last executing test programs: 8m51.877997899s ago: executing program 2 (id=96): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) 8m51.694208674s ago: executing program 2 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8m51.321667806s ago: executing program 2 (id=101): creat(&(0x7f00000003c0)='./file0\x00', 0xb1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x427e}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m50.310120489s ago: executing program 2 (id=109): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 8m50.126949275s ago: executing program 2 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8300, 0x40) 8m46.58694246s ago: executing program 2 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 8m46.150161545s ago: executing program 32 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 7m36.785029487s ago: executing program 4 (id=430): r0 = socket(0x1e, 0x802, 0x0) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000640)=[{}], 0x1, 0xffffeed7, 0x0, 0x0) close(0x3) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xc000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x1c0002009}) 7m36.534843826s ago: executing program 4 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) unshare(0x24060400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c200)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f00000001c0)='./file0\x00') 7m36.311029793s ago: executing program 4 (id=435): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f0000000400)=ANY=[@ANYBLOB="636f6465706167653d3934392c73686f72746e616d653d6d697865642c696f636861727365743d6d6163726f6d616e69616e2c6e66733d6e6f7374616c655f726f2c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c756e695f786c6174653d312c636865636b3d7374726963742c756e695f786c6174653d312c757466383d312c73686f72746e616d653d6c6f7765722c6e6f636173652c73686f72746e616d653d77696e39352c726f6469722c0070e367346beda8e95acb856627b99a1a0d3d06ee006cb688cad18d8e36c8589ad90b"], 0xff, 0x36b, &(0x7f0000000a40)="$eJzs3T1sW9UXAPDjvx07jdR/PCBVMBk2JFQ1QQzAkqgqUkUGKLL4WrCoy0dsKtnCUjLEzQJiBLEggRjYOsDA0BkxVIiNgZUioQJioVukVjxkP3+82A4NVE6p+P0G5+jce969z36K7cg+eWUtNs8vxIUbN67H4mIuCmun12IvF+XIx9ClmKEwKwkA3Av2kiR+T1K3n/3B0jAqznlfAMD89J//Xzs+fpNfussbAgDm7pDv/5/p3eQmsxfnujUAYE72YuL5/6F9wxN/5i9kPhUAANyrnnvxpafXNyLOVSqLEc13O9VONZ4Yj69fiDeiEfU4FctxKyJ9oZC+WujdPnV248ypSs/P5aj2KjrViGa3U01fKazn+/WlWInlKA/qk1F9vle/0q+vRMSlbn/9aOY61YVYGqz/w1LUYzWW476p+oizG2dWK4MDVJvD+m7EbiwOT6K3/5OxHN+9GhejEeejVzve/85KpXI62dhX37lc6s87yKc+/wgAAAAAAAAAAAAAAAAAAAAAwB04WRkpj/rfJM1u551zkxPK2f44w8aAg/5Au2l/oKQ07M7zXn6yP9D+/jydaiH+dzdPHAAAAAAAAAAAAAAAAAAAAP5F2lvFqDWKEbG1vVlrNOqtdhp0h0G91X7rm8+/Phb1TKYXvJkfZ6KQHm7fnEEue+R8jMqTUXmSn1q93mrnI8aTL18Z7Tg7pzQ6i+1hM4HscUrpUCaTG+yp1mgcf/Cnj6cW3dre/GOcycfEKU8GuelFm/9PU39RdXCweps515IkOah856P0TsgORS6iMPXA3UlQHARXr79+/6PtE4/1h74aNH14+JHl5699+Nmvm7VGDO6aRqPYat9K/slakT4E42sjN7ifczOuhNnB7jiz22pv1fLf//bCA+9/OzE5H7PKexfPOPP2wWt9MZkppkFvmzOrru47cn1hxsU/I3jyy9rLN0dX799/BE98sla7svPjL4etyvyS0KgDAAAAAAAAAAAAAAAAAACORObr1oeSfvf68WfnuysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOFrj//+fCXanMocJbnZjeqhUb7WnFi0Pfh478tMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/6s8AAAD//9rrbZo=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6bf1d61efea623114a0de3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f4282e05e743a0763193b1951aef02f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xff, 0x252, &(0x7f00000009c0)="$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") add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) 7m35.661468014s ago: executing program 4 (id=437): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 7m35.482922229s ago: executing program 4 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) 7m33.346936039s ago: executing program 4 (id=445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x4000084) 7m32.124340518s ago: executing program 33 (id=445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x4000084) 6m28.456347166s ago: executing program 0 (id=843): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0xfec00000, 0x2000, &(0x7f0000c70000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x6, 0x2, 0x719, 0x409, 0x8, 0x80, 0x11, 0x9, 0x8000000000000000, 0x8, 0x0, 0x3, 0x2, 0x4, 0xffffffffffffffff], 0x0, 0x194d40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m28.053048199s ago: executing program 0 (id=847): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x8}, @exit], 0x0, 0x16, 0xab, &(0x7f0000001a40)=""/171, 0x41100, 0x2b, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b00)={0x3, 0x7, 0x25, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001b80)=[{0x1, 0x2, 0x8, 0x5}, {0x3, 0x3, 0xe, 0xb}, {0x3, 0x1, 0x0, 0x1}, {0x0, 0x3, 0xe, 0x7}, {0x5, 0x4, 0x7, 0x3}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, &(0x7f0000000280)="402e4960983f", 0x6, 0x0, &(0x7f0000000300), &(0x7f00000009c0)="91212aa43e85094273379198c444f7718ba7e9008c7145e612e828dc7391b7838d9686c749576a70d9c6266e87e762e9c16285314d151e2104c1891db716ee9fae13e58478216e2e73300f22885b0d7f7f9bc42e9b271f885cc2a76a3a90d5d0e983604190a1093abc2724576da87175982cdf9ff29aea8f309439beea94b2a424133ec87b9e1bc81f83698cf04993e90ead99e51c7c34a0ec696482833ac6cc0ec756142d410653ee9b9a406d7fbb8c5ecad53c87b806bb318d77efd57704e0dae50860aa09f5724663b6c05d42ff78ef58922abb20bbf592ee100a179981d5a384a9f12f59efb5d9a3d542c53644ba8390df3cdd49beae665efb0566e4dcf72e9f5ead49ce8a4f5b85a56690b209c96d78b7e3cf6a20a57f523485c76c18020a131789b7fd9b7c00b0d18e00ebda24605bffac597a3cc45b97f5009d19902507934f10acd02d8c3db6138338c244a817bfc5b81330dfc3cbccf5aa3e061020ea7a438b38cd04686e3b590b9fa40c3138307d8f52880af6a3343126f05f7db4f7dd6cac542000e62d54026303f10d6f9f85d8c43b815cd1b246d555a4753620099cdef15a164ad39ca3c0d3bbf7fb0baad95b0d2cada03f6503e9abfc7844a3ad52308021bf9b710821597bece65191a66a4afd9f1c165177431d6b3cd3c38092dd6e493c88833d38c5784a6f61d888eb89356b7453387e69afef29d42bd88080771cfdae3d062916e64d807ec02ec7979819bb3825e831ea4410ad5881fd66fda7b07215fa29c9b880a0bdd04f6a8add595a7c96e55b67bf4041f80e594f075f19b00d6dd8a19d602e0eef83aa59be6e672b8e460ce90205f1c97e14ce39d6ca4263043d1d7352fb5c65b9ee36779cc7d37ad0fd7db316509718cd9d562799c8bef8c7e7bdf9e3bccaa2b90e53483f167c0eb9c2734104a8b772b97af291bb83840950e6a9b0cf01c1695db0b2f5b5bccdcb7919799ea695440efb6490c7e48e0b1bebae36e85c678a5b57546eeeddcf8cf1231a0b4ecc0642df44109e8b75a4e432c59bbbe535d5e1cf0eb4d0bdd12e2bc38ac6702970a79d47fc85362ee64f429d63ac7aa7261a04ef5da88fb7374b55b3a4b5b4f837b78dd522f782a008ada0f9c4c52e982e94a1056def58faecbe90d26b92d1f0bbb7c98bb85651240e0f874b89d6859b340a9583072e5213d3973e568d562b8607fb5b3475d45fa1885ecd15745dd15b4487aa585a301e98a74f8226336e5ec3f2a52fe22c26073882afdf5d32cd98fab3c7212518b8777a87f4c86a51412382547bb2ca40d29e7850d2658cbb8aef007fbabb3aab7cbe9aa97b483c1d81c56d7c9cf76ba764c1d2df30ff5903461de20ce2ef4fad9f70c200150c9b6e74b82c8b9199b14cb6d122e6ba3c3946431af27c2008a5e3351d0e2afb7da96e47f78c977caa367484eaf0c66e0c1c1da11043c613677103f38141d9bfab50c9104dba0d2a03afebd5ed3265897bd5d464512601581009c10948144673f79d98e1db7f1072b20c4241b2d98cca2dda0ef4160e28813013fa1a2eda109844f2bfdd0e0404e3fabe573207d3934ab43b04cb5c559dee49dcb2350226392078894d9a450245889857b1dc2d84954ffff43b2d97277b7346edb27c919216db0a5cf3172900b9f4081a3372087fdaa1a5d5d829e3c1e2838aa14dea2c5de6b7fef4d3c773f10570833a4f79b69565ebdf4d7a3af41869d901b15adddb5d9ab3abd05780f93432a3fabcec04c7098abf0dd3822b6d9ce9553452bf9ffe103862c9f6fbba841e9a3393c21fd5c7d991ae04ce8f17f7c78e58e508e72679a0ac94398636973fb7d80a2262d593bb65d0e5da97fe00f8a92197855a0359c4ca02f17b9eefe0b31d2c433854196095beb82ba6bd3954c61154f142c0c112fe8407b78db8a07e1e86b6c5c92c993048152a5335a89f3985341f08d25766e7ea3e1ee9fe59f1b9c4930c2ac36cd335d60bd3da193c4e7b337497e78e064609d61a4326216b860d1e53df45fefe4404a0a0a19d26933279b35d0b4e770f498685db1618f8322b04b0ebbd3eb8ff75ad8cb4bcb3cd7351a523b779b0c9de6a6d115de4e71112bbd8fee7bd98bb2ed762165d0d7910dd9eef7aadfb54c91374647f4ffe532a5e15a5adc2179c2074245e174fe39def8580ebba04d8566d3e3ede707054daeb224f5585736385c48d6ca8f959d0acee3ccc53794c99c75ad0024556bb7bdc80490bb72d843bba48d110d57baa853f2bc1e109d32f3e35e91b8a366ebfb936d5140430e05d8dff28b645ac02c5f214d4ab59b1c1e49a1d36cc1f1a7122d4d5a3ffb8ecf4925e22b8be2d541a4fc79abed3bd43dfc5ec1d3485751c4a1c7ecb77b21d2afb43e749f3d047f9e262e5710030609d1b46d50f58f91873dfb138e690e571407eb740060dcf4250591926ca53fcfe88594dd9061a6b3578d3c5d4353c1a0d97a7694012077aba98f2a7ace4dc4d405200795b04866eab69f42c3917d603f5c7f034a2036efc857de359f0a4280288f9679046a13d6e5e50bcfe06e192c34cf4ddc0745c90bcb8f574d65b3427665c446dee4c65361f6b4806940c7b7c45bdc688acef948446d4c94fe07b88b00274795316da6f0c08710fe6b40d4e35267c66276d62d2f808f15110006ebe04652bfcf86fb672070fddbe4caf592b9b0a4299689aefbc800c60db804107af6ca2ffb196152ae47dbc18f21f1c414238aeb470600b0924714de50bdb03482488b006e43b4f35290ab5e2467dea1a7329a1ae7f23d20c9e3bf129618809046d8e2f1ff6759dc0135e74b62c8f7802252344b6c31c66789d72eea10b83a7a0ee718b96400c3f50cf184e8390b336cdce50635a5ea6dfbf5a02ca734b0995c960ab087da824fb831a13b8820b59fa71e8d7540738e424cefea1b31bea0578b1d454e46870ac56703d3afb2ac95259be6d46e23e5a2c2b8608940e8181a6130e1c591a3538748301b8a8f9ab53184e34a5e7c6a8223b6bb3fae33166885eca51fdd3b611376a00c4d01037e762c164da5ae054bab1705cf47bff74b8d7171d5b4768685ebce50262498c8252b696fb1e87f8785a2d36d1d072b68d92949da45c6c041ab8879f9f41f240fb8454ca94391d398de1e741c84e5de05061e50b70ffee1e83527064bdef436a5b0c9b835ddfa86d471b1489d4bf78d28bc8d07b5713c1f9e18795880883ac23e80beb28027317a08fb59184f489449f604766f398a7cefeb10076a57bee17531b3d53fd417b59451c49fb60650190ea5508dc257fc4c4e5d5dd6086be2be869d62befb0daadeeef627b10d9ed6978b7f4931c71ff3d9abb87353ed4872f0d773f7775ade02ae4204ee1256c178770b52e768eac09f25ca770bf0fb2820df0684282228665abe4c020abeef7df5c548dc82c5b391d9802c03d98289fbcc12b9a6abdbe6b2499d88d262ee669d597e690604ca2971284cf8a6df1ae441040dd7b279d7848aaf391928081e0f5027139fa324c945539533e82658ada56f73a566dbe0eae94649c9af9611cbb0b5379704fcb368cdd8b0c4b4a6df9b22ab3b93c35ea7ee7edbd9a4b6fad51e8a1922df4fa09f3e6ee7027fbc8a773f0e1b91d93f982a6c5500d0bd06fad302348b1192a097d7cc65c01af0a896513be9820795f04a082975527a5e8099b98f9c7ff5c9ed60ae1af9650c81f7985a3884f2abc81c63b8547523ecd8efd16e5dc1d93e132d7eb8b800b7640d5ec9ef70620f0329b28383ad0881ef1c9b1aea8a4348180aea4832d879b383900c828905745681d9650b7927eb5f78bdfe5ff98c45326c5563a1beb63d27a41f3f2c25ea36a6a8d40df3bb464f0cbb76b9532902d19f70a240ee1b0fc429aa7c748a4b8ebe0bad28270e2950ef92f9433923d16fa364b723aca259526ccf0ac0402571e01be6d9d06f3a181cd87fb1205c4a49a2f83fa2570cac77f1b8b49299e662735f188e2846df07f5dbe7b278e6089aa8eb5b93017fee45b68b13550fc2a53c21e94e138f58486161800233caa1c51a5799c9358994bebcd71feef68e99eca913121014aac7f87e1f609b1096869af2f17287cd86e5be10ea179dffa0ccb3ffd8d8b570cab354d153e88c286d086f13699576b22811cf130145f4f4de2d79f8e0f2f636069ea85d072dd614926286344396a44aee0d48be3d4037df29146671a3d6c4c83333c95b1919943fc5e6141d4e7cbbbf1da436f56ca616de3285fdb554243af27e8736691043662ee7e68e7f392afcb3c0e5f4b9c3ece2c923254702b65b5b7f8770da587e4014a65c8392b313d87d656542d663f4418df0cca9c73b552de3fc4d8a197683fc7c67fdbbb1fe8072bf4fa1c7fa03d14b2f8ce6511c51385e5adf48684bcf30afd16d1eaf68c707e29e85ba8444fbda2f58b2f88f4894a57a34f4c95ce366ab45fbb89b4584b1b7ad3b32f3fa6887bc8e47ad80531102220f9e19a6c68de88d3f287ebca7c797021d53c7136b5b2cadb9a8a729059eb05f43277e58186bd73c86a87f536ec733887d72ebfff40f56680092e2a68a0ae06cc88940130a710102a27424b818f5d4df75b002eb50b2721329c0f84d14b0039da07bced8c027ba926537f5fadd90e84fa76c430d58cf69318a06f9cef4791784bd818e8d35f17de1bf3c5b772175308f0b8db7c4eb12991ebb67c8b58bbfb89d5a7f1649734691ba334e4977860cf04e26cd54ae9e782486482616e46245fd7d4e8e5c67c8c61354c0de28c02f84edb0dbb31202e51aa5219d6edc3d6ec4daa713d9785619ce6d18b2af19e354c992479da9e75bc6095b58540a9e4281b80810d02b6389c3026e63a430c08388fdc9fd8d929f89850c4463a094283161e3e9705030e31f6bdcbcbcafed7348ee2fe65a1878b10306d532f71b7d27093017da5598921da3e8622eb703113979317d0c62e4960035d12b5b1890a214e17c18cead84f67ac63022065a9f522e00ac3819990462a3d097d338f0976a162374c681db45dd72e1a5a5d69717ae995c4528bcae39086f8bd5e42ebe199e657fed93291753c3c0eb9e463ba2a2fb3daed9a8fe2559099cba7068a347c11180cf654b611489193bdbd4f78877ec770e0d62e17f2879f24f426c829a00478a014e17323b490c4b4a82dd3d98f54643cb6fc021e8b314893ebb2c7db2ae96a36bc3ba901ec02b99f761654c8d57d4cbf84a0470388ac01fcd2b73d6e3a983212711afea2618585cdaf7d5543ce4450db2c79a28ebcc0ed5eb776467a6ec0562e5f29182c5609f0d421df67d7088e2c4186c9df1df7780db86181c601ebd0ea0a19c8a43af0bf10e3cd6b3b9a89a410f6eccb9032aec015c09e6115ccfb003467b33af6c876cc082bacc3c6f1fbf9906bd84eaa84f0f5e21cd66f10c1dd73a0a55236735958527791b7a0cd6e6d1324e467e65b2629ec766af119e10596563ab38426eed36aea117d26ce22b0b188fb71c5e604d8b0880dc1694ab4e39127ed635f2767a663ca9f87f7533da64493ca2f122b357c146d6c41025a5664c445d0f09571f88cf33323ac2a1f1ce27f5fce02") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m27.663052882s ago: executing program 0 (id=851): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c0) clock_nanosleep(0xe39be56561e33abe, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xf3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80000000}]}, 0x38}, 0x1, 0x0, 0x0, 0xd7b463f9eab17a7e}, 0x4800) 6m27.42402289s ago: executing program 0 (id=856): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,dots,dmask=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,showexec,time_offset=0x00000000000003a4,nodots,check=relaxed,nodots,dots,nodots,dots,flush,codepage=874,flush,dots,dots,flush,dots,dmask=01777777777777777777774,dots,subj_role=dots,fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66737472616e738a7574654e9a3d2a2c00209dbef59d19c803348fd1ad72128ce21e1d73ae3755f0d451de893eb0db1bca8c5987177249ef3ddfb966b70080bbc8ae4b10e3fefe6ede003d5067a99d5cae65"], 0x1, 0x20e, &(0x7f0000000400)="$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") sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 6m26.732287653s ago: executing program 0 (id=863): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc09000000000001090224"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket(0x10, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 6m25.561581531s ago: executing program 0 (id=872): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6m25.320745979s ago: executing program 34 (id=872): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m54.698362677s ago: executing program 5 (id=1605): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xf21a5dc3ddee5620, @broadcast, @local, @local, @rand_addr=0x64010102}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@setlink={0x30, 0x13, 0x400, 0x2000000, 0x25dfdbfe, {}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xfff}]}, 0x30}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x24) r4 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2200045, &(0x7f0000000340)=ANY=[], 0x0, 0x2c6, &(0x7f0000000840)="$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") fstatfs(r4, 0x0) 2m52.15498209s ago: executing program 5 (id=1609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5800) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20040000) syz_open_dev$MSR(0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 2m50.92584675s ago: executing program 5 (id=1614): fsopen(&(0x7f00000000c0)='proc\x00', 0x1) ioperm(0x10, 0xfffffffffffffffd, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000080)=0x1000) 2m49.905651634s ago: executing program 5 (id=1617): openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x31, &(0x7f0000000040)=0x105) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$bpf(0x0, &(0x7f0000000440)='.\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x80) sendfile(r4, r5, 0x0, 0x1) 2m47.930902438s ago: executing program 5 (id=1623): socket$nl_xfrm(0x10, 0x3, 0x6) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(0x0, 0xffffffffffffffff, 0xad00) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 2m47.402349926s ago: executing program 5 (id=1627): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@noacl}, {@nodiscard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@nomblk_io_submit}]}, 0x0, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) sendmmsg$inet6(r4, &(0x7f0000001780), 0x0, 0xc040) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 2m31.98449947s ago: executing program 35 (id=1627): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@noacl}, {@nodiscard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@nomblk_io_submit}]}, 0x0, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TIOCOUTQ(r5, 0x5411, 0x0) sendmmsg$inet6(r4, &(0x7f0000001780), 0x0, 0xc040) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 27.557817169s ago: executing program 8 (id=1861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x80) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x200c}) 23.746745493s ago: executing program 8 (id=1866): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x244, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=0x0], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x1) r1 = syz_open_procfs(r0, 0x0) read$msr(r1, &(0x7f0000000500)=""/254, 0xfe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r2, 0x81000000) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4034) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000e28000/0x4000)=nil, 0x4000, 0xd) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1014494, &(0x7f00000001c0)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x803, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x2000006], [0x91, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2]], '\x00', [{0x0, 0xfffffffe}, {0x0, 0x4000000}, {}, {0x20000000}, {0xd5}, {}, {0x0, 0x8000}, {0x1}, {0xc, 0x7}, {0x5}, {}, {0x0, 0xfffffffb}], '\x00', 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x63, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 21.931724123s ago: executing program 6 (id=1870): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 19.166912073s ago: executing program 8 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004914}, 0x4004001) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, 0x0, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x802) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) 19.145022084s ago: executing program 1 (id=1875): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 17.506559748s ago: executing program 3 (id=1876): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$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") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="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"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 17.476996388s ago: executing program 8 (id=1877): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x40000000015, 0x805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x4) recvmsg(r3, 0x0, 0x40002182) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) listen(r0, 0x4b) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 17.1420829s ago: executing program 1 (id=1878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(0x0, 0x200, 0x420400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x917}, 0x14}, 0x1, 0x620b}, 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket(0x2, 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 17.036897613s ago: executing program 6 (id=1879): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x407, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 15.825447702s ago: executing program 6 (id=1880): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109040, 0x0) io_uring_setup(0x36b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000003c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1a3) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r3, r2) fcntl$setlease(r1, 0x400, 0x0) 15.146638445s ago: executing program 6 (id=1881): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) getgroups(0x9, &(0x7f0000002e00)=[0xee00, 0xee01, 0x0, 0xee00, 0xee00, 0xee00, 0x0, 0x0, 0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002e40)={0x2a0, 0xffffffffffffffda, 0x0, [{{0x4, 0x2, 0x3, 0x3, 0x5, 0x5, {0x3, 0x0, 0x7, 0xffffffffffffffff, 0x4, 0x7, 0x3ff, 0x3, 0x8, 0x8000, 0x7fff, 0x0, 0x0, 0xffff, 0x1}}, {0x28000000, 0xa, 0xf, 0x0, '\\.