last executing test programs: 53m15.159283401s ago: executing program 2 (id=448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) 53m1.259466291s ago: executing program 2 (id=462): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x6, 0x4, 0xe, 0x2, 0x7bf}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311a400000000410c00000002000000850000000800000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x45, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) recvfrom$unix(r3, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r6) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) 52m56.829876587s ago: executing program 2 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000000ec0)=""/4096, 0x1000) clock_gettime(0x3, &(0x7f0000000340)) 52m55.705407409s ago: executing program 2 (id=466): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x800, 0x4, 0x7, 0x6, 0xf97}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) fcntl$getownex(r4, 0x10, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x3, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 52m53.695235198s ago: executing program 2 (id=468): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000100)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 52m50.886492462s ago: executing program 2 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) dup2(r3, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) 52m34.730953526s ago: executing program 32 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) dup2(r3, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) 51m43.353344426s ago: executing program 0 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r3, r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 51m38.525877479s ago: executing program 0 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000000ec0)=""/4096, 0x1000) clock_gettime(0x3, &(0x7f0000000340)) 51m34.38944561s ago: executing program 0 (id=531): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x60581, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], 0x0, 0x5}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x5, 0x12, 0x53, 0x8, 0x979, 0x270, 0xddeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x39, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0xe5, 0x4, 0x0, 0x6a, 0xbd, 0xfa, 0x5}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 51m30.028017104s ago: executing program 0 (id=535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="04000500"], 0x50}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04020f01"], 0x12) 51m25.698333219s ago: executing program 0 (id=539): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34"], 0x80}}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@wr_crn={0x46, 0x20, {0x0, 0x3}}, @cpuid={0x14, 0x18, {0xfffffffe, 0x354}}, @rdmsr={0x32, 0x18, {0x3c4}}, @rdmsr={0x32, 0x18, {0x9c7}}], 0x68}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000140)={[0x3, 0x6, 0x1, 0x2, 0x9, 0x8, 0x4, 0x7fffffff, 0x7f, 0x3, 0x8, 0x0, 0x0, 0x2, 0x4, 0x7], 0x2000, 0x32000}) 51m22.03046081s ago: executing program 0 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) dup2(r3, r3) 51m6.6209353s ago: executing program 33 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) dup2(r3, r3) 48m56.810627933s ago: executing program 4 (id=670): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) 48m48.880539027s ago: executing program 4 (id=681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 48m46.035937082s ago: executing program 4 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000000ec0)=""/4096, 0x1000) clock_gettime(0x3, &(0x7f0000000340)) 48m45.005379633s ago: executing program 4 (id=686): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x480, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, 0x0) sendmsg$unix(r1, 0x0, 0x4000841) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 48m42.668993708s ago: executing program 4 (id=689): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) 48m41.198839267s ago: executing program 4 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) dup2(r3, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 48m24.740446387s ago: executing program 34 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) dup2(r3, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 44m59.062699756s ago: executing program 1 (id=989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 44m55.968567746s ago: executing program 1 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x2040400) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)={[{@subsystem='memory'}, {@subsystem='cpuacct'}]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {}, {0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x5}], 0x20}) 44m54.287978578s ago: executing program 1 (id=999): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000400), &(0x7f0000000580)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) 44m50.60847627s ago: executing program 1 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4080018) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xe4, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x6, 0xd, 0x9, 0x6, r0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r7, 0x1c, 0x2002) sendfile(r5, r6, 0x0, 0x20000023896) 44m45.917048851s ago: executing program 1 (id=1009): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 44m45.48041144s ago: executing program 1 (id=1011): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 44m30.056683049s ago: executing program 35 (id=1011): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 38m53.335220049s ago: executing program 7 (id=1660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f0000000280)={0x20080522, r0}, &(0x7f0000000300)={0x80, 0x4, 0x4, 0x3, 0x6, 0x2}) 38m51.162202592s ago: executing program 7 (id=1664): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x15, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x0, 0x28a, &(0x7f0000000680)="$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") 38m50.921281926s ago: executing program 7 (id=1666): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) read$msr(r1, &(0x7f0000000100)=""/19, 0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c0000000000119078ac1414aae000000100004e200008907839c171b453b681bc9ead78d509d46586a871c8353655e944f1"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x0, 0x1, 0xeb, 0x7ff}, {0x7, 0x8, 0x7, 0x4}, {0x7ff, 0x7, 0xc, 0x8}, {0x401, 0xe, 0x58, 0x9}, {0x9, 0x3, 0x4, 0x9}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000000) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 38m50.130076422s ago: executing program 7 (id=1668): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffefff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 38m46.513386923s ago: executing program 7 (id=1676): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x80}}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@wr_crn={0x46, 0x20, {0x0, 0x3}}, @cpuid={0x14, 0x18, {0xfffffffe, 0x354}}, @rdmsr={0x32, 0x18, {0x3c4}}, @rdmsr={0x32, 0x18, {0x9c7}}], 0x68}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000140)={[0x3, 0x6, 0x1, 0x2, 0x9, 0x8, 0x4, 0x7fffffff, 0x7f, 0x3, 0x8, 0x0, 0x0, 0x2, 0x4, 0x7], 0x2000, 0x32000}) 38m45.153699429s ago: executing program 7 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 38m30.053754976s ago: executing program 36 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 31m19.1178442s ago: executing program 8 (id=2516): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b8a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 31m17.774565246s ago: executing program 8 (id=2519): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x204640) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e657720656372797074667320757365723a73797a203009003030303030303030303030303030303031008f7e2137aa43e4b1e2e85aa66c3d5208385cead3de71b06d9eec96fa4307d7830cd0a9fbb6fc3b07999b637dc280b51ecde0e03955c3e763600de7759ad09098b874336ce50037fe91454be1479218d7773a172775e4a9aeeb11ed4b87"], 0x2b, 0xfffffffffffffffb) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd9"], 0x14}], 0x1}, 0x0) 31m16.413818323s ago: executing program 8 (id=2522): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$UI_DEV_CREATE(r0, 0x5501) 31m13.050048819s ago: executing program 8 (id=2526): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 31m6.185296243s ago: executing program 8 (id=2534): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 31m2.976851297s ago: executing program 8 (id=2536): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 30m47.773559625s ago: executing program 37 (id=2536): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 36.881868341s ago: executing program 3 (id=5909): write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x52) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0xc0046209, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 35.312895372s ago: executing program 3 (id=5911): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r4, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/4060, 