.486255][ T31] 6 locks held by syz-executor/22885: [ 1773.494392][ T31] #0: ffff888034f44410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1773.503564][ T31] #1: ffff888054446480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1773.513852][ T31] #2: ffff88802a2c20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1773.528434][ T31] #3: ffffffff8fb87cc0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1773.544367][ T31] #4: ffff88803825c128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1773.555417][ T31] #5: ffff888038258258 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1773.590740][ T31] 2 locks held by syz-executor/23245: [ 1773.603147][ T31] #0: ffffffff8f9a25a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1773.628831][ T31] #1: ffffffff90606e60 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1773.657779][ T31] 2 locks held by syz-executor/23305: [ 1773.677530][ T31] #0: ffffffff905ee108 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1773.704245][ T31] #1: ffffffff90606e60 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x50 [ 1773.716763][ T31] 1 lock held by dhcpcd-run-hook/23327: [ 1773.722357][ T31] 1 lock held by syz.5.4068/23352: [ 1773.727703][ T31] #0: ffffffff90606e60 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1773.737397][ T31] 1 lock held by syz.5.4068/23353: [ 1773.742590][ T31] #0: ffffffff90606e60 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1774.259996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1774.345629][T19867] Bluetooth: hci4: command tx timeout [ 1774.428475][ T31] [ 1774.435919][ T31] ============================================= [ 1774.435919][ T31] [ 1774.445217][ T31] NMI backtrace for cpu 0 [ 1774.445247][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.445300][ T31] Tainted: [L]=SOFTLOCKUP [ 1774.445314][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1774.445337][ T31] Call Trace: [ 1774.445350][ T31] [ 1774.445364][ T31] dump_stack_lvl+0x100/0x190 [ 1774.445415][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1774.445460][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1774.445503][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1774.445556][ T31] sys_info+0x141/0x190 [ 1774.445590][ T31] watchdog+0xcb1/0x1030 [ 1774.445639][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1774.445691][ T31] ? __pfx_watchdog+0x10/0x10 [ 1774.445727][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.445776][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.445822][ T31] ? __kthread_parkme+0x18c/0x230 [ 1774.445885][ T31] ? kthread+0x13a/0x450 [ 1774.445922][ T31] ? __pfx_watchdog+0x10/0x10 [ 1774.445958][ T31] kthread+0x370/0x450 [ 1774.445995][ T31] ? __pfx_kthread+0x10/0x10 [ 1774.446038][ T31] ret_from_fork+0x72b/0xd50 [ 1774.446083][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1774.446128][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.446174][ T31] ? __switch_to+0x800/0x1100 [ 1774.446225][ T31] ? __switch_to_asm+0x39/0x70 [ 1774.446275][ T31] ? __pfx_kthread+0x10/0x10 [ 1774.446316][ T31] ret_from_fork_asm+0x1a/0x30 [ 1774.446393][ T31] [ 1774.446432][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1774.609447][ C1] NMI backtrace for cpu 1 [ 1774.609476][ C1] CPU: 1 UID: 0 PID: 23362 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.609525][ C1] Tainted: [L]=SOFTLOCKUP [ 1774.609537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1774.609558][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 1774.609617][ C1] Code: 90 90 90 90 f3 0f 1e fa 8b 05 22 19 4f 05 85 c0 74 20 8b 05 a0 4b 4f 05 85 c0 74 16 65 48 8b 05 e8 5d 81 08 8b 80 8c 0b 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 c8 0e 88 f5 66 2e 0f 1f 84 00 00 00 00 [ 1774.609650][ C1] RSP: 0018:ffffc90006777758 EFLAGS: 00000202 [ 1774.609676][ C1] RAX: 0000000000000000 RBX: ffffea0002566e80 RCX: 0000000000000003 [ 1774.609699][ C1] RDX: 0000000000000000 RSI: ffffffff8def7590 RDI: ffffffff8c1c4700 [ 1774.609721][ C1] RBP: ffffea0002566e80 R08: 00000000b17763b5 R09: 0000000000000007 [ 1774.609743][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff8e1c4f50 [ 1774.609765][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff8880acee3660 [ 1774.609790][ C1] FS: 