(@+[^-!\x90#]%..'}}, {{0x5, 0x1, 0x9, 0x9, 0x8, 0x4, {0x0, 0xcf1d, 0x1, 0x3, 0x7, 0x1, 0x1, 0x54, 0x5, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x9}}, {0x3, 0x0, 0x1, 0x0, 'x'}}, {{0x6, 0x0, 0x7ff, 0x6, 0x9, 0x0, {0x4, 0x8, 0x1, 0x2, 0x7d9, 0x2, 0x2, 0x8, 0x2db, 0x8000, 0x56e6, 0x0, 0x0, 0x21, 0x7bbc}}, {0x1, 0x7, 0x8, 0x0, 'nl80211\x00'}}, {{0x0, 0x1, 0xf0, 0xcb5, 0x5, 0xc0, {0x0, 0x2, 0x4d7e, 0x1000, 0x4, 0x4ec, 0x6, 0x800, 0x7, 0x4000, 0x7, r5, r6, 0x1ff, 0x100e}}, {0x1, 0xfd8, 0xd, 0x7, '/dev/hidraw#\x00'}}]}, 0x2a0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="796100000000fedbdf377e0000000c0099"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r9 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 15.083484487s ago: executing program 1 (id=1882): r0 = socket(0x10, 0x80002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) socket$packet(0x11, 0x3, 0x300) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r4, r4, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe20}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffff90}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0xffffff86}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 14.950966291s ago: executing program 3 (id=1883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x50, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x8, 0x7, 0x0, &(0x7f0000000280)="e02742e8680d85", 0x0, 0x83f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 11.120302586s ago: executing program 1 (id=1885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6c, @private=0xa010100, 0x4e22, 0x6, 'rr\x00', 0x11, 0x1, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000200)=0xdc, 0x7, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x105800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x3, 0x4, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x40}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) 11.114717157s ago: executing program 6 (id=1886): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}}, 0x4c}}, 0x20000080) 10.918373953s ago: executing program 3 (id=1887): fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) getpid() r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x141040) pwritev(r1, 0x0, 0x0, 0xfffffffe, 0x5) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, 0x0, 0x40880) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4080, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2160, 0x0) 10.194208667s ago: executing program 7 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 9.998959543s ago: executing program 1 (id=1889): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x80004, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8}, {0x3, @svalue=0x4000000000000}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0xffffffffffffffff}]}, 0x10000}]}) 9.405693593s ago: executing program 3 (id=1890): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, 0x0, &(0x7f00000003c0)}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, 0x40000) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000180)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 7.842373464s ago: executing program 7 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 7.842056444s ago: executing program 1 (id=1892): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x407, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 6.699628241s ago: executing program 7 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffd4a}, 0x1, 0x0, 0x0, 0x24080815}, 0x844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f0000001080)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c00000000010102000000000000000002000007580006801c000380060002004e200000060002004e240000060001004e2100"], 0x6c}, 0x1, 0x0, 0x0, 0x10008010}, 0x4008087) 6.699346661s ago: executing program 8 (id=1894): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = io_uring_setup(0x4803, &(0x7f0000001240)={0x0, 0x8efc, 0x800, 0x4, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001500)=""/223, 0xdf}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x104204000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x400000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) 6.41381735s ago: executing program 3 (id=1895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 5.591548257s ago: executing program 7 (id=1896): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = getpgid(0xffffffffffffffff) getpriority(0x2, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[], 0x404}, {&(0x7f00000010c0)={0x1e8, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x38, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2bd1d23d"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @nested={0xad, 0x75, 0x0, 0x1, [@generic="133bfcbbb4af5f88361510f8c9a6e13abfd5022534c8e372914d94a06b10e3ae2ba3d6ac756aa0c0eed8e51995a5c2260a52dc356dcd94c4233b22e5a1dbd2c24d5fb282e9a8a71b3af0813095d09d5e5f9d255c22629798e8bb49a20fca121e555c23959d10db8a76decbbb7fc1177aa38c28972b3921dab2f1675705e097aad37c84a5c43c9410383cc2fe5f09a470a41914bb5177994c1613e1be06235b93b19b87d151", @nested={0x4, 0x144}]}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x59, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87d5a33d4390e88608ef110f93e346549b6b419432475a35b6195a"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75f328c8461590174f3f2f7408f3"]}, 0x1e8}, {0x0}, {&(0x7f00000013c0)={0x131c, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, "", [@typed={0xe2, 0xbb, 0x0, 0x0, @binary="29b10366aabf6eb576cb6c12b15e182c726ad9d7e5daebf14eac869b7097169d4c24b77b1c51aab4998f4529a5ec8a4829e2042c3f71c0c1396c21576e7558c10492502814b506ec62d4d400caf02c29a4e60e446de7d8d8839f3bef4e8499f4e364ac5ca42f7771d8c34bb660de6668928178d57843a07e3a1663eb2bb66ce9128c8f278bdd096a77c14809c0d96f052fe6b9ee8e8fbe17c053b89996de5a61d893b6e1dae55fa8b0e7fe0be41ee61b15b3d83705845f0a85b4bfc6af26f6bfac655fd6e6329659edcd828576dd6ac846a7961b721220cfcea103c079e9"}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@empty}, @generic="ec6024954b2e511af35710bd3940ac00f97f9622515653cc1db03b1b20402a868a5fa1f171833dcf6819d909aa333380a7f4033cbef3d18174397005042313679e1529b67b882227d0c4a3df9750a4db7fc9e9160f4897dcaa65e757fc61b015a2e30c5a0aa157a36807472425e343ffe23fc5cddc45eccf45e55cd3aab58bb2edd50dce94ae2d1eac90033e748433461d69e7f57d21a154c423c2e0", @generic="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", @typed={0xc, 0xec, 0x0, 0x0, @u64=0x80}, @nested={0xb0, 0x102, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f4", @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @generic, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x40}]}, @typed={0xb8, 0x11b, 0x0, 0x0, @binary="0313ab3c5d27af80604fddf6e4615e57e9fe8e962039190d5726a0c4555880611571df182b28eabffd9260030f9e36ae0114170f76ace152e2bee5d76a237ec5ac288264d072e7d465fdf8e1caf86da208952829d731a945727126e1798456fcc1a3d19173323416656edba14ff501a3ff8577240af312101d3b1ee3c4cd9f1f747f8f3ced039dba3dda1df8344fc32c2bddc4ff2c48f4e7d486f163b141544fab245190a219dbdba0647167996e45fe81ce8f24"}, @nested={0x10, 0x3d, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xf4}, @typed={0x4, 0xc1}]}]}, 0x131c}, {&(0x7f0000002840)={0x28, 0x30, 0xa34, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x2b, 0x0, 0x1, [@typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}, {&(0x7f0000000500)={0x110, 0x2f, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0xfe, 0x2c, 0x0, 0x0, @binary="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"}]}, 0x110}, {&(0x7f0000002ac0)={0x21c, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x73, 0x140, 0x0, 0x1, [@typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic="9853cf677c43b244c1878a7158a024aa8fbd606d08ba7b3daee634bae496b48679994c6d10c3aa976a4488cc47d175baa17e47c65ea98ce79fb1a5f191b0894ef9db6b93b82a0a26ec3760aa565496342e02964875f229485d58f68f682c8b6e", @generic="4d0741a1df181b"]}, @nested={0x4, 0xec}, @nested={0x192, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="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", @nested={0x4, 0x148}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x21c}, {&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x150}, {&(0x7f0000003000)=ANY=[@ANYBLOB="cc0000003600000227bd7000fbdbdf2563f0372f865e46131678ef81bd2e2a1e1e4e5c580f71393f02907dcb97c7296b2b5a260430aee19d6527341faf9cd43afbe3cd337d7c8a52a85845972010795f71f5898dbbc9cfbc2a1727011dd2df533ff22a723fcc4ddfd97ee4c2e3ec4248f61a85b1bef7abfb9c27e67acca578436656a70d5602c0c144be3de7dd69061e596d32d1a57481c456eda2253de3d9cae74012f716704ec5bbd1e03a7b51aa66ff3b672c712816f5f01b00"/203], 0xcc}], 0x9, &(0x7f0000005380)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r1]}}], 0xb8, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r5}) sendto$inet6(r7, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 3.908370852s ago: executing program 8 (id=1897): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r5 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil) shmctl$SHM_STAT(r5, 0xd, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000002c0)=[{0x17, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7}, {0x1, @svalue=0x3}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x2b, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @svalue=0x939}, {0x3, @svalue=0x3b00000000}, {0x0, @svalue=0x50}]}, 0xe6}, {0x14, '\x00', @buffer={"eee713e999fc4d6a82d774dcf206a0dd631170a3991abae1ccbb88521c42f8c6", 0x20}, 0x4}]}) 2.613148855s ago: executing program 7 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001b40)={0xe, {0x1, 0x8, 0x8001, 0x8}}) sync_file_range(r3, 0xb8a, 0xd4, 0xd) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7, 0x20, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x2, 0x50, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0xdb}, @timestamp_addr={0x44, 0x4, 0x18, 0x1, 0xd}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x2}, {0x1, 0xb, "6d85eadc92850842da"}, {0x2, 0x2}, {0x7, 0xe, "5d10a492b7003c0792a6d706"}, {0x7, 0x9, "d1fc4b374772c7"}, {0x5, 0x4, "cdaa"}, {0x2, 0x4, "b57e"}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@loopback, r4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x9}, 0x3d}}}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @a}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) 1.049914816s ago: executing program 7 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x18}}, 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xc}) socket$inet(0x2, 0x2, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.049521226s ago: executing program 3 (id=1900): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x6, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 0s ago: executing program 6 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) kernel console output (not intermixed with test programs): 66.207445][ T5756] EXT4-fs: Ignoring removed oldalloc option [ 166.247730][ T5756] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.331696][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.550469][ T5760] loop0: detected capacity change from 0 to 8192 [ 166.650271][ T5760] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.692220][ T5760] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 166.719534][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 166.738425][ T5760] REISERFS (device loop0): using ordered data mode [ 166.769770][ T5775] overlayfs: failed to get inode (-116) [ 166.785429][ T5760] reiserfs: using flush barriers [ 166.842005][ T5775] overlayfs: failed to get inode (-116) [ 166.862976][ T5760] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.934526][ T5760] REISERFS (device loop0): checking transaction log (loop0) [ 166.946332][ T4321] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.972986][ T5760] REISERFS (device loop0): Using r5 hash to sort names [ 166.984596][ T5760] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 167.116966][ T5760] overlayfs: upper fs needs to support d_type. [ 167.136416][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 167.143598][ T4321] usb 4-1: config index 0 descriptor too short (expected 100, got 36) [ 167.169787][ T5760] overlayfs: upper fs does not support tmpfile. [ 167.173356][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.207294][ T5760] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.216519][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.236487][ T4321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.255749][ T5760] overlayfs: failed to set xattr on upper [ 167.270107][ T4321] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 167.282734][ T5760] overlayfs: ...falling back to index=off,metacopy=off. [ 167.295747][ T5760] overlayfs: failed to resolve './file0': -2 [ 167.307195][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.340589][ T4321] usb 4-1: config 0 descriptor?? [ 167.767922][ T4321] hid (null): unknown global tag 0xe [ 167.773457][ T4321] hid (null): unknown global tag 0xd [ 167.818921][ T4321] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x1 [ 167.826286][ T4321] hid-led 0003:0FC5:B080.0008: unknown global tag 0xe [ 167.833221][ T4321] hid-led 0003:0FC5:B080.0008: item 0 4 1 14 parsing failed [ 167.846926][ T4321] hid-led: probe of 0003:0FC5:B080.0008 failed with error -22 [ 168.354138][ T27] usb 4-1: USB disconnect, device number 9 [ 168.794546][ T5811] loop0: detected capacity change from 0 to 1024 [ 168.829118][ T5811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.461466][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 169.632787][ T5822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.793066][ T5822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.928511][ T5822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.068438][ T5822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.266393][ T5822] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.293938][ T5822] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.323722][ T5825] loop0: detected capacity change from 0 to 8192 [ 170.343352][ T5825] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.366462][ T5825] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 170.399013][ T5825] REISERFS (device loop0): using ordered data mode [ 170.405599][ T5825] reiserfs: using flush barriers [ 170.412355][ T5825] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.429314][ T5825] REISERFS (device loop0): checking transaction log (loop0) [ 170.438432][ T5825] REISERFS (device loop0): Using r5 hash to sort names [ 170.445934][ T5825] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 170.472042][ T26] audit: type=1800 audit(1781671885.885:7): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.396" name="bus" dev="loop0" ino=6 res=0 errno=0 [ 170.544423][ T5822] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.653090][ T5822] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.836490][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 171.726969][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 171.844288][ T5859] loop0: detected capacity change from 0 to 512 [ 171.906998][ T5859] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 171.924889][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.963706][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.994995][ T5859] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.046361][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.076564][ T5859] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.398: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 172.126325][ T27] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.161118][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.180625][ T5859] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.398: Bad quota inode: 4, type: 1 [ 172.211321][ T5859] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.227235][ T27] usb 6-1: config 0 descriptor?? [ 172.263013][ T5859] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 172.270961][ T5859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.322019][ T26] audit: type=1326 audit(1781671887.735:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088179ce59 code=0x0 [ 172.648621][ T27] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 172.676539][ T27] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 172.689061][ T4321] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.729754][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 172.888481][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 172.906243][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.936497][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 172.951447][ T4321] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 172.963629][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.973204][ T4321] usb 5-1: Product: syz [ 172.977716][ T4321] usb 5-1: Manufacturer: syz [ 172.982381][ T4321] usb 5-1: SerialNumber: syz [ 172.998243][ T4321] usb 5-1: config 0 descriptor?? [ 173.210108][ T4321] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 173.471839][ T4321] usb 5-1: USB disconnect, device number 12 [ 174.003457][ T5872] loop3: detected capacity change from 0 to 512 [ 174.038544][ T5872] EXT4-fs: Ignoring removed oldalloc option [ 174.059237][ T5872] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.094059][ T5872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.203458][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 174.387832][ T5882] loop0: detected capacity change from 0 to 4096 [ 174.406830][ T5885] loop3: detected capacity change from 0 to 1024 [ 174.483037][ T5885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 174.675740][ T26] audit: type=1800 audit(1781671890.085:9): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.405" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 174.829736][ T27] usb 6-1: USB disconnect, device number 5 [ 175.179521][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 175.607710][ T5909] loop3: detected capacity change from 0 to 1024 [ 175.680901][ T5909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.694510][ T5911] input: syz0 as /devices/virtual/input/input13 [ 175.838738][ T5909] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.414: corrupted xattr entries [ 175.991794][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 176.247257][ T5921] loop5: detected capacity change from 0 to 512 [ 176.269643][ T5921] EXT4-fs: Ignoring removed oldalloc option [ 176.316426][ T5921] EXT4-fs (loop5): Test dummy encryption mode enabled [ 176.405316][ T5921] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.728422][ T4728] EXT4-fs (loop5): unmounting filesystem. [ 176.847127][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.047522][ T4316] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 177.058264][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 177.076582][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.099319][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 177.123408][ T22] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 177.143030][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.163336][ T22] usb 1-1: Product: syz [ 177.168115][ T22] usb 1-1: Manufacturer: syz [ 177.183657][ T22] usb 1-1: SerialNumber: syz [ 177.190439][ T22] usb 1-1: config 0 descriptor?? [ 177.261852][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.276070][ T4316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.285315][ T4316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 177.296885][ T4316] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 177.312432][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.334282][ T5938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.355201][ T4316] hub 4-1:1.0: bad descriptor, ignoring hub [ 177.372144][ T4316] hub: probe of 4-1:1.0 failed with error -5 [ 177.379852][ T4316] cdc_wdm 4-1:1.0: skipping garbage [ 177.392283][ T4316] cdc_wdm 4-1:1.0: skipping garbage [ 177.422676][ T4316] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 177.430136][ T22] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 177.445027][ T4316] cdc_wdm 4-1:1.0: Unknown control protocol [ 177.695313][ T4321] usb 1-1: USB disconnect, device number 11 [ 177.737257][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.744149][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.752271][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.759118][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 178.454430][ T4316] usb 4-1: USB disconnect, device number 10 [ 178.462638][ T5933] cdc_wdm 4-1:1.0: Error autopm - -16 [ 178.659114][ T4316] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.888623][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 178.936743][ T4316] usb 4-1: config 0 has no interfaces? [ 178.942331][ T4316] usb 4-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 178.952331][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.978435][ T4316] usb 4-1: config 0 descriptor?? [ 179.214059][ T3655] usb 4-1: USB disconnect, device number 11 [ 180.896360][ T4321] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.028621][ T5979] loop4: detected capacity change from 0 to 256 [ 181.094780][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 181.114438][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 181.130813][ T5979] FAT-fs (loop4): Directory bread(block 64) failed [ 181.139946][ T5979] FAT-fs (loop4): Directory bread(block 65) failed [ 181.161110][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 181.178144][ T5979] FAT-fs (loop4): Directory bread(block 66) failed [ 181.188860][ T5979] FAT-fs (loop4): Directory bread(block 67) failed [ 181.195578][ T5979] FAT-fs (loop4): Directory bread(block 68) failed [ 181.210418][ T4321] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 181.219940][ T5979] FAT-fs (loop4): Directory bread(block 69) failed [ 181.237985][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.261052][ T5979] FAT-fs (loop4): Directory bread(block 70) failed [ 181.277935][ T4321] usb 4-1: Product: syz [ 181.282284][ T4321] usb 4-1: Manufacturer: syz [ 181.292375][ T4321] usb 4-1: SerialNumber: syz [ 181.298495][ T5979] FAT-fs (loop4): Directory bread(block 71) failed [ 181.313760][ T4321] usb 4-1: config 0 descriptor?? [ 181.319476][ T5979] FAT-fs (loop4): Directory bread(block 72) failed [ 181.319553][ T5979] FAT-fs (loop4): Directory bread(block 73) failed [ 181.546939][ T4321] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 181.845370][ T14] usb 4-1: USB disconnect, device number 12 [ 182.919962][ T5989] loop0: detected capacity change from 0 to 32768 [ 183.064578][ T5989] XFS (loop0): Mounting V5 Filesystem [ 183.254638][ T5989] XFS (loop0): Ending clean mount [ 183.280017][ T5989] XFS (loop0): Quotacheck needed: Please wait. [ 183.389820][ T5989] XFS (loop0): Quotacheck: Done. [ 183.547726][ T4281] XFS (loop0): Unmounting Filesystem [ 183.564681][ T6001] overlayfs: failed to clone upperpath [ 184.291537][ T5724] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.336833][ T14] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 184.597172][ T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.663121][ T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.742803][ T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 184.864479][ T14] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 184.904720][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.945644][ T6006] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.975779][ T14] hub 6-1:1.0: bad descriptor, ignoring hub [ 184.983937][ T14] hub: probe of 6-1:1.0 failed with error -5 [ 185.011708][ T14] cdc_wdm 6-1:1.0: skipping garbage [ 185.037331][ T14] cdc_wdm 6-1:1.0: skipping garbage [ 185.064058][ T14] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 185.086696][ T14] cdc_wdm 6-1:1.0: Unknown control protocol [ 185.145670][ T5724] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.222681][ T5724] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.285239][ T6014] overlayfs: failed to clone upperpath [ 185.312681][ T5724] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.337006][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 185.343714][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 185.351101][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 185.357791][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 185.364299][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 185.370979][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 185.464421][ T6020] overlayfs: failed to clone upperpath [ 185.576303][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.781409][ T14] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 185.796203][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.816721][ T14] usb 4-1: Product: syz [ 185.836400][ T14] usb 4-1: Manufacturer: syz [ 185.846510][ T14] usb 4-1: SerialNumber: syz [ 185.863013][ T14] usb 4-1: config 0 descriptor?? [ 185.884663][ T14] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 185.992694][ T3655] usb 6-1: USB disconnect, device number 6 [ 186.078376][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.099018][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.111825][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.123600][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.134126][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.142089][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.167955][ T3655] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.366879][ T3655] usb 6-1: Using ep0 maxpacket: 8 [ 186.408364][ T3655] usb 6-1: config 0 has no interfaces? [ 186.425529][ T3655] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 186.441381][ T14] gspca_sunplus: reg_r err -110 [ 186.468976][ T3655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.504630][ T3655] usb 6-1: config 0 descriptor?? [ 186.754541][ T14] usb 6-1: USB disconnect, device number 7 [ 186.909413][ T7] usb 4-1: USB disconnect, device number 13 [ 187.016831][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 187.454442][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.506762][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.518289][ T6024] device bridge_slave_0 entered promiscuous mode [ 187.616846][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.624041][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.661828][ T6024] device bridge_slave_1 entered promiscuous mode [ 187.807097][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.822971][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.862303][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.880505][ T5724] device hsr_slave_0 left promiscuous mode [ 187.896417][ T5724] device hsr_slave_1 left promiscuous mode [ 187.916643][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.924172][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.944149][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.952048][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.960894][ T5724] device bridge_slave_1 left promiscuous mode [ 187.968800][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.978430][ T5724] device bridge_slave_0 left promiscuous mode [ 187.984805][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.025958][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 188.045338][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.062141][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 188.082415][ T5724] device veth1_macvtap left promiscuous mode [ 188.091251][ T5724] device veth0_macvtap left promiscuous mode [ 188.103891][ T5724] device veth1_vlan left promiscuous mode [ 188.112774][ T7] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 188.122336][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.136056][ T5724] device veth0_vlan left promiscuous mode [ 188.143579][ T7] usb 6-1: Product: syz [ 188.154566][ T7] usb 6-1: Manufacturer: syz [ 188.160741][ T7] usb 6-1: SerialNumber: syz [ 188.183207][ T7] usb 6-1: config 0 descriptor?? [ 188.198198][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 188.428518][ T7] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 188.696736][ T4316] usb 6-1: USB disconnect, device number 8 [ 189.327209][ T5724] team0 (unregistering): Port device team_slave_1 removed [ 189.522661][ T5724] team0 (unregistering): Port device team_slave_0 removed [ 189.616827][ T6052] loop3: detected capacity change from 0 to 4096 [ 189.645400][ T5724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.809948][ T5724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.824316][ T26] audit: type=1800 audit(1781671905.235:10): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.466" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 190.258899][ T6055] loop5: detected capacity change from 0 to 32768 [ 190.276454][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 190.384894][ T6055] XFS (loop5): Mounting V5 Filesystem [ 190.576899][ T6055] XFS (loop5): Ending clean mount [ 190.596766][ T6055] XFS (loop5): Quotacheck needed: Please wait. [ 190.810904][ T5724] bond0 (unregistering): Released all slaves [ 190.846599][ T6055] XFS (loop5): Quotacheck: Done. [ 190.991635][ T4728] XFS (loop5): Unmounting Filesystem [ 191.176215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 191.295538][ T6024] team0: Port device team_slave_0 added [ 191.366604][ T6024] team0: Port device team_slave_1 added [ 191.458044][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.465253][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.586694][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.617868][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.632947][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.676288][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.834046][ T6024] device hsr_slave_0 entered promiscuous mode [ 191.855938][ T6024] device hsr_slave_1 entered promiscuous mode [ 191.869757][ T6024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.910278][ T6024] Cannot create hsr debugfs directory [ 192.155339][ T6024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.166119][ T6024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.179633][ T6024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.193440][ T6024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.320851][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.342009][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.360842][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.367863][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 192.390368][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.409532][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.429144][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.444281][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.451484][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.466747][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.475008][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.485334][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.494391][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.502159][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.532879][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.545929][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.561147][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.572215][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.590595][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.601966][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.612400][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.642976][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.655909][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.671164][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.683044][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.693948][ T6024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.065634][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.073574][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.095229][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.715998][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.733867][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.770360][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.785695][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.801225][ T6024] device veth0_vlan entered promiscuous mode [ 193.809034][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.817878][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.831539][ T6024] device veth1_vlan entered promiscuous mode [ 193.864346][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.875354][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.884964][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.895540][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.907626][ T6024] device veth0_macvtap entered promiscuous mode [ 193.922544][ T6024] device veth1_macvtap entered promiscuous mode [ 