0xfdc) 28.452512888s ago: executing program 3 (id=5918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) r5 = eventfd(0x100000ae) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/204, 0xcc}], 0x6) 26.83143109s ago: executing program 3 (id=5920): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x52) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0xc0046209, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21.080025103s ago: executing program 5 (id=5926): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x52) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0xc0046209, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 18.562568213s ago: executing program 6 (id=5927): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0xb3ab549, 0xc0840) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x3]) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, 0x0}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.942804915s ago: executing program 6 (id=5928): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0xc0046209, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 16.502918614s ago: executing program 6 (id=5929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 14.738949388s ago: executing program 5 (id=5930): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 13.169654229s ago: executing program 3 (id=5931): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0xc0046209, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 11.780409507s ago: executing program 9 (id=5932): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 10.565452361s ago: executing program 5 (id=5933): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff25bd7000fbd9df2500000000", @ANYBLOB="1720000021200000280012800c000100"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macvlan1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008094}, 0x4008000) 9.701701568s ago: executing program 6 (id=5934): write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x52) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0xc0046209, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 9.161183629s ago: executing program 5 (id=5935): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0xc0046209, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 8.937399073s ago: executing program 9 (id=5936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x15, 0x0, &(0x7f0000000200)="c422dd1b44c88937896bfda211327cc6ca26aa1949", 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.337565695s ago: executing program 9 (id=5937): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$sierra_net(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x21, @string={0x21, 0x3, "4b892f3bd21a5442309cec9d6dc391b4f771b97af610c870cb5f8f7d18dfd2"}}}, 0x0) 6.156137958s ago: executing program 5 (id=5938): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.959313882s ago: executing program 6 (id=5939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) r5 = eventfd(0x100000ae) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/204, 0xcc}], 0x6) 4.352856854s ago: executing program 6 (id=5940): write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000140)=@random={'user.', '^\x00'}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0xc0046209, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.888350043s ago: executing program 3 (id=5941): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.749333196s ago: executing program 9 (id=5942): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 1.686940166s ago: executing program 9 (id=5943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff25bd7000fbd9df2500000000", @ANYBLOB="1720000021200000280012800c000100"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macvlan1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008094}, 0x4008000) 1.401827772s ago: executing program 9 (id=5944): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000140)=@random={'user.', '^\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x60002) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(&(0x7f00000011c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x18) getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0xc0046209, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 0s ago: executing program 5 (id=5945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) r5 = eventfd(0x100000ae) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/204, 0xcc}], 0x6) kernel console output (not intermixed with test programs): 24.0.0.2:0 - no destination available [ 2992.814127][T14768] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1500 seconds [ 2993.056216][T12700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2993.446056][T15017] loop3: detected capacity change from 0 to 512 [ 2993.597182][T15017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2993.639823][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2993.719887][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2993.838982][T15017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2993.853462][T15017] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2993.983434][ T28] audit: type=1800 audit(1758639244.725:165): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5170" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 2994.679846][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2994.752751][T12700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2994.769828][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2995.719832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2995.800015][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2996.759825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2996.839827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2997.030775][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5173'. [ 2997.039876][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5173'. [ 2997.799843][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2997.879838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2998.839834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2998.919822][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2999.180435][T15061] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2999.879831][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2999.959857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3000.299211][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5180'. [ 3000.309864][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5180'. [ 3000.919838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3001.009824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3001.639046][T15076] wg1 speed is unknown, defaulting to 1000 [ 3001.959844][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3002.039839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3002.999837][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3003.079855][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3004.039818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3004.119871][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3004.819666][T15113] wg1 speed is unknown, defaulting to 1000 [ 3005.079887][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3005.159851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3006.119845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3006.199935][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3007.063002][T15127] wg1 speed is unknown, defaulting to 1000 [ 3007.159848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3007.239847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3007.966567][T15135] wg1 speed is unknown, defaulting to 1000 [ 3008.199829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3008.279859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3009.240178][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3009.319869][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3009.370373][T15146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5196'. [ 3009.526638][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5196'. [ 3010.280079][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3010.359830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3011.121558][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5200'. [ 3011.130917][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5200'. [ 3011.319979][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3011.399964][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3012.359919][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3012.440047][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3013.388612][T15185] loop3: detected capacity change from 0 to 512 [ 3013.399883][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3013.480037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3014.439836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3014.479074][T15185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3014.519829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3014.560592][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1230 