000055558f191500(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 1774.609820][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1774.609843][ C1] CR2: 00007f34cd46e508 CR3: 0000000032fe7000 CR4: 0000000000350ef0 [ 1774.609877][ C1] Call Trace: [ 1774.609888][ C1] [ 1774.609899][ C1] page_table_check_clear+0x2b3/0x8f0 [ 1774.609948][ C1] ? page_table_check_clear+0x299/0x8f0 [ 1774.610000][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 1774.610051][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 1774.610103][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.610151][ C1] change_protection+0x1f7a/0x52f0 [ 1774.610222][ C1] ? __pfx_change_protection+0x10/0x10 [ 1774.610262][ C1] ? vma_wants_writenotify+0xdc/0x2e0 [ 1774.610316][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.610357][ C1] ? vma_set_page_prot+0xb1/0x120 [ 1774.610410][ C1] mprotect_fixup+0x439/0xe30 [ 1774.610455][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 1774.610518][ C1] do_mprotect_pkey+0xa4b/0xef0 [ 1774.610565][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1774.610603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.610654][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1774.610705][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1774.610754][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1774.610817][ C1] __x64_sys_mprotect+0x78/0xc0 [ 1774.610854][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1774.610908][ C1] do_syscall_64+0x115/0x870 [ 1774.610961][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.610996][ C1] RIP: 0033:0x7f34cd39cc57 [ 1774.611020][ C1] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.611054][ C1] RSP: 002b:00007ffc209020d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1774.611084][ C1] RAX: ffffffffffffffda RBX: 00007f34cd5ee8a0 RCX: 00007f34cd39cc57 [ 1774.611107][ C1] RDX: 0000000000000001 RSI: 000000000012e000 RDI: 00007f34cd4b9000 [ 1774.611129][ C1] RBP: 00007ffc20902178 R08: 000055558f192840 R09: 000055558f192860 [ 1774.611151][ C1] R10: 0000000000000005 R11: 0000000000000206 R12: 00007ffc20902190 [ 1774.611173][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1774.611208][ C1] [ 1774.985688][T10787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1775.010698][T10787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1775.019356][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1775.026261][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.037222][ T31] Tainted: [L]=SOFTLOCKUP [ 1775.041542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1775.051600][ T31] Call Trace: [ 1775.054876][ T31] [ 1775.057805][ T31] dump_stack_lvl+0x100/0x190 [ 1775.062498][ T31] vpanic+0x552/0x970 [ 1775.066491][ T31] ? __pfx_vpanic+0x10/0x10 [ 1775.071003][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1775.077174][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1775.083351][ T31] panic+0xd1/0xe0 [ 1775.087086][ T31] ? __pfx_panic+0x10/0x10 [ 1775.091602][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1775.097769][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1775.103937][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1775.110104][ T31] ? watchdog.cold+0x1ec/0x234 [ 1775.114884][ T31] ? watchdog+0xcc1/0x1030 [ 1775.119318][ T31] watchdog.cold+0x1fd/0x234 [ 1775.123932][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1775.129759][ T31] ? __pfx_watchdog+0x10/0x10 [ 1775.134447][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.140100][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.146009][ T31] ? __kthread_parkme+0x18c/0x230 [ 1775.151066][ T31] ? kthread+0x13a/0x450 [ 1775.155318][ T31] ? __pfx_watchdog+0x10/0x10 [ 1775.160005][ T31] kthread+0x370/0x450 [ 1775.164093][ T31] ? __pfx_kthread+0x10/0x10 [ 1775.168702][ T31] ret_from_fork+0x72b/0xd50 [ 1775.173332][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1775.178462][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.184109][ T31] ? __switch_to+0x800/0x1100 [ 1775.188808][ T31] ? __switch_to_asm+0x39/0x70 [ 1775.193679][ T31] ? __pfx_kthread+0x10/0x10 [ 1775.198283][ T31] ret_from_fork_asm+0x1a/0x30 [ 1775.203088][ T31] [ 1775.206310][ T31] Kernel Offset: disabled [ 1775.210626][ T31] Rebooting in 86400 seconds..