193.942762][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.957391][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.968322][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.984305][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.995271][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.011401][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.023683][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.041216][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.054604][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.067837][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.077141][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.085448][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.094626][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.107029][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.118206][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.130154][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.141911][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.153094][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.163927][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.181262][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.192225][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.205956][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.218048][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.228636][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.241404][ T6024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.251346][ T6024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.266117][ T6024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.275345][ T6024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.289462][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.295868][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.397144][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.405062][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.422591][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.436573][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 194.457898][ T4806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.472509][ T4806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.481846][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.701505][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 195.132890][ T6152] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 195.243078][ T6158] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.344277][ T6158] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 195.427286][ T6158] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 195.438946][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 195.484290][ T6163] loop5: detected capacity change from 0 to 7 [ 195.505157][ T4401] loop5: [ 195.508677][ T4401] loop5: partition table partially beyond EOD, truncated [ 195.521915][ T6163] loop5: [ 195.524975][ T6163] loop5: partition table partially beyond EOD, truncated [ 195.638762][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 195.643769][ T6140] loop0: detected capacity change from 0 to 32768 [ 195.666767][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.703662][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.761416][ T7] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 195.797531][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.814057][ T6140] XFS (loop0): Mounting V5 Filesystem [ 195.826362][ T7] usb 7-1: Product: syz [ 195.830797][ T7] usb 7-1: Manufacturer: syz [ 195.835560][ T7] usb 7-1: SerialNumber: syz [ 195.844192][ T7] usb 7-1: config 0 descriptor?? [ 196.066972][ T7] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 196.146906][ T6140] XFS (loop0): Ending clean mount [ 196.171482][ T6140] XFS (loop0): Quotacheck needed: Please wait. [ 196.251854][ T6140] XFS (loop0): Quotacheck: Done. [ 196.366087][ T4360] usb 7-1: USB disconnect, device number 2 [ 196.417355][ T4281] XFS (loop0): Unmounting Filesystem [ 197.316766][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 197.529008][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.557044][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.596423][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.639486][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.664539][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.708169][ T7] usb 1-1: config 0 descriptor?? [ 197.953175][ T6203] loop6: detected capacity change from 0 to 32768 [ 198.127750][ T7] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 198.135788][ T6203] XFS (loop6): Mounting V5 Filesystem [ 198.165761][ T6228] loop3: detected capacity change from 0 to 512 [ 198.207185][ T7] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 198.332360][ T6228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.377736][ T6203] XFS (loop6): Ending clean mount [ 198.428426][ T6203] XFS (loop6): Quotacheck needed: Please wait. [ 198.534036][ T6203] XFS (loop6): Quotacheck: Done. [ 198.564276][ T6228] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.485: invalid indirect mapped block 256 (level 2) [ 198.683741][ T6228] EXT4-fs (loop3): 2 truncates cleaned up [ 198.715614][ T6228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.820079][ T6228] EXT4-fs (loop3): shut down requested (1) [ 198.849796][ T6024] XFS (loop6): Unmounting Filesystem [ 198.992344][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 199.269472][ T6248] loop3: detected capacity change from 0 to 1024 [ 199.394627][ T6248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.436979][ C1] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 199.556755][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 199.834721][ T6266] loop6: detected capacity change from 0 to 1764 [ 200.223554][ T6276] loop0: detected capacity change from 0 to 2048 [ 200.257818][ T6276] EXT4-fs: Ignoring removed nobh option [ 200.270598][ T27] usb 1-1: USB disconnect, device number 12 [ 200.331702][ T6276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.346119][ T4319] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.365852][ T6276] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.408690][ T26] audit: type=1800 audit(1781671915.825:11): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.497" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 200.422481][ T6276] fs-verity: sha256 using implementation "sha256-avx2" [ 200.562699][ T4319] usb 6-1: Using ep0 maxpacket: 32 [ 200.570665][ T4319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 200.627867][ T4319] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 200.664201][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 200.670148][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 200.670180][ T4319] usb 6-1: Product: syz [ 200.670196][ T4319] usb 6-1: Manufacturer: syz [ 200.670212][ T4319] usb 6-1: SerialNumber: syz [ 200.703695][ T4319] usb 6-1: config 0 descriptor?? [ 200.732437][ T6273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 201.111514][ T4321] usb 6-1: USB disconnect, device number 9 [ 201.494001][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 201.497161][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 201.500874][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 201.516457][ T4319] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.728597][ T4319] usb 4-1: config 0 has no interfaces? [ 201.736264][ T4319] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 201.777953][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.816499][ T4319] usb 4-1: config 0 descriptor?? [ 202.182443][ T4319] usb 4-1: USB disconnect, device number 14 [ 203.995488][ T6358] loop0: detected capacity change from 0 to 128 [ 204.065524][ T6358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 204.118160][ T6358] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.525664][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 205.650248][ T6390] loop0: detected capacity change from 0 to 32768 [ 205.820977][ T6390] JBD2: Ignoring recovery information on journal [ 205.855653][ T6406] mmap: syz.3.532 (6406) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 205.960659][ T6408] capability: warning: `syz.3.532' uses deprecated v2 capabilities in a way that may be insecure [ 206.076496][ T26] audit: type=1326 audit(1781671921.495:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.3.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08f959ce59 code=0x0 [ 206.111642][ T6390] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 206.452109][ T6418] loop5: detected capacity change from 0 to 4096 [ 206.575256][ T4281] ocfs2: Unmounting device (7,0) on (node local) [ 206.594419][ T26] audit: type=1800 audit(1781671922.005:13): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file1" dev="loop5" ino=35 res=0 errno=0 [ 206.930183][ T6435] fuse: Bad value for 'fd' [ 208.362053][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 208.527076][ T6464] loop0: detected capacity change from 0 to 1764 [ 208.535095][ T6467] loop5: detected capacity change from 0 to 1024 [ 208.569220][ T6467] EXT4-fs: Ignoring removed bh option [ 208.655256][ T6467] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.817634][ T6467] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 209.049437][ T4728] EXT4-fs (loop5): unmounting filesystem. [ 210.033034][ T6517] loop0: detected capacity change from 0 to 256 [ 210.109143][ T6520] fuse: Bad value for 'fd' [ 210.163969][ T6517] FAT-fs (loop0): Directory bread(block 64) failed [ 210.178678][ T6517] FAT-fs (loop0): Directory bread(block 65) failed [ 210.193212][ T6471] loop6: detected capacity change from 0 to 40427 [ 210.238369][ T6517] FAT-fs (loop0): Directory bread(block 66) failed [ 210.278658][ T6517] FAT-fs (loop0): Directory bread(block 67) failed [ 210.316842][ T6517] FAT-fs (loop0): Directory bread(block 68) failed [ 210.353353][ T6517] FAT-fs (loop0): Directory bread(block 69) failed [ 210.394078][ T6517] FAT-fs (loop0): Directory bread(block 70) failed [ 210.446203][ T6517] FAT-fs (loop0): Directory bread(block 71) failed [ 210.471034][ T6517] FAT-fs (loop0): Directory bread(block 72) failed [ 210.499149][ T6517] FAT-fs (loop0): Directory bread(block 73) failed [ 210.913899][ T6536] loop5: detected capacity change from 0 to 128 [ 210.953734][ T6536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 210.994505][ T6536] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.552272][ T4728] EXT4-fs (loop5): unmounting filesystem. [ 212.186209][ T6579] loop0: detected capacity change from 0 to 256 [ 212.219498][ T6579] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.274061][ T6579] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 212.346769][ T6579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.537480][ T6583] loop6: detected capacity change from 0 to 4096 [ 212.583167][ T6587] fuse: Bad value for 'fd' [ 212.691997][ T26] audit: type=1800 audit(1781671928.105:14): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.583" name="file1" dev="loop6" ino=35 res=0 errno=0 [ 213.351322][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 213.831356][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.597'. [ 213.887168][ T6622] overlayfs: failed to clone upperpath [ 214.064182][ T6630] loop5: detected capacity change from 0 to 4096 [ 214.101497][ T6630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.226418][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 214.329725][ T4728] EXT4-fs (loop5): unmounting filesystem. [ 214.431655][ T7] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.449104][ T7] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 214.492409][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.517302][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 214.569416][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 214.627106][ T7] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.651444][ T6649] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.665102][ T7] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.674045][ T7] usb 7-1: Product: syz [ 214.693716][ T7] usb 7-1: Manufacturer: syz [ 214.729072][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 214.745751][ T7] cdc_wdm 7-1:1.0: skipping garbage [ 214.762005][ T7] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 214.816719][ T7] cdc_wdm 7-1:1.0: Unknown control protocol [ 215.006067][ T7] usb 7-1: USB disconnect, device number 3 [ 215.264609][ T6668] loop6: detected capacity change from 0 to 256 [ 215.332080][ T6673] loop0: detected capacity change from 0 to 128 [ 215.372533][ T6673] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.393515][ T6668] FAT-fs (loop6): Directory bread(block 64) failed [ 215.436447][ T6668] FAT-fs (loop6): Directory bread(block 65) failed [ 215.443219][ T6673] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.499918][ T6668] FAT-fs (loop6): Directory bread(block 66) failed [ 215.536015][ T6668] FAT-fs (loop6): Directory bread(block 67) failed [ 215.570909][ T6668] FAT-fs (loop6): Directory bread(block 68) failed [ 215.621704][ T6668] FAT-fs (loop6): Directory bread(block 69) failed [ 215.654271][ T6668] FAT-fs (loop6): Directory bread(block 70) failed [ 215.678576][ T6668] FAT-fs (loop6): Directory bread(block 71) failed [ 215.685710][ T6681] fuse: Bad value for 'fd' [ 215.703609][ T4803] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.735484][ T6668] FAT-fs (loop6): Directory bread(block 72) failed [ 215.766990][ T6668] FAT-fs (loop6): Directory bread(block 73) failed [ 217.021565][ T6704] loop5: detected capacity change from 0 to 8192 [ 218.194795][ T6719] loop6: detected capacity change from 0 to 131072 [ 218.205116][ T6719] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 218.213369][ T6719] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 218.234177][ T6719] F2FS-fs (loop6): invalid crc value [ 218.290112][ T6719] F2FS-fs (loop6): Found nat_bits in checkpoint [ 218.358120][ T6719] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 218.365465][ T6719] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 218.817531][ T6745] fuse: Bad value for 'fd' [ 219.533410][ T6761] loop2: detected capacity change from 0 to 7 [ 219.565764][ T5165] Dev loop2: unable to read RDB block 7 [ 219.573132][ T5165] loop2: unable to read partition table [ 219.592205][ T5165] loop2: partition table beyond EOD, truncated [ 219.624315][ T6761] Dev loop2: unable to read RDB block 7 [ 219.642102][ T6761] loop2: unable to read partition table [ 219.675571][ T6761] loop2: partition table beyond EOD, truncated [ 219.726567][ T6761] loop_reread_partitions: partition scan of loop2 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 219.784115][ T3639] Dev loop2: unable to read RDB block 7 [ 219.794583][ T3639] loop2: unable to read partition table [ 219.826647][ T3639] loop2: partition table beyond EOD, truncated [ 219.992640][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 220.266863][ T6781] fuse: Bad value for 'fd' [ 220.393433][ T6739] loop5: detected capacity change from 0 to 40427 [ 220.947453][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 220.957736][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 220.965369][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.975602][ T4282] Workqueue: hci4 hci_rx_work [ 220.980428][ T4282] Call Trace: [ 220.983777][ T4282] [ 220.986759][ T4282] dump_stack_lvl+0x188/0x24e [ 220.991506][ T4282] ? show_regs_print_info+0x12/0x12 [ 220.996774][ T4282] ? load_image+0x400/0x400 [ 221.001368][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 221.006555][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 221.011437][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 221.016712][ T4282] kobject_add_internal+0x61c/0xcc0 [ 221.022036][ T4282] kobject_add+0x160/0x230 [ 221.026511][ T4282] ? kobject_init+0x1d0/0x1d0 [ 221.031246][ T4282] ? klist_children_get+0x50/0x50 [ 221.036311][ T4282] ? get_device_parent+0x121/0x3f0 [ 221.041461][ T4282] device_add+0x48c/0x1000 [ 221.045911][ T4282] ? kmem_cache_free+0xf7/0x290 [ 221.050810][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 221.055810][ T4282] le_conn_complete_evt+0x1062/0x1670 [ 221.061241][ T4282] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 221.067541][ T4282] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 221.073253][ T4282] ? skb_pull_data+0xf7/0x200 [ 221.078001][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 221.083624][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 221.089762][ T4282] hci_event_packet+0x7b9/0x1280 [ 221.094845][ T4282] ? bis_list+0x280/0x280 [ 221.099242][ T4282] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 221.105197][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 221.110381][ T4282] ? mt_dump_node+0x750/0x1920 [ 221.115198][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 221.120455][ T4282] hci_rx_work+0x3eb/0xd40 [ 221.124936][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 221.129847][ T4282] ? process_one_work+0x7b0/0x1160 [ 221.135103][ T4282] process_one_work+0x8a2/0x1160 [ 221.140116][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 221.146056][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 221.151150][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 221.156761][ T4282] ? kthread_data+0x4b/0xc0 [ 221.161342][ T4282] worker_thread+0xaa2/0x1270 [ 221.166085][ T4282] ? __kthread_parkme+0x162/0x1c0 [ 221.171187][ T4282] kthread+0x29d/0x330 [ 221.175307][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 221.180465][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 221.185186][ T4282] ret_from_fork+0x1f/0x30 [ 221.189673][ T4282] [ 221.195515][ T4282] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 221.208881][ T4282] Bluetooth: hci4: failed to register connection device [ 221.335312][ T6802] loop6: detected capacity change from 0 to 4096 [ 221.376270][ T14] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 221.587709][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.621666][ T14] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 221.696322][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.699693][ T14] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 221.699748][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 221.699772][ T14] usb 6-1: Product: syz [ 221.699788][ T14] usb 6-1: Manufacturer: syz [ 221.699804][ T14] usb 6-1: SerialNumber: syz [ 221.701752][ T14] usb 6-1: config 0 descriptor?? [ 221.710573][ T14] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 221.978419][ T14] radio-si470x: probe of 6-1:0.0 failed with error -5 [ 221.985514][ T14] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 222.056323][ T14] usb 6-1: USB disconnect, device number 10 [ 222.491008][ T6830] overlayfs: failed to clone upperpath [ 222.712332][ T6836] vivid-000: ================= START STATUS ================= [ 222.761416][ T6836] vivid-000: Radio HW Seek Mode: Bounded [ 222.806788][ T6836] vivid-000: Radio Programmable HW Seek: false [ 222.874117][ T6836] vivid-000: RDS Rx I/O Mode: Block I/O [ 222.928952][ T6836] vivid-000: Generate RBDS Instead of RDS: false [ 222.961382][ T6836] vivid-000: RDS Reception: true [ 223.026362][ T6836] vivid-000: RDS Program Type: 0 inactive [ 223.032222][ T6836] vivid-000: RDS PS Name: inactive [ 223.070768][ T6836] vivid-000: RDS Radio Text: inactive [ 223.173541][ T6836] vivid-000: RDS Traffic Announcement: false inactive [ 223.266614][ T6836] vivid-000: RDS Traffic Program: false inactive [ 223.273077][ T6836] vivid-000: RDS Music: false inactive [ 223.357819][ T6860] loop6: detected capacity change from 0 to 128 [ 223.374437][ T6860] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.390564][ T6860] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.609838][ T6836] vivid-000: ================== END STATUS ================== [ 224.056155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 224.317525][ T6865] loop0: detected capacity change from 0 to 1024 [ 224.337273][ T4803] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.361316][ T6865] EXT4-fs: Ignoring removed bh option [ 224.477241][ T6865] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.618130][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 224.876471][ T4316] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 225.032587][ T6893] loop5: detected capacity change from 0 to 128 [ 225.068382][ T4316] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.083986][ T6893] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 225.099979][ T4316] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 225.132486][ T6893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.146278][ T4316] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.208924][ T4316] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 225.248734][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 225.278655][ T4316] usb 7-1: Product: syz [ 225.294254][ T6897] fuse: Bad value for 'fd' [ 225.300997][ T4316] usb 7-1: Manufacturer: syz [ 225.315970][ T4316] usb 7-1: SerialNumber: syz [ 225.349612][ T4316] usb 7-1: config 0 descriptor?? [ 225.362253][ T4316] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 225.389219][ T4316] radio-si470x: probe of 7-1:0.0 failed with error -5 [ 225.427135][ T4316] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 225.540399][ T6902] fuse: Bad value for 'fd' [ 225.591610][ T4316] usb 7-1: USB disconnect, device number 4 [ 225.896422][ T6910] process 'syz.5.677' launched './file0' with NULL argv: empty string added [ 226.098909][ T6917] loop5: detected capacity change from 0 to 128 [ 226.221433][ T6917] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 226.296649][ T6917] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.799471][ T6917] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 227.566268][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 228.036039][ T4728] EXT4-fs (loop5): unmounting filesystem. [ 228.349819][ T6941] overlayfs: failed to resolve './file0': -2 [ 228.559379][ T6960] loop0: detected capacity change from 0 to 1024 [ 228.929121][ T6972] loop6: detected capacity change from 0 to 512 [ 228.965994][ T6972] EXT4-fs: Ignoring removed bh option [ 229.041724][ T6972] EXT4-fs: inline encryption not supported [ 229.067728][ T6972] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.180541][ T6972] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 229.208738][ T6972] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.695: bg 0: block 248: padding at end of block bitmap is not set [ 229.228955][ T6972] Quota error (device loop6): write_blk: dquota write failed [ 229.239025][ T6972] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 229.249512][ T6972] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.695: Failed to acquire dquot type 1 [ 229.322634][ T6972] EXT4-fs (loop6): 1 truncate cleaned up [ 229.332207][ T6972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 229.343849][ T6986] futex_wake_op: syz.3.697 tries to shift op by 144; fix this program [ 229.523019][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 230.032796][ T7006] loop5: detected capacity change from 0 to 128 [ 230.050529][ T7006] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.064742][ T7006] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.045254][ T41] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.109248][ T7008] input: syz1 as /devices/virtual/input/input14 [ 231.282206][ T7016] fuse: Bad value for 'fd' [ 231.570754][ T7025] fuse: Bad value for 'fd' [ 231.926384][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 232.125078][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.125134][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.125175][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.125278][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.125324][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.167664][ T7] usb 1-1: config 0 descriptor?? [ 232.668954][ T7] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 232.721123][ T7] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 233.849810][ T7076] unsupported nlmsg_type 40 [ 234.003016][ T7079] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.807298][ T7] usb 1-1: USB disconnect, device number 13 [ 234.864619][ T7095] infiniband syz2: set active [ 234.877229][ T7095] infiniband syz2: added veth0_vlan [ 235.122046][ T7095] RDS/IB: syz2: added [ 235.130835][ T7095] smc: adding ib device syz2 with port count 1 [ 235.147125][ T7095] smc: ib device syz2 port 1 has pnetid [ 235.178811][ T7115] capability: warning: `syz.6.733' uses 32-bit capabilities (legacy support in use) [ 235.866378][ T4316] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 236.064806][ T4316] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.082211][ T4316] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 236.101798][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.150475][ T4316] usb 7-1: config 0 descriptor?? [ 236.352252][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 236.713331][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 236.720923][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.763996][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.782708][ T22] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 236.793673][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.829323][ T22] usb 1-1: config 0 descriptor?? [ 236.837251][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.869209][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.883916][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.895059][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.107502][ T4316] ath6kl: Failed to read usb control message: -71 [ 237.114126][ T4316] ath6kl: Unable to read the bmi data from the device: -71 [ 237.146254][ T4316] ath6kl: unable to read target info byte count: -71 [ 237.177859][ T4316] ath6kl: Failed to init ath6kl core: -71 [ 237.261233][ T4316] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 237.272669][ T22] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 237.297385][ T4316] usb 7-1: USB disconnect, device number 5 [ 237.304534][ T22] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 237.316240][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 237.329606][ T22] ft260 0003:0403:6030.000C: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 237.470809][ T22] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 237.872343][ T22] ft260 0003:0403:6030.000C: failed to retrieve status: -32 [ 238.137371][ T7136] ft260 0003:0403:6030.000C: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 238.489437][ T7136] ft260 0003:0403:6030.000C: failed to reset I2C controller: -108 [ 238.624995][ T7136] ft260 0003:0403:6030.000C: ft260_i2c_write: failed to start transfer, ret -38 [ 238.647103][ T27] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 238.927073][ T27] usb 1-1: device descriptor read/64, error -32 [ 239.206519][ T27] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 239.371408][ T7181] overlayfs: failed to resolve './file0': -2 [ 239.436353][ T27] usb 1-1: device descriptor read/64, error -32 [ 239.726709][ T27] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 239.813688][ T27] usb 1-1: device descriptor read/8, error -32 [ 240.910204][ T22] usb 1-1: USB disconnect, device number 14 [ 241.770567][ T7199] fuse: Bad value for 'fd' [ 241.949609][ T7193] fido_id[7193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 242.247259][ T7218] fuse: Bad value for 'fd' [ 242.407416][ T7225] fuse: Bad value for 'fd' [ 242.413689][ C1] Unknown status report in ack skb [ 242.637376][ T7234] loop6: detected capacity change from 0 to 1024 [ 242.661249][ T7234] EXT4-fs: Ignoring removed bh option [ 242.752846][ T7234] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 243.005071][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 243.364710][ T7258] fuse: Bad value for 'fd' [ 243.465959][ T7264] fuse: Bad value for 'fd' [ 245.082681][ T7300] rdma_rxe: rxe_register_device failed with error -23 [ 245.111092][ T7300] rdma_rxe: failed to add veth0_vlan [ 246.336239][ T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 246.526420][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 246.533792][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.565942][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.615497][ T22] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 246.641560][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.685408][ T22] usb 1-1: config 0 descriptor?? [ 246.763857][ T7345] loop6: detected capacity change from 0 to 1024 [ 246.794425][ T7345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.809497][ T7345] EXT4-fs: inline encryption not supported [ 246.827372][ T7345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.891850][ T7345] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 247.130475][ T22] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 247.143327][ T22] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 247.162103][ T22] ft260 0003:0403:6030.000D: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 247.211480][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 247.328217][ T22] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 247.461387][ T7356] overlayfs: failed to clone upperpath [ 247.729841][ T22] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 247.986642][ T7329] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0007, size 0, write) [ 248.017327][ T22] usb 1-1: USB disconnect, device number 15 [ 248.062832][ T7364] fido_id[7364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 248.160285][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 248.272789][ T7380] overlayfs: failed to clone upperpath [ 248.600066][ T7390] fuse: Bad value for 'fd' [ 248.931928][ T7406] tipc: Started in network mode [ 248.954945][ T7406] tipc: Node identity 2007ff, cluster identity 4711 [ 249.002109][ T7406] tipc: Node number set to 2099199 [ 249.136289][ T11] tipc: Subscription rejected, illegal request [ 249.666254][ T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 249.846357][ T7434] overlayfs: failed to clone upperpath [ 249.856275][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 249.870223][ T22] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.912130][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.936389][ T22] usb 7-1: Product: syz [ 249.944105][ T22] usb 7-1: Manufacturer: syz [ 249.966480][ T22] usb 7-1: SerialNumber: syz [ 249.990896][ T22] usb 7-1: config 0 descriptor?? [ 250.112443][ T7442] loop0: detected capacity change from 0 to 512 [ 250.125627][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 250.226169][ T22] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.949263][ T7459] fuse: Bad value for 'fd' [ 251.479345][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.619515][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.725003][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.864579][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.881349][ T22] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 251.906290][ T22] usb 7-1: USB disconnect, device number 6 [ 252.883387][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.894545][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.909812][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.924182][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.932929][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 252.944992][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.997517][ T7508] fuse: Bad value for 'fd' [ 253.418360][ T7521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.884'. [ 254.088946][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.888'. [ 254.645479][ T7504] chnl_net:caif_netlink_parms(): no params data found [ 254.882837][ T7558] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4728] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7558] [ 254.996679][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 255.308761][ T7579] fuse: Bad value for 'fd' [ 255.391896][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.456326][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.491536][ T7504] device bridge_slave_0 entered promiscuous mode [ 255.534798][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.566814][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.602846][ T7504] device bridge_slave_1 entered promiscuous mode [ 255.692997][ T11] device hsr_slave_0 left promiscuous mode [ 255.707405][ T11] device hsr_slave_1 left promiscuous mode [ 255.722106][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728972][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750817][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.772115][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.808642][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.832763][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.849171][ T11] device bridge_slave_1 left promiscuous mode [ 255.856170][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.913436][ T11] device bridge_slave_0 left promiscuous mode [ 255.930507][ T9] tipc: Subscription rejected, illegal request [ 255.941009][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.033917][ T11] device veth1_macvtap left promiscuous mode [ 256.045099][ T11] device veth0_macvtap left promiscuous mode [ 256.059033][ T11] device veth1_vlan left promiscuous mode [ 256.065956][ T11] device veth0_vlan left promiscuous mode [ 257.083294][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 257.352137][ T11] team0 (unregistering): Port device team_slave_1 removed [ 257.422799][ T11] team0 (unregistering): Port device team_slave_0 removed [ 257.497414][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.564952][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.107315][ T11] bond0 (unregistering): Released all slaves [ 258.226093][ T7504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.243187][ T7504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.252896][ T7591] tipc: Started in network mode [ 258.260282][ T7591] tipc: Node identity 2007ff, cluster identity 4711 [ 258.288944][ T7591] tipc: Node number set to 2099199 [ 258.500759][ T7504] team0: Port device team_slave_0 added [ 258.521558][ T7504] team0: Port device team_slave_1 added [ 258.585919][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.613804][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.681628][ T7504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.695246][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.702518][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.806750][ T7504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.990889][ T7504] device hsr_slave_0 entered promiscuous mode [ 259.011847][ T7504] device hsr_slave_1 entered promiscuous mode [ 259.062366][ T7504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.078899][ T7504] Cannot create hsr debugfs directory [ 259.156557][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 259.754856][ T7504] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 259.785731][ T7504] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 259.810884][ T7504] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 259.879101][ T7504] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 259.978959][ T7650] fuse: Bad value for 'fd' [ 260.147080][ T7504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.206460][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.226632][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.279762][ T7504] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.325750][ T7659] tipc: Started in network mode [ 260.350870][ T7659] tipc: Node identity 2007ff, cluster identity 4711 [ 260.387374][ T4519] tipc: Subscription rejected, illegal request [ 260.413798][ T7659] tipc: Node number set to 2099199 [ 260.442676][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.503228][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.556951][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.565903][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.607144][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.638693][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.653500][ T7665] loop6: detected capacity change from 0 to 512 [ 