seconds [ 3014.572035][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1230 seconds [ 3014.588344][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1230 seconds [ 3015.273026][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1230 seconds [ 3015.479935][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3015.489183][T15185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3015.559845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3015.590844][T15185] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3015.871678][ T28] audit: type=1800 audit(1758639266.605:166): pid=15181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5208" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 3016.483276][T12700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3016.519955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3016.599915][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3017.064734][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1230 seconds [ 3017.096002][T15200] wg1 speed is unknown, defaulting to 1000 [ 3017.560002][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3017.639822][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3017.780811][T15215] wg1 speed is unknown, defaulting to 1000 [ 3018.497849][T15221] loop3: detected capacity change from 0 to 512 [ 3018.599968][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3018.679816][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3019.639943][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3019.719819][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3020.134352][T15221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3020.196314][T15221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3020.223450][T15221] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3020.679902][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3020.760314][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3020.838270][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.848864][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.984443][ T28] audit: type=1800 audit(1758639271.725:167): pid=15220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5214" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 3021.204168][T12700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3021.719845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3021.780156][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5217'. [ 3021.789366][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5217'. [ 3021.799827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3022.474203][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5222'. [ 3022.483496][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5222'. [ 3022.759848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3022.839822][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3023.362181][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1530 seconds [ 3023.799839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3023.879850][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3024.724365][T15261] wg1 speed is unknown, defaulting to 1000 [ 3024.849842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3024.919836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3025.739495][T15273] loop9: detected capacity change from 0 to 512 [ 3025.880122][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3025.959825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3026.919833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3026.999833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3027.531613][T15273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3027.959834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3028.039829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3028.230164][T15273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3028.252687][T15273] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3028.285148][T11644] Bluetooth: hci2: command 0x0406 tx timeout [ 3028.430556][T15289] loop6: detected capacity change from 0 to 512 [ 3028.798865][T15289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3028.999840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3029.079878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3030.039856][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3030.107495][T15283] wg1 speed is unknown, defaulting to 1000 [ 3030.129880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3030.163038][T15286] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 3030.235806][T15289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3030.309969][T15289] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3030.520589][T14336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3030.520619][ T28] audit: type=1800 audit(1758639281.255:168): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5229" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 3030.665659][ T6356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3031.079879][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3031.159889][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3031.989563][T15309] wg1 speed is unknown, defaulting to 1000 [ 3032.119851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3032.200026][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3032.755938][T15316] wg1 speed is unknown, defaulting to 1000 [ 3033.168346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3033.240052][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3034.031778][T15323] wg1 speed is unknown, defaulting to 1000 [ 3034.209833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3034.289973][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3035.239824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3035.319946][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3035.536314][T15334] wg1 speed is unknown, defaulting to 1000 [ 3036.279858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3036.359956][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3036.590695][T15348] loop3: detected capacity change from 0 to 512 [ 3036.606830][T15348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3036.942011][T15348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3036.955218][T15348] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3037.268509][ T28] audit: type=1800 audit(1758639288.005:169): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5244" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 3037.329830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3037.400064][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3038.252841][T12700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3038.359841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3038.439910][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3039.100167][T15373] loop5: detected capacity change from 0 to 512 [ 3039.399824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3039.489908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3040.439844][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3040.519839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3041.005233][T15373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3041.181616][T15373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3041.194497][T15373] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3041.479829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3041.559883][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3041.786691][ T28] audit: type=1800 audit(1758639292.525:170): pid=15370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5249" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 3041.930154][ T5905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3042.519823][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3042.599818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3042.696827][T15387] wg1 speed is unknown, defaulting to 1000 [ 3042.810104][ T5842] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 3042.991649][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 3043.004501][ T5842] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 3043.022185][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.068003][ T5842] usb 4-1: config 0 descriptor?? [ 3043.559818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3043.604951][ T5842] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 3043.639821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3043.679014][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3043.777620][ T5842] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 3043.796473][ T5842] usb 4-1: media controller created [ 3043.805070][T15386] dib0700: tx buffer length is larger than 4. Not supported. [ 3043.946976][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3044.504066][ T5842] DVB: Unable to find symbol dib7000p_attach() [ 3044.599840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3044.679826][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3044.729973][ T5842] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 3045.140700][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1260 seconds [ 3045.153499][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1260 seconds [ 3045.280689][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1260 seconds [ 3045.292300][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1260 seconds [ 3045.649821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3045.729888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3045.808266][T15397] wg1 speed is unknown, defaulting to 1000 [ 3045.840690][ T5842] rc_core: IR keymap rc-dib0700-rc5 not found [ 3045.847267][ T5842] Registered IR keymap rc-empty [ 3046.310190][ T5842] dvb-usb: could not initialize remote control. [ 3046.316460][ T5842] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 3046.415386][ T5842] usb 4-1: USB disconnect, device number 18 [ 3046.689823][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3046.770054][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3046.865035][ T5842] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 3047.640287][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1260 seconds [ 3047.719822][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3047.799842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3048.769829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3048.849833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3049.169829][T12869] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 3049.205018][T15428] wg1 speed is unknown, defaulting to 1000 [ 3049.380137][T12869] usb 7-1: Using ep0 maxpacket: 32 [ 3049.428930][T12869] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 3049.491816][T12869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3049.641000][T12869] usb 7-1: config 0 descriptor?? [ 3049.799833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3049.889816][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3050.269558][T12869] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 3050.377656][T12869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3050.424537][T12869] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 3050.433410][T12869] usb 7-1: media controller created [ 3050.453207][T12869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3050.489166][T15432] dib0700: tx buffer length is larger than 4. Not supported. [ 3050.668056][T12869] DVB: Unable to find symbol dib7000p_attach() [ 3050.685259][T12869] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 3050.798497][T12869] rc_core: IR keymap rc-dib0700-rc5 not found [ 3050.804730][T12869] Registered IR keymap rc-empty [ 3050.810341][T12869] dvb-usb: could not initialize remote control. [ 3050.827556][T12869] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 3050.849830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3050.871930][T12869] usb 7-1: USB disconnect, device number 13 [ 3050.929825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3051.126732][T12869] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 3051.609341][T15446] wg1 speed is unknown, defaulting to 1000 [ 3051.879828][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3051.959834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3052.919859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3052.999819][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3053.428981][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1560 seconds [ 3053.959818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3054.039833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3054.989922][T15486] loop5: detected capacity change from 0 to 512 [ 3054.999846][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3055.079867][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3056.039819][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3056.119838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3056.731546][T15486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3056.832269][T15486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3056.846017][T15486] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3056.880425][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5277'. [ 3056.889505][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5277'. [ 3057.067159][T15484] wg1 speed is unknown, defaulting to 1000 [ 3057.079875][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3057.159814][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3057.417021][ T28] audit: type=1800 audit(1758639308.155:171): pid=15483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5279" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 3057.778748][ T5905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3058.129825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3058.199844][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3058.205388][T15501] wg1 speed is unknown, defaulting to 1000 [ 3059.159861][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3059.249825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3059.497965][T15510] wg1 speed is unknown, defaulting to 1000 [ 3060.199831][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3060.279830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3061.239864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3061.329832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3061.891125][T15526] wg1 speed is unknown, defaulting to 1000 [ 3062.172173][T15521] wg1 speed is unknown, defaulting to 1000 [ 3062.279971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3062.359849][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3063.341464][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3063.409833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3063.839795][T15538] wg1 speed is unknown, defaulting to 1000 [ 3064.369830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3064.439845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3065.409835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3065.479815][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3066.439835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3066.519839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3066.752530][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5290'. [ 3066.762516][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5290'. [ 3067.080073][T15553] wg1 speed is unknown, defaulting to 1000 [ 3067.479879][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3067.559824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3068.149941][T15567] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5293'. [ 3068.213063][T15573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5293'. [ 3068.519851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3068.599815][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3068.809965][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5294'. [ 3068.830408][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5294'. [ 3069.559838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3069.649822][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3070.599848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3070.689880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3071.639855][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3071.719863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3071.972722][T15617] overlayfs: missing 'lowerdir' [ 3072.679824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3072.723586][T15619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5308'. [ 3072.759897][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3072.779022][T15619] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5308'. [ 3073.729845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3073.800111][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3074.759840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3074.823745][T15637] wg1 speed is unknown, defaulting to 1000 [ 3074.839818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3075.160239][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1290 seconds [ 3075.171114][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1290 seconds [ 3075.425251][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1290 seconds [ 3075.437912][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1290 seconds [ 3075.787742][T15643] wg1 speed is unknown, defaulting to 1000 [ 3075.799838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3075.879821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3076.839817][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3076.919821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3077.879834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3077.959833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3078.220081][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1290 seconds [ 