260.671214][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.705311][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.712565][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.765156][ T7665] EXT4-fs (loop6): 1 truncate cleaned up [ 260.787898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.815420][ T7665] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 260.834907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.879036][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.909930][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.943074][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.965376][ T7665] overlayfs: upper fs needs to support d_type. [ 260.992007][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.016038][ T7665] overlayfs: conflicting lowerdir path [ 261.032124][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.054370][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.077083][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.118931][ T7504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.153515][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.169909][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.203034][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.236790][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 261.267437][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 261.415650][ T7689] loop6: detected capacity change from 0 to 1024 [ 261.467630][ T7689] EXT4-fs: inline encryption not supported [ 261.498887][ T7689] EXT4-fs: Ignoring removed bh option [ 261.573007][ T7689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 262.030095][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 262.313820][ T7718] tipc: Started in network mode [ 262.358478][ T7718] tipc: Node identity 2007ff, cluster identity 4711 [ 262.398287][ T7718] tipc: Node number set to 2099199 [ 262.504275][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.526080][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.543501][ T9] tipc: Subscription rejected, illegal request [ 262.579782][ T7504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.310258][ T7745] fuse: Bad value for 'fd' [ 264.168802][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.243430][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.277735][ T7767] overlayfs: failed to clone upperpath [ 264.476195][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.485590][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.598307][ T7504] device veth0_vlan entered promiscuous mode [ 264.611734][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.661172][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.825732][ T7504] device veth1_vlan entered promiscuous mode [ 265.186669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.212705][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.264730][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.281455][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.297611][ T7504] device veth0_macvtap entered promiscuous mode [ 265.318229][ T7504] device veth1_macvtap entered promiscuous mode [ 265.378607][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.416255][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.459627][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.493787][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.520819][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.560802][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.596696][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.626452][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.663214][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.684682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.703633][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.727627][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.758530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.784704][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.823758][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.861486][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.892691][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.903620][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.994612][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.039650][ T7504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.081152][ T7504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.124906][ T7504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.155483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.176044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.232038][ T7504] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.276428][ T7504] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.316328][ T7504] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.355688][ T7504] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.692199][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.752038][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.808024][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.902947][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.924432][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.963316][ T7796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.715027][ T7868] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 267.775079][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 268.084354][ T7868] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 268.533270][ T7884] fuse: Bad value for 'fd' [ 269.426236][ T14] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 269.630558][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 269.695126][ T14] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 269.726312][ T14] usb 7-1: can't read configurations, error -71 [ 270.660902][ T7935] device syzkaller0 entered promiscuous mode [ 271.763923][ T7943] loop6: detected capacity change from 0 to 32768 [ 271.940124][ T7943] XFS (loop6): Mounting V5 Filesystem [ 272.074319][ T7943] XFS (loop6): Ending clean mount [ 272.279855][ T26] audit: type=1800 audit(1781671987.695:15): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.983" name="file1" dev="loop6" ino=4427 res=0 errno=0 [ 272.488594][ T6024] XFS (loop6): Unmounting Filesystem [ 273.580563][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e58c400: rx timeout, send abort [ 274.099550][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd3c400: rx timeout, send abort [ 274.107938][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e58c400: abort rx timeout. Force session deactivation [ 274.338124][ T8000] overlayfs: failed to clone upperpath [ 274.607880][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd3c400: abort rx timeout. Force session deactivation [ 276.964963][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 276.992711][ T7990] device syz_tun entered promiscuous mode [ 277.018358][ T7990] device vlan2 entered promiscuous mode [ 277.172377][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1003'. [ 277.499631][ T8040] fuse: Bad value for 'fd' [ 278.323004][ T8076] fuse: Bad value for 'fd' [ 278.876753][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.912920][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 278.951650][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 278.964389][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1032'. [ 279.053469][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 279.125845][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 279.215555][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 279.258354][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 279.290315][ T8105] netlink: 'syz.7.1032': attribute type 10 has an invalid length. [ 279.424579][ T8105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.792353][ T8188] tipc: Enabling of bearer rejected, failed to enable media [ 284.446598][ T8215] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000100xffffffffffffffff [ 286.301972][ T8256] syz.7.1075 sent an empty control message without MSG_MORE. [ 287.773558][ T8278] o2cb: This node has not been configured. [ 287.780042][ T8278] o2cb: Cluster check failed. Fix errors before retrying. [ 287.787493][ T8278] (syz.1.1092,8278,1):user_dlm_register:674 ERROR: status = -22 [ 287.795727][ T8278] (syz.1.1092,8278,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 288.427519][ T8293] overlayfs: failed to clone upperpath [ 288.461813][ T8293] overlayfs: failed to clone upperpath [ 288.898970][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'. [ 289.336181][ T22] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 289.540487][ T22] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.561324][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.585520][ T22] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.608915][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.619862][ T8334] overlayfs: failed to clone upperpath [ 289.645368][ T22] usb 7-1: SerialNumber: syz [ 289.889172][ T22] usb 7-1: 0:2 : does not exist [ 289.946030][ T22] usb 7-1: USB disconnect, device number 9 [ 290.661010][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1107'. [ 290.726023][ T8357] device syz_tun entered promiscuous mode [ 290.762391][ T8357] device vlan2 entered promiscuous mode [ 290.962797][ T8367] Cannot find del_set index 4 as target [ 292.788939][ T8382] fuse: Bad value for 'fd' [ 293.086173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 293.106172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 293.116161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 293.296185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 293.306187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 297.113401][ T8438] loop6: detected capacity change from 0 to 4096 [ 297.159222][ T8438] EXT4-fs: inline encryption not supported [ 297.201462][ T8438] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 297.237446][ T8438] EXT4-fs (loop6): Test dummy encryption mode enabled [ 297.330662][ T8438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 297.366330][ T8438] System zones: 0-5 [ 297.387810][ T8438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 297.632002][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 299.921448][ T8493] loop6: detected capacity change from 0 to 4096 [ 299.941199][ T8493] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.988149][ T8493] EXT4-fs (loop6): Test dummy encryption mode enabled [ 300.202606][ T8493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 300.722446][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 301.871548][ T8506] loop6: detected capacity change from 0 to 1024 [ 301.987539][ T8513] random: crng reseeded on system resumption [ 302.568622][ T8506] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1146: Invalid block bitmap block 0 in block_group 0 [ 302.722296][ T8506] Quota error (device loop6): write_blk: dquota write failed [ 302.731098][ T8506] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 302.799997][ T8506] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1146: Failed to acquire dquot type 0 [ 302.848038][ T8506] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.1146: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.942003][ T8506] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1146: Invalid inode bitmap blk 0 in block_group 0 [ 302.987978][ T4298] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 303.041376][ T4298] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 303.051964][ T8506] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 303.113493][ T8506] EXT4-fs (loop6): 1 orphan inode deleted [ 303.136638][ T8506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 303.306688][ T8506] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz.6.1146: path /110/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 303.588381][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 303.652610][ T4513] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 303.726378][ T4513] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 304.106162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 304.126157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 304.508335][ T8562] fuse: Bad value for 'fd' [ 307.120271][ T8609] overlayfs: failed to clone upperpath [ 307.789188][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 307.854667][ T8617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.110680][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 308.443493][ T14] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 308.652351][ T14] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.672723][ T14] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.719759][ T14] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.764440][ T14] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.875151][ T14] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.890132][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.007094][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 309.145774][ T14] usb 8-1: GET_CAPABILITIES returned 0 [ 309.160882][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1184'. [ 309.175512][ T14] usbtmc 8-1:16.0: can't read capabilities [ 309.388930][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.419688][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.428890][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.438050][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.447207][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.456492][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.486238][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.495436][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.504598][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.513792][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.526559][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.535745][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.544885][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.554021][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.563151][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.572249][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.581339][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.612263][ T14] usb 8-1: USB disconnect, device number 2 [ 310.352246][ T8675] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 312.449670][ T8704] loop7: detected capacity change from 0 to 4096 [ 312.457287][ T8704] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.078709][ T8704] EXT4-fs (loop7): Test dummy encryption mode enabled [ 314.117847][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 314.142373][ T8704] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 314.374132][ T7504] EXT4-fs (loop7): unmounting filesystem. [ 314.487624][ T8711] device syzkaller0 entered promiscuous mode [ 314.538235][ T8711] tipc: Enabled bearer , priority 0 [ 314.571175][ T8716] fuse: Bad value for 'fd' [ 314.606592][ T8710] tipc: Resetting bearer [ 314.787911][ T8710] tipc: Disabling bearer [ 314.891435][ T8723] fuse: Bad value for 'fd' [ 315.035981][ T8731] device syzkaller0 entered promiscuous mode [ 315.084240][ T8731] tipc: Started in network mode [ 315.093203][ T8731] tipc: Node identity d22b26b5a424, cluster identity 4711 [ 315.113123][ T8731] tipc: Enabled bearer , priority 0 [ 315.154220][ T8727] tipc: Resetting bearer [ 315.225039][ T8734] overlayfs: failed to clone upperpath [ 315.333969][ T8727] tipc: Disabling bearer [ 315.605252][ T8750] tipc: Enabling of bearer rejected, failed to enable media [ 317.168167][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174826][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.530894][ T8779] device syzkaller0 entered promiscuous mode [ 322.810357][ T8833] device syzkaller0 entered promiscuous mode [ 325.447686][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1235'. [ 325.500378][ T8869] device syzkaller0 entered promiscuous mode [ 325.554572][ T8869] tipc: Enabled bearer , priority 0 [ 325.622393][ T8867] tipc: Resetting bearer [ 325.757983][ T8867] tipc: Disabling bearer [ 326.406696][ T14] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 326.678164][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 326.703900][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.811695][ T14] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.882350][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.954323][ T14] usb 8-1: config 0 descriptor?? [ 327.143350][ T8870] loop6: detected capacity change from 0 to 32768 [ 327.181525][ T14] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 327.552536][ T3655] usb 8-1: USB disconnect, device number 3 [ 327.558615][ C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 328.598443][ T8935] loop7: detected capacity change from 0 to 4096 [ 328.955025][ T7504] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 328.988353][ T7504] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 329.299394][ T8960] device syzkaller0 entered promiscuous mode [ 329.499129][ T8969] binder_alloc: 8966: binder_alloc_buf, no vma [ 330.110479][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1266'. [ 332.606311][ T3655] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 332.836241][ T3655] usb 7-1: Using ep0 maxpacket: 8 [ 332.853033][ T3655] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 333.053529][ T3655] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.229127][ T3655] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.281621][ T3655] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.356225][ T3655] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.399006][ T3655] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.409161][ T3655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.589050][ T9020] x_tables: ip_tables: osf match: only valid for protocol 6 [ 334.376137][ T3655] usb 