3078.919828][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3078.999812][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3079.959845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3080.039814][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3080.675894][T15681] wg1 speed is unknown, defaulting to 1000 [ 3080.999835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3081.079878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3081.688359][T15689] wg1 speed is unknown, defaulting to 1000 [ 3082.039889][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3082.129823][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3082.203940][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.214572][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.505797][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5324'. [ 3083.079881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3083.159840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3083.820223][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1590 seconds [ 3084.119899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3084.209858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3084.709964][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5326'. [ 3084.718975][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5326'. [ 3085.159816][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3085.239818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3086.199828][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3086.279829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3087.031759][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5328'. [ 3087.239820][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3087.321595][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3087.427460][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5328'. [ 3088.036861][T15732] wg1 speed is unknown, defaulting to 1000 [ 3088.289856][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3088.359828][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3088.377892][T15734] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5335'. [ 3088.480440][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5335'. [ 3089.320021][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3089.409842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3089.952978][T15753] loop6: detected capacity change from 0 to 512 [ 3090.359849][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3090.439835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3091.399875][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3091.479835][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3091.617755][T15753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3091.753992][T15753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3091.780136][T15753] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3092.193481][ T28] audit: type=1800 audit(1758639342.935:172): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5339" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 3092.269199][ T6356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3092.370243][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5340'. [ 3092.440279][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3092.519805][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3092.536835][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5340'. [ 3093.489811][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3093.559812][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3094.519827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3094.609874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3095.074278][T15768] wg1 speed is unknown, defaulting to 1000 [ 3095.559814][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3095.639880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3095.883631][T15782] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3096.599848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3096.679850][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3097.639852][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3097.719920][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3098.689827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3098.765366][T15802] wg1 speed is unknown, defaulting to 1000 [ 3098.769841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3099.719827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3099.799836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3099.865924][T15803] wg1 speed is unknown, defaulting to 1000 [ 3100.262391][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'. [ 3100.646277][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5362'. [ 3100.718805][T15819] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5362'. [ 3100.759866][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3100.849813][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3101.799816][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3101.879851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3102.168045][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5356'. [ 3102.839947][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3102.919821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3103.879999][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3103.960121][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3104.919906][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3104.999831][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3105.003141][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5363'. [ 3105.461576][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1320 seconds [ 3105.473232][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1320 seconds [ 3105.500600][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1320 seconds [ 3105.511760][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1320 seconds [ 3105.895733][T15863] wg1 speed is unknown, defaulting to 1000 [ 3105.959889][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3106.039865][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3107.009925][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3107.079930][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3107.332324][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5369'. [ 3107.349650][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5369'. [ 3108.049903][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3108.119870][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3108.440036][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1320 seconds [ 3108.770067][ T1194] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 3109.079922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3109.159874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3109.280825][ T1194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3109.296079][ T1194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3109.307768][ T1194] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3109.339822][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.352886][ T1194] usb 4-1: config 0 descriptor?? [ 3109.419935][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5376'. [ 3109.438088][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5376'. [ 3109.630562][T10956] usb 4-1: USB disconnect, device number 19 [ 3110.129881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3110.209903][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3110.543033][ T1194] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 3110.858197][T15907] wg1 speed is unknown, defaulting to 1000 [ 3110.879994][ T1194] usb 4-1: Using ep0 maxpacket: 32 [ 3110.894389][ T1194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3111.169886][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3111.239914][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3111.271708][ T1194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3111.297548][ T1194] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3111.308781][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3111.425127][ T1194] usb 4-1: config 0 descriptor?? [ 3111.492701][T10956] usb 4-1: USB disconnect, device number 20 [ 3112.199923][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3112.279915][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3113.239946][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3113.319897][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3113.341240][T15918] wg1 speed is unknown, defaulting to 1000 [ 3114.206057][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1620 seconds [ 3114.279896][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3114.359932][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3115.319984][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3115.399873][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3116.359921][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3116.439890][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3117.399968][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3117.479894][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3118.439884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3118.519888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3119.489891][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3119.569922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3119.968301][T21975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3119.992664][T21975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3120.004134][T21975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3120.015969][T21975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3120.024852][T21975] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3120.033304][T21975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3120.519896][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3120.599945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3120.902284][T15974] wg1 speed is unknown, defaulting to 1000 [ 3121.559961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3121.639878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3122.179595][T15974] chnl_net:caif_netlink_parms(): no params data found [ 3122.290618][T15995] wg1 speed is unknown, defaulting to 1000 [ 3122.360042][T21975] Bluetooth: hci4: command tx timeout [ 3122.599945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3122.679891][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3122.936445][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 3122.944582][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 3122.953947][T15974] bridge_slave_0: entered allmulticast mode [ 3122.965520][T15974] bridge_slave_0: entered promiscuous mode [ 3123.023027][ T8187] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3123.096655][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 3123.107557][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 3123.128567][T15974] bridge_slave_1: entered allmulticast mode [ 3123.160569][T15974] bridge_slave_1: entered promiscuous mode [ 3123.225708][ T8187] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3123.372018][ T8187] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3123.458202][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3123.496710][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3123.531314][ T8187] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3123.639949][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3123.719860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3123.818083][T15974] team0: Port device team_slave_0 added [ 3123.832443][T15974] team0: Port device team_slave_1 added [ 3124.067733][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3124.079185][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3124.115768][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3124.207101][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3124.221002][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3124.267534][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3124.455806][T15974] hsr_slave_0: entered promiscuous mode [ 3124.475424][T15974] hsr_slave_1: entered promiscuous mode [ 3124.679953][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3124.759875][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3124.888858][T21975] Bluetooth: hci4: command tx timeout [ 3124.898862][T15974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3124.969933][T15974] Cannot create hsr debugfs directory [ 3125.043201][ T8187] tipc: Disabling bearer [ 3125.064042][ T8187] tipc: Left network mode [ 3125.243429][T16026] wg1 speed is unknown, defaulting to 1000 [ 3125.799874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3126.660118][T16050] wg1 speed is unknown, defaulting to 1000 [ 3126.839892][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3127.104614][T21975] Bluetooth: hci4: command tx timeout [ 3127.879899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3128.919919][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3129.378716][T21975] Bluetooth: hci4: command tx timeout [ 3129.772636][ T8187] hsr_slave_0: left promiscuous mode [ 3129.810064][ T8187] hsr_slave_1: left promiscuous mode [ 3129.837328][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3129.851092][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3129.867550][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3129.877723][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3129.892868][ T8187] bridge_slave_1: left allmulticast mode [ 3129.898835][ T8187] bridge_slave_1: left promiscuous mode [ 3129.905965][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 3129.934223][ T8187] bridge_slave_0: left allmulticast mode [ 3129.947950][ T8187] bridge_slave_0: left promiscuous mode [ 3129.955302][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 3129.962735][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3130.115227][ T8187] veth1_macvtap: left promiscuous mode [ 3130.135775][ T8187] veth0_macvtap: left promiscuous mode [ 3130.147646][ T8187] veth1_vlan: left promiscuous mode [ 3130.154357][ T8187] veth0_vlan: left promiscuous mode [ 3130.999877][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3132.039881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3132.432205][ T8187] team0 (unregistering): Port device team_slave_1 removed [ 3132.516732][ T8187] team0 (unregistering): Port device team_slave_0 removed [ 3132.610805][ T8187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3132.711867][ T8187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3133.089945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3133.819997][ T8187] bond0 (unregistering): Released all slaves [ 3134.007692][T15974] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3134.106418][T15974] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3134.119910][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3134.174025][T15974] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3134.221814][T15974] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3134.796251][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3134.937841][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 3134.980709][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 3134.987906][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3135.094324][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 3135.101545][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3135.159933][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3135.186734][ T8187] IPVS: stop unused estimator thread 0... [ 3135.969943][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1350 seconds [ 3135.984938][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1350 seconds [ 3135.996380][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1350 seconds [ 3136.007761][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1350 seconds [ 3136.199922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3136.523202][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3137.240227][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3138.184184][T16140] wg1 speed is unknown, defaulting to 1000 [ 3138.289878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3138.529296][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1350 seconds [ 3138.861615][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5425'. [ 3138.874505][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5425'. [ 3138.994880][T15974] veth0_vlan: entered promiscuous mode [ 3139.015995][T15974] veth1_vlan: entered promiscuous mode [ 3139.099304][T15974] veth0_macvtap: entered promiscuous mode [ 3139.125842][T15974] veth1_macvtap: entered promiscuous mode [ 3139.188567][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3139.221843][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.237743][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3139.254345][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.268768][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3139.289369][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.304065][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3139.315521][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.329884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3139.329935][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3139.356166][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.369598][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3139.384196][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.443773][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3139.470664][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.499928][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.524388][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.543189][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.556877][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.578348][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.588832][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.615161][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.629786][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.643583][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.658108][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.699079][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.713083][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3139.736144][T15974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.759450][T15974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.792731][T15974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.835578][T15974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3140.158519][ T1781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3140.179851][ T1781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3140.369882][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3141.353317][T12743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3141.364556][T12743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3141.409881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3142.439877][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3143.479890][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3143.941123][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.948969][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.519891][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3144.726835][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1650 seconds [ 3144.988961][T16193] wg1 speed is unknown, defaulting to 1000 [ 3145.085306][T16189] wg1 speed is unknown, defaulting to 1000 [ 3145.560610][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3146.610097][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3146.760259][T12730] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 3146.951589][T12730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3146.976891][T12730] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3147.101194][T12730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3147.129673][T12730] usb 10-1: config 0 descriptor?? [ 3147.640078][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3148.081454][T12730] usbhid 10-1:0.0: can't add hid device: -71 [ 3148.087657][T12730] usbhid: probe of 10-1:0.0 failed with error -71 [ 3148.095866][T12730] usb 10-1: USB disconnect, device number 10 [ 3148.689870][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3149.160206][T10956] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 3149.729878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3150.040559][T10956] usb 10-1: Using ep0 maxpacket: 32 [ 3150.267579][T10956] usb 10-1: device descriptor read/all, error -71 [ 3150.759912][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3151.800035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3151.828329][T11644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3151.849905][T11644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3151.870412][T11644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3151.888886][T11644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3151.910928][T11644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3151.918272][T11644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3151.987927][T16249] wg1 speed is unknown, defaulting to 1000 [ 3152.178864][T16249] chnl_net:caif_netlink_parms(): no params data found [ 3152.312502][T16249] bridge0: port 1(bridge_slave_0) entered blocking state [ 3152.325449][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 3152.333730][T16249] bridge_slave_0: entered allmulticast mode [ 3152.340837][T16249] bridge_slave_0: entered promiscuous mode [ 3152.362102][T16249] bridge0: port 2(bridge_slave_1) entered blocking state [ 3152.389180][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 3152.402207][T16249] bridge_slave_1: entered allmulticast mode [ 3152.417655][T16249] bridge_slave_1: entered promiscuous mode [ 3152.474373][T16249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3152.495191][T16249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3152.555964][T16249] team0: Port device team_slave_0 added [ 3152.685298][ T6911] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.767930][T16249] team0: Port device team_slave_1 added [ 3152.839924][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3153.038712][T16249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3153.078183][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3153.276411][T16249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3153.468697][ T6911] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.880668][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3154.379950][T11644] Bluetooth: hci0: command tx timeout [ 3154.501792][T16249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3154.508774][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3154.919923][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3154.979859][T16249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3155.354528][ T6911] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.395533][T16263] wg1 speed is unknown, defaulting to 1000 [ 3155.696167][ T6911] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.797725][T16249] hsr_slave_0: entered promiscuous mode [ 3155.830229][T16249] hsr_slave_1: entered promiscuous mode [ 3155.959939][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 3156.517529][T11644] Bluetooth: hci0: command tx timeout [ 3156.721170][T16283] wg1 speed is unknown, defaulting to 1000 [ 3156.834684][ T6911] tipc: Disabling bearer [ 3156.840413][ T6911] tipc: Left network mode [ 3157.950141][T10956] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 3158.142759][T10956] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3158.154667][T10956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3158.166220][T10956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3158.177088][T10956] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3158.191850][T10956] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3158.205415][T10956] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3158.215783][T10956] usb 10-1: Manufacturer: syz [ 3158.267454][T10956] usb 10-1: config 0 descriptor?? [ 3158.320396][ T1332] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3158.519666][ T1332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3158.546804][ T6911] hsr_slave_0: left promiscuous mode [ 3158.565329][ T1332] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3158.575295][ T6911] hsr_slave_1: left promiscuous mode [ 3158.582321][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3158.598344][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3158.605965][T11644] Bluetooth: hci0: command tx timeout [ 3158.618234][ T1332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3158.628841][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3158.647050][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3158.656204][ T6911] bridge_slave_1: left allmulticast mode [ 3158.661821][ T1332] usb 6-1: config 0 descriptor?? [ 3158.682044][ T6911] bridge_slave_1: left promiscuous mode [ 3158.696080][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 3158.715871][ T6911] bridge_slave_0: left allmulticast mode [ 3158.731588][T10956] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 3158.734323][ T6911] bridge_slave_0: left promiscuous mode [ 3158.756912][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 3158.800176][T10956] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 3158.877282][T10956] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 3158.913420][ T1332] usbhid 6-1:0.0: can't add hid device: -71 [ 3158.922038][ T6911] veth1_macvtap: left promiscuous mode [ 3158.927741][ T6911] veth0_macvtap: left promiscuous mode [ 3158.935234][ T1332] usbhid: probe of 6-1:0.0 failed with error -71 [ 3158.963153][ T6911] veth1_vlan: left promiscuous mode [ 3158.968697][ T6911] veth0_vlan: left promiscuous mode [ 3158.981407][ T1332] usb 6-1: USB disconnect, device number 16 [ 3159.840509][T15464] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3160.036421][T15464] usb 6-1: Using ep0 maxpacket: 32 [ 3160.064946][T15464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3160.088365][T15464] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3160.118092][T15464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.136057][T15464] usb 6-1: config 0 descriptor?? [ 3160.163717][T15464] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3160.211462][T15464] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 3160.703270][T11644] Bluetooth: hci0: command tx timeout [ 3160.720031][ T1726] usb 6-1: USB disconnect, device number 17 [ 3160.747734][ T1726] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 3160.934450][ T6911] team0 (unregistering): Port device team_slave_1 removed [ 3161.065014][ T1332] usb 10-1: USB disconnect, device number 13 [ 3161.523997][ T6911] team0 (unregistering): Port device team_slave_0 removed [ 