7-1: GET_CAPABILITIES returned 0 [ 334.381809][ T3655] usbtmc 7-1:16.0: can't read capabilities [ 334.491611][ T4320] usb 7-1: USB disconnect, device number 10 [ 336.198707][ T9039] device syzkaller0 entered promiscuous mode [ 337.442650][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 341.646723][ T26] audit: type=1800 audit(1781672056.605:16): pid=9082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1294" name="bus" dev="ramfs" ino=50830 res=0 errno=0 [ 341.912974][ T9111] loop6: detected capacity change from 0 to 512 [ 341.973815][ T9111] EXT4-fs (loop6): Test dummy encryption mode enabled [ 341.992389][ T9111] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 342.040677][ T9111] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 342.062879][ T9111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 344.795942][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 344.980593][ T6024] EXT4-fs (loop6): unmounting filesystem. [ 346.155571][ T9160] loop7: detected capacity change from 0 to 256 [ 346.217158][ T9160] exfat: Deprecated parameter 'utf8' [ 346.252162][ T9160] exfat: Deprecated parameter 'namecase' [ 346.271787][ T9160] exfat: Deprecated parameter 'namecase' [ 346.299246][ T9160] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 346.338761][ T9162] loop6: detected capacity change from 0 to 2048 [ 346.397400][ T26] audit: type=1800 audit(1781672061.815:17): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1313" name="file1" dev="loop7" ino=1048654 res=0 errno=0 [ 346.449650][ T9165] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.051659][ T9175] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 347.311917][ T9175] Remounting filesystem read-only [ 347.868390][ T9161] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 355.301522][ T9238] device syzkaller0 entered promiscuous mode [ 356.250445][ T9254] Cannot find add_set index 0 as target [ 360.241453][ T9288] netlink: 'syz.6.1348': attribute type 4 has an invalid length. [ 362.595294][ T9322] device syzkaller0 entered promiscuous mode [ 362.737399][ T9322] tipc: Enabled bearer , priority 0 [ 362.785788][ T9321] tipc: Resetting bearer [ 364.052073][ T9321] tipc: Disabling bearer [ 364.076426][ T4316] tipc: Node number set to 1980704437 [ 367.790401][ T9375] loop7: detected capacity change from 0 to 1024 [ 367.832840][ T9375] EXT4-fs: inline encryption not supported [ 367.934768][ T9375] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 371.273428][ T7504] EXT4-fs (loop7): unmounting filesystem. [ 375.377064][ T9459] overlayfs: failed to clone lowerpath [ 375.427983][ T9460] overlayfs: failed to clone lowerpath [ 375.489270][ T9461] loop7: detected capacity change from 0 to 512 [ 375.867455][ T9461] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.1389: iget: bad i_size value: 38620345925642 [ 375.949265][ T9461] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1389: couldn't read orphan inode 15 (err -117) [ 376.336273][ T9461] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 377.818863][ T7504] EXT4-fs (loop7): unmounting filesystem. [ 378.736559][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.743145][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.976684][ T9493] device syzkaller0 entered promiscuous mode [ 380.480015][ T4282] Bluetooth: hci2: link tx timeout [ 380.486366][ T4282] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 382.544459][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 390.506665][ T9575] fuse: Bad value for 'fd' [ 390.573953][ T9581] overlayfs: failed to clone lowerpath [ 393.826028][ T9618] netlink: 'syz.1.1428': attribute type 11 has an invalid length. [ 394.102959][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 394.557770][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 394.808328][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 394.815870][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 394.996394][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 395.036484][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 395.044807][ T9618] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 395.151220][ T9618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.043643][ T9663] MPTCP: kernel_bind error, err=-98 [ 402.276722][ T4320] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 402.646709][ T4320] usb 8-1: Using ep0 maxpacket: 16 [ 402.679932][ T4320] usb 8-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 402.772738][ T4320] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.835860][ T4320] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.901887][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.956833][ T4320] usb 8-1: Product: syz [ 402.961252][ T4320] usb 8-1: Manufacturer: syz [ 402.986430][ T4320] usb 8-1: SerialNumber: syz [ 404.073964][ T4320] usb 8-1: 0:2 : does not exist [ 404.165118][ T4320] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 404.420719][ T4320] usb 8-1: USB disconnect, device number 4 [ 405.637480][ T9690] udevd[9690]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.770457][ T9722] loop7: detected capacity change from 0 to 2048 [ 405.837020][ T9722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.252097][ T9722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 407.322981][ T26] audit: type=1800 audit(1781672122.735:18): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1456" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 407.477259][ T9722] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 407.498335][ T9722] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 407.535485][ T9722] EXT4-fs (loop7): This should not happen!! Data will be lost [ 407.535485][ T9722] [ 407.545585][ T9722] EXT4-fs (loop7): Total free blocks count 0 [ 407.551843][ T9722] EXT4-fs (loop7): Free/Dirty block details [ 407.558529][ T9722] EXT4-fs (loop7): free_blocks=2415919504 [ 407.564702][ T9722] EXT4-fs (loop7): dirty_blocks=256 [ 407.570039][ T9722] EXT4-fs (loop7): Block reservation details [ 407.576236][ T9722] EXT4-fs (loop7): i_reserved_data_blocks=16 [ 407.635660][ T9751] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 407.823518][ T9749] netlink: 'syz.6.1460': attribute type 4 has an invalid length. [ 407.881378][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 407.925174][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 408.057853][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 408.170181][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 408.316944][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 408.391563][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 408.427022][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 408.706648][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.881481][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.158634][ T9753] device bridge_slave_0 left promiscuous mode [ 409.461503][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.541925][ T9753] device bridge_slave_1 left promiscuous mode [ 409.553107][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.624244][ T9753] bond0: (slave bond_slave_0): Releasing backup interface [ 409.719578][ T9753] bond0: (slave bond_slave_1): Releasing backup interface [ 410.120082][ T9753] team0: Port device team_slave_0 removed [ 410.380388][ T9753] team0: Port device team_slave_1 removed [ 410.448610][ T9753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.481693][ T9753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.504592][ T9753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.550641][ T9753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.616377][ T9749] netlink: 'syz.6.1460': attribute type 4 has an invalid length. [ 410.721617][ T9786] loop7: detected capacity change from 0 to 128 [ 410.809758][ T9786] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 410.855854][ T9786] hpfs: filesystem error: improperly stopped [ 410.864789][ T9786] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 410.880061][ T9786] hpfs: You really don't want any checks? You are crazy... [ 410.892709][ T9786] hpfs: Code page index out of array [ 410.902267][ T9786] hpfs: code page support is disabled [ 410.913116][ T9786] hpfs: hpfs_map_4sectors(): unaligned read [ 410.924651][ T9786] hpfs: hpfs_map_4sectors(): unaligned read [ 410.933672][ T9786] hpfs: filesystem error: unable to find root dir [ 411.337717][ T9786] hpfs: hpfs_map_4sectors(): unaligned read [ 411.390388][ T9786] hpfs: hpfs_map_4sectors(): unaligned read [ 413.197219][ T9786] hpfs: hpfs_map_4sectors(): unaligned read [ 416.605816][ T9833] device veth3 entered promiscuous mode [ 416.663959][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'. [ 417.388802][ T9864] loop7: detected capacity change from 0 to 128 [ 418.019607][ T9849] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.067933][ T4320] Process accounting resumed [ 418.083251][ T9867] Process accounting resumed [ 419.043875][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 419.057287][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 441.076639][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.083104][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.293443][T10071] loop7: detected capacity change from 0 to 128 [ 441.302387][T10071] EXT4-fs: Ignoring removed orlov option [ 441.348374][T10071] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 441.361564][T10071] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.398209][ T7504] EXT4-fs (loop7): unmounting filesystem. [ 445.244791][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 445.695655][T10101] bridge1: port 1(erspan0) entered blocking state [ 445.912160][T10101] bridge1: port 1(erspan0) entered disabled state [ 445.996097][T10118] random: crng reseeded on system resumption [ 446.849688][T10101] device erspan0 entered promiscuous mode [ 446.893116][T10101] bridge1: port 1(erspan0) entered blocking state [ 446.901280][T10101] bridge1: port 1(erspan0) entered forwarding state [ 446.920900][T10097] bridge1: port 1(erspan0) entered disabled state [ 446.951628][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.960815][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.651302][T10130] overlayfs: failed to clone upperpath [ 455.428154][T10188] netlink: 'syz.6.1576': attribute type 10 has an invalid length. [ 455.436349][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1576'. [ 455.447581][T10188] netlink: 'syz.6.1576': attribute type 10 has an invalid length. [ 455.455515][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1576'. [ 485.550428][T10466] loop7: detected capacity change from 0 to 512 [ 485.693241][T10466] EXT4-fs: Ignoring removed i_version option [ 485.699420][T10466] EXT4-fs: Ignoring removed nobh option [ 486.621252][T10466] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 486.729062][T10466] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 486.779349][T10466] EXT4-fs (loop7): 1 truncate cleaned up [ 486.793191][T10466] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 486.828240][T10479] tipc: Failed to remove unknown binding: 66,1,1/2099199:3374449869/3374449871 [ 489.322188][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.334723][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.345190][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.353489][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 489.370576][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 489.383238][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.622083][ T7504] EXT4-fs (loop7): unmounting filesystem. [ 490.904706][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 491.839042][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 492.535515][T10525] input: syz1 as /devices/virtual/input/input15 [ 494.049879][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 494.559776][T10529] overlayfs: failed to clone upperpath [ 496.020427][T10494] chnl_net:caif_netlink_parms(): no params data found [ 496.301746][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 496.341168][T10545] 9pnet_fd: Insufficient options for proto=fd [ 497.120939][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.211940][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.287112][T10494] device bridge_slave_0 entered promiscuous mode [ 497.335981][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.463974][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.497411][T10494] device bridge_slave_1 entered promiscuous mode [ 498.552752][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 498.676101][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.721565][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.039043][T10494] team0: Port device team_slave_0 added [ 500.113643][T10494] team0: Port device team_slave_1 added [ 500.204866][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.253657][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.383297][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.420546][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.469938][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.528592][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.745025][T10494] device hsr_slave_0 entered promiscuous mode [ 501.820501][T10494] device hsr_slave_1 entered promiscuous mode [ 501.845582][T10494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.863478][T10494] Cannot create hsr debugfs directory [ 502.977737][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.984790][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.583129][T10494] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 503.679822][T10494] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 504.132900][T10494] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 504.313374][T10494] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 504.795266][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.858734][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.889031][ T5724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.927849][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.959954][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.974118][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.009631][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.016892][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.174103][T10494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.223375][T10494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.245024][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 505.288383][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.308126][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.325622][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.338281][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.347236][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.127011][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.227980][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.286813][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.513696][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.729694][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.046775][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.435648][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.800244][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 508.147474][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 508.208066][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.726849][T10618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1688'. [ 509.814559][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.823126][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 510.314570][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 512.473338][T10494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.481252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.490470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.013478][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.046121][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.140269][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.158080][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.288607][ T4282] Bluetooth: min 0 < 6 [ 519.355596][T10494] device veth0_vlan entered promiscuous mode [ 519.761261][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.769709][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.841894][T10494] device veth1_vlan entered promiscuous mode [ 519.948535][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.982858][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.048554][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.086425][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.404286][T10494] device veth0_macvtap entered promiscuous mode [ 520.426171][T10494] device veth1_macvtap entered promiscuous mode [ 521.221532][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.342548][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.434079][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.462118][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.472032][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.483327][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.493218][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.604642][ T4279] Bluetooth: hci0: command 0x2021 tx timeout [ 522.914806][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.973093][T10494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.304175][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.324293][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.496771][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.539398][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.607893][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.745368][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.755323][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.824465][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.835242][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.846055][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.857847][T10494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.911224][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.299431][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.478390][T10494] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.489653][T10494] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.498545][T10494] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.508422][T10494] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.174362][T10742] xt_CONNSECMARK: invalid mode: 66 [ 527.188580][T10742] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 528.721518][ T4803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.775180][ T4803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.902870][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 528.920332][T10754] overlayfs: failed to clone upperpath [ 529.038191][ T5796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.514716][T10758] overlayfs: missing 'lowerdir' [ 529.554532][ T5796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.815978][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 532.588256][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'. [ 535.820246][T10801] loop7: detected capacity change from 0 to 256 [ 535.902586][T10801] FAT-fs (loop7): Directory bread(block 64) failed [ 535.963738][T10801] FAT-fs (loop7): Directory bread(block 65) failed [ 535.970497][T10801] FAT-fs (loop7): Directory bread(block 66) failed [ 536.174297][T10801] FAT-fs (loop7): Directory bread(block 67) failed [ 536.194689][T10801] FAT-fs (loop7): Directory bread(block 68) failed [ 537.053394][T10811] netlink: 'syz.8.1730': attribute type 11 has an invalid length. [ 537.062496][T10801] FAT-fs (loop7): Directory bread(block 69) failed [ 537.085785][T10801] FAT-fs (loop7): Directory bread(block 70) failed [ 537.112775][T10801] FAT-fs (loop7): Directory bread(block 71) failed [ 537.130576][T10801] FAT-fs (loop7): Directory bread(block 72) failed [ 537.263273][T10801] FAT-fs (loop7): Directory bread(block 73) failed [ 538.391202][T10815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.424857][T10815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.490898][T10811] device wlan0 entered promiscuous mode [ 539.757818][T10825] process '/newroot/426/file0' started with executable stack [ 542.035763][ T26] audit: type=1326 audit(1781672252.396:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.7.1741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9944b9ce59 code=0x0 [ 542.699837][T10852] loop7: detected capacity change from 0 to 512 [ 542.781362][T10852] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 542.855789][T10852] EXT4-fs (loop7): group descriptors corrupted! [ 544.045563][T10871] tmpfs: Unknown parameter 'usrquota' [ 545.240086][T10878] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 550.619917][T10921] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 550.628932][T10921] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 559.321557][T10959] loop7: detected capacity change from 0 to 2048 [ 559.356986][T10959] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 559.371486][T10959] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 559.388818][T10959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.415569][T10978] device bond_slave_0 entered promiscuous mode [ 562.422651][T10978] device bond_slave_1 entered promiscuous mode [ 562.429053][T10978] device wlan1 entered promiscuous mode [ 562.438546][T10978] device vlan2 entered promiscuous mode [ 562.505472][T10978] device bond0 entered promiscuous mode [ 566.513490][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881427c5000: rx timeout, send abort [ 567.063804][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881427c5000: abort rx timeout. Force session deactivation [ 569.312397][ T4282] Bluetooth: hci5: command 0x0405 tx timeout [ 569.575863][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.582687][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.689661][T11028] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 569.701851][T11028] IPVS: sed: FWM 3 0x00000003 - no destination available [ 572.948858][T11058] input: syz1 as /devices/virtual/input/input17 [ 573.039660][ T26] audit: type=1400 audit(1781672281.544:20): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.1.1798': attribute type 12 has an invalid length. [ 576.024363][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880591df000: rx timeout, send abort [ 576.574551][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880591df000: abort rx timeout. Force session deactivation [ 582.040650][T11155] netlink: 'syz.7.1809': attribute type 4 has an invalid length. [ 582.201289][T11155] netlink: 'syz.7.1809': attribute type 4 has an invalid length. [ 582.340930][T11162] loop8: detected capacity change from 0 to 2048 [ 582.376602][T11162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 582.598444][T11162] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 582.705552][ T26] audit: type=1800 audit(1781672290.457:21): pid=11162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1811" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 583.601158][T11162] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 583.616206][T11162] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 583.628888][T11162] EXT4-fs (loop8): This should not happen!! Data will be lost [ 583.628888][T11162] [ 583.638824][T11162] EXT4-fs (loop8): Total free blocks count 0 [ 583.645445][T11162] EXT4-fs (loop8): Free/Dirty block details [ 583.653684][T11162] EXT4-fs (loop8): free_blocks=2415919504 [ 583.659641][T11162] EXT4-fs (loop8): dirty_blocks=256 [ 583.664991][T11162] EXT4-fs (loop8): Block reservation details [ 583.671336][T11162] EXT4-fs (loop8): i_reserved_data_blocks=16 [ 583.776839][T11162] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 594.144594][T11243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 594.153782][T11243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 600.778241][T11292] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 602.358165][T11303] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 602.367293][T11303] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.039293][T11302] trusted_key: encrypted_key: key user:syś not found [ 605.465606][T11319] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 605.493702][T11319] IPVS: sed: FWM 3 0x00000003 - no destination available [ 605.816556][T11314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.434127][T11380] kernel profiling enabled (shift: 5) [ 617.965566][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1870'. [ 618.114494][T11391] bridge1: port 1(erspan0) entered blocking state [ 618.121150][T11391] bridge1: port 1(erspan0) entered disabled state [ 618.142171][T11391] device erspan0 entered promiscuous mode [ 619.712766][T11391] bridge1: port 1(erspan0) entered blocking state [ 619.719410][T11391] bridge1: port 1(erspan0) entered forwarding state [ 620.163928][ T7] libceph: connect (1)[c::]:6789 error -101 [ 620.170969][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 620.543929][ T7] libceph: connect (1)[c::]:6789 error -101 [ 620.550602][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 621.261565][T11406] ceph: No mds server is up or the cluster is laggy [ 621.270867][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 621.276994][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 621.927967][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 624.676971][T11447] syz.6.1881 (11447) used greatest stack depth: 18096 bytes left [ 627.035743][T11463] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 635.094163][T11509] loop7: detected capacity change from 0 to 512 [ 635.743725][T11509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 635.752201][T11509] System zones: 1-12 [ 635.780584][T11509] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1898: Directory hole found for htree index block 0 [ 635.811846][T11509] EXT4-fs (loop7): Remounting filesystem read-only [ 635.819116][T11509] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 635.828340][T11509] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1898: Directory hole found for htree index block 0 [ 635.843976][T11509] EXT4-fs (loop7): Remounting filesystem read-only [ 635.850696][T11509] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 635.859072][T11509] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 635.904201][T11508] EXT4-fs (loop7): shut down requested (2) [ 636.165414][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.171940][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.193888][ T7504] EXT4-fs (loop7): unmounting filesystem. [ 637.254839][T11515] siw: device registration error -23 [ 637.263622][T11515] smc: removing ib device syz2 [ 637.726864][T11515] ------------[ cut here ]------------ [ 637.732443][T11515] WARNING: CPU: 1 PID: 11515 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x3e/0x50 [ 637.743639][T11515] Modules linked in: [ 637.747573][T11515] CPU: 1 PID: 11515 Comm: syz.3.1900 Not tainted syzkaller #0 [ 637.755204][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 637.765347][T11515] RIP: 0010:rxe_pool_cleanup+0x3e/0x50 [ 637.770903][T11515] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a4 9a 37 fa 48 83 3b 00 75 07 e8 e9 92 e6 f9 5b c3 e8 e2 92 e6 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 41 57 41 [ 637.790690][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.799219][T11515] RSP: 0018:ffffc9000d3f71c8 EFLAGS: 00010246 [ 637.805505][T11515] RAX: ffffffff879be8be RBX: ffff88805ef592a0 RCX: 0000000000080000 [ 637.813527][T11515] RDX: ffffc9000dae9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 637.821558][T11515] RBP: 0000000000000002 R08: ffff88805ef58743 R09: 1ffff1100bdeb0e8 [ 637.829620][T11515] R10: dffffc0000000000 R11: ffffed100bdeb0e9 R12: dffffc0000000000 [ 637.837826][T11515] R13: 0000000000000008 R14: ffffffff879a6d30 R15: dffffc0000000000 [ 637.845881][T11515] FS: 00007f08fa40c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 637.854926][T11515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.861606][T11515] CR2: 00007fd76844f156 CR3: 0000000033a59000 CR4: 00000000003506e0 [ 637.869627][T11515] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 637.877690][T11515] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.885870][T11515] Call Trace: [ 637.889241][T11515] [ 637.892273][T11515] rxe_dealloc+0x2f/0x100 [ 637.896659][T11515] ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230 [ 637.903600][T11515] ib_dealloc_device+0x4a/0x1f0 [ 637.908514][T11515] __ib_unregister_device+0x120/0x170 [ 637.913981][T11515] ib_unregister_device_and_put+0xb4/0xf0 [ 637.919764][T11515] nldev_dellink+0x28f/0x320 [ 637.924489][T11515] ? nldev_newlink+0x610/0x610 [ 637.929293][T11515] ? __lock_acquire+0x13cf/0x7d10 [ 637.934464][T11515] ? apparmor_capable+0x12c/0x190 [ 637.939730][T11515] ? bpf_lsm_capable+0x5/0x10 [ 637.944483][T11515] ? security_capable+0x85/0xb0 [ 637.949475][T11515] ? nldev_newlink+0x610/0x610 [ 637.954280][T11515] rdma_nl_rcv+0x6cd/0x9f0 [ 637.958767][T11515] ? rdma_nl_net_init+0x190/0x190 [ 637.963841][T11515] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.969249][T11515] ? net_generic+0x1e/0x240 [ 637.973792][T11515] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.979058][T11515] netlink_unicast+0x74d/0x8d0 [ 637.983849][T11515] netlink_sendmsg+0x8ad/0xbd0 [ 637.988642][T11515] ? netlink_getsockopt+0x550/0x550 [ 637.993989][T11515] ? aa_sock_msg_perm+0x94/0x150 [ 637.999002][T11515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 638.004392][T11515] ? security_socket_sendmsg+0x7c/0xa0 [ 638.010018][T11515] ? netlink_getsockopt+0x550/0x550 [ 638.015328][T11515] ____sys_sendmsg+0x5be/0x970 [ 638.020190][T11515] ? __sys_sendmsg_sock+0x30/0x30 [ 638.025266][T11515] ? __import_iovec+0x315/0x500 [ 638.030194][T11515] ? import_iovec+0x6f/0xa0 [ 638.034758][T11515] ___sys_sendmsg+0x2a2/0x360 [ 638.039467][T11515] ? try_to_wake_up+0x67c/0x1080 [ 638.044547][T11515] ? __sys_sendmsg+0x290/0x290 [ 638.049455][T11515] __se_sys_sendmsg+0x1bb/0x2a0 [ 638.054468][T11515] ? __x64_sys_sendmsg+0x80/0x80 [ 638.059457][T11515] ? lockdep_hardirqs_on+0x94/0x140 [ 638.064747][T11515] do_syscall_64+0x4c/0xa0 [ 638.069289][T11515] ? clear_bhb_loop+0x60/0xb0 [ 638.074072][T11515] ? clear_bhb_loop+0x60/0xb0 [ 638.078818][T11515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.084767][T11515] RIP: 0033:0x7f08f959ce59 [ 638.089267][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.108979][T11515] RSP: 002b:00007f08fa40c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.117481][T11515] RAX: ffffffffffffffda RBX: 00007f08f9815fa0 RCX: 00007f08f959ce59 [ 638.125896][T11515] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 638.134054][T11515] RBP: 00007f08f9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 638.142181][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.150292][T11515] R13: 00007f08f9816038 R14: 00007f08f9815fa0 R15: 00007ffc0ea90d38 [ 638.158520][T11515] [ 638.161610][T11515] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 638.168941][T11515] CPU: 1 PID: 11515 Comm: syz.3.1900 Not tainted syzkaller #0 [ 638.176463][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.186574][T11515] Call Trace: [ 638.189886][T11515] [ 638.192866][T11515] dump_stack_lvl+0x188/0x24e [ 638.197602][T11515] ? memcpy+0x3c/0x60 [ 638.201805][T11515] ? show_regs_print_info+0x12/0x12 [ 638.207058][T11515] ? load_image+0x400/0x400 [ 638.211663][T11515] panic+0x2e5/0x730 [ 638.215617][T11515] ? bpf_jit_dump+0xd0/0xd0 [ 638.220188][T11515] __warn+0x2f8/0x4f0 [ 638.224228][T11515] ? rxe_pool_cleanup+0x3e/0x50 [ 638.229132][T11515] ? rxe_pool_cleanup+0x3e/0x50 [ 638.234028][T11515] report_bug+0x2ba/0x4f0 [ 638.238470][T11515] ? rxe_pool_cleanup+0x3e/0x50 [ 638.243369][T11515] handle_bug+0x3a/0x70 [ 638.247566][T11515] exc_invalid_op+0x16/0x40 [ 638.252109][T11515] asm_exc_invalid_op+0x16/0x20 [ 638.256999][T11515] RIP: 0010:rxe_pool_cleanup+0x3e/0x50 [ 638.262488][T11515] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a4 9a 37 fa 48 83 3b 00 75 07 e8 e9 92 e6 f9 5b c3 e8 e2 92 e6 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 41 57 41 [ 638.282132][T11515] RSP: 0018:ffffc9000d3f71c8 EFLAGS: 00010246 [ 638.288236][T11515] RAX: ffffffff879be8be RBX: ffff88805ef592a0 RCX: 0000000000080000 [ 638.296268][T11515] RDX: ffffc9000dae9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 638.304283][T11515] RBP: 0000000000000002 R08: ffff88805ef58743 R09: 1ffff1100bdeb0e8 [ 638.312301][T11515] R10: dffffc0000000000 R11: ffffed100bdeb0e9 R12: dffffc0000000000 [ 638.320327][T11515] R13: 0000000000000008 R14: ffffffff879a6d30 R15: dffffc0000000000 [ 638.328345][T11515] ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230 [ 638.335162][T11515] ? rxe_pool_cleanup+0x3e/0x50 [ 638.340056][T11515] ? rxe_pool_cleanup+0x3e/0x50 [ 638.344934][T11515] rxe_dealloc+0x2f/0x100 [ 638.349288][T11515] ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230 [ 638.356080][T11515] ib_dealloc_device+0x4a/0x1f0 [ 638.360963][T11515] __ib_unregister_device+0x120/0x170 [ 638.366362][T11515] ib_unregister_device_and_put+0xb4/0xf0 [ 638.372104][T11515] nldev_dellink+0x28f/0x320 [ 638.376821][T11515] ? nldev_newlink+0x610/0x610 [ 638.382053][T11515] ? __lock_acquire+0x13cf/0x7d10 [ 638.387171][T11515] ? apparmor_capable+0x12c/0x190 [ 638.392238][T11515] ? bpf_lsm_capable+0x5/0x10 [ 638.396943][T11515] ? security_capable+0x85/0xb0 [ 638.401823][T11515] ? nldev_newlink+0x610/0x610 [ 638.406622][T11515] rdma_nl_rcv+0x6cd/0x9f0 [ 638.411086][T11515] ? rdma_nl_net_init+0x190/0x190 [ 638.416163][T11515] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.421401][T11515] ? net_generic+0x1e/0x240 [ 638.425936][T11515] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.431167][T11515] netlink_unicast+0x74d/0x8d0 [ 638.435986][T11515] netlink_sendmsg+0x8ad/0xbd0 [ 638.440787][T11515] ? netlink_getsockopt+0x550/0x550 [ 638.446015][T11515] ? aa_sock_msg_perm+0x94/0x150 [ 638.450983][T11515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 638.456292][T11515] ? security_socket_sendmsg+0x7c/0xa0 [ 638.461842][T11515] ? netlink_getsockopt+0x550/0x550 [ 638.467076][T11515] ____sys_sendmsg+0x5be/0x970 [ 638.471876][T11515] ? __sys_sendmsg_sock+0x30/0x30 [ 638.476930][T11515] ? __import_iovec+0x315/0x500 [ 638.481818][T11515] ? import_iovec+0x6f/0xa0 [ 638.486348][T11515] ___sys_sendmsg+0x2a2/0x360 [ 638.491057][T11515] ? try_to_wake_up+0x67c/0x1080 [ 638.496028][T11515] ? __sys_sendmsg+0x290/0x290 [ 638.500863][T11515] __se_sys_sendmsg+0x1bb/0x2a0 [ 638.505743][T11515] ? __x64_sys_sendmsg+0x80/0x80 [ 638.510743][T11515] ? lockdep_hardirqs_on+0x94/0x140 [ 638.515977][T11515] do_syscall_64+0x4c/0xa0 [ 638.520416][T11515] ? clear_bhb_loop+0x60/0xb0 [ 638.525135][T11515] ? clear_bhb_loop+0x60/0xb0 [ 638.529883][T11515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.535817][T11515] RIP: 0033:0x7f08f959ce59 [ 638.540268][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.559901][T11515] RSP: 002b:00007f08fa40c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.568354][T11515] RAX: ffffffffffffffda RBX: 00007f08f9815fa0 RCX: 00007f08f959ce59 [ 638.576616][T11515] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 638.584619][T11515] RBP: 00007f08f9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 638.592612][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.600608][T11515] R13: 00007f08f9816038 R14: 00007f08f9815fa0 R15: 00007ffc0ea90d38 [ 638.608617][T11515] [ 638.612227][T11515] Kernel Offset: disabled [ 638.616682][T11515] Rebooting in 86400 seconds..