3161.753776][ T6911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3161.894640][ T6911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3162.552666][T16340] loop5: detected capacity change from 0 to 512 [ 3162.571032][T16340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3162.794157][T16340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3162.807267][T16340] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3162.863672][ T28] audit: type=1800 audit(1758639413.605:173): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5459" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 3163.282285][T15974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3165.335280][ T6911] bond0 (unregistering): Released all slaves [ 3165.466952][T16309] wg1 speed is unknown, defaulting to 1000 [ 3166.563809][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1380 seconds [ 3166.574903][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1380 seconds [ 3166.586251][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1380 seconds [ 3166.601140][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1380 seconds [ 3166.667818][T16249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3166.713282][T16249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3166.743477][T16249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3166.759468][T16249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3167.119616][T16249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3167.166150][T16249] 8021q: adding VLAN 0 to HW filter on device team0 [ 3167.209305][T16249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3167.231592][T16249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3167.258104][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.265257][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3167.277091][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.284234][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3167.342870][ T6911] IPVS: stop unused estimator thread 0... [ 3167.734041][T16249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3168.030483][ T1726] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3168.044443][T16249] veth0_vlan: entered promiscuous mode [ 3168.077239][T16249] veth1_vlan: entered promiscuous mode [ 3168.113406][T16249] veth0_macvtap: entered promiscuous mode [ 3168.123703][T16249] veth1_macvtap: entered promiscuous mode [ 3168.143762][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.158573][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.169508][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.185529][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.205225][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.217068][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.231316][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.254323][ T1726] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3168.265383][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.280103][ T1726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3168.295262][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.317979][ T1726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3168.329512][ T1726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3168.348307][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.359232][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3168.379397][ T1726] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3168.389700][ T1726] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3168.403396][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.413603][ T1726] usb 4-1: Manufacturer: syz [ 3168.420434][ T1726] usb 4-1: config 0 descriptor?? [ 3168.432022][T16249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3168.455021][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.465593][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.476956][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.488075][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.498298][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.515451][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.525734][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.549835][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.565262][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.586112][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.596370][T16249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3168.618305][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1380 seconds [ 3168.639280][T16249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3168.652775][T16249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3168.672352][T16249] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3168.685416][T16249] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3168.696005][T16249] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3168.704841][T16249] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3168.896950][ T1726] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 3168.913814][ T1726] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 3168.929185][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3168.947923][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3168.984805][ T1726] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 3169.008222][T12766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3169.039062][T12766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3171.418509][ T1726] usb 4-1: USB disconnect, device number 21 [ 3171.694168][T16407] loop9: detected capacity change from 0 to 512 [ 3173.355029][T16407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3173.488519][T16407] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3173.586016][T16407] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3173.705085][ T28] audit: type=1800 audit(1758639424.445:174): pid=16405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5469" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3173.768405][T14336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3174.613483][T16417] wg1 speed is unknown, defaulting to 1000 [ 3174.849906][T15997] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 3175.063960][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1680 seconds [ 3175.081623][T15997] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3175.103803][T15997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3175.150152][T15997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3175.160282][T15997] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3175.468432][T15997] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3175.477699][T15997] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3175.528353][T15997] usb 7-1: Manufacturer: syz [ 3175.571928][T15997] usb 7-1: config 0 descriptor?? [ 3176.124569][T15997] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 3176.164632][T15997] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 3176.218867][T15997] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 3177.761060][T16437] wg1 speed is unknown, defaulting to 1000 [ 3177.849619][T16442] autofs4:pid:16442:autofs_fill_super: called with bogus options [ 3179.210034][ T5867] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 3179.541876][T16454] wg1 speed is unknown, defaulting to 1000 [ 3180.764484][T15997] usb 7-1: USB disconnect, device number 14 [ 3184.124675][T16479] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5485'. [ 3184.310340][T16477] vlan2: entered promiscuous mode [ 3184.546858][T16472] wg1 speed is unknown, defaulting to 1000 [ 3184.565033][T16475] wg1 speed is unknown, defaulting to 1000 [ 3185.349975][T12730] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 3185.551563][T12730] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 3185.577041][T12730] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 3185.606794][T12730] usb 4-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 3185.642518][T12730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3186.666234][ T6912] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 3187.216997][T16499] autofs4:pid:16499:autofs_fill_super: called with bogus options [ 3187.312590][T16502] loop6: detected capacity change from 0 to 2048 [ 3187.361962][T16502] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3187.397627][T16502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3187.558312][T16508] loop9: detected capacity change from 0 to 2048 [ 3187.705296][T16508] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3188.276104][T16508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3188.806649][T11644] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3189.664964][T15938] usb 4-1: USB disconnect, device number 22 [ 3191.563452][T16530] wg1 speed is unknown, defaulting to 1000 [ 3192.179355][T16528] wg1 speed is unknown, defaulting to 1000 [ 3192.220230][T16534] wg1 speed is unknown, defaulting to 1000 [ 3194.042391][T16542] vlan2: entered promiscuous mode [ 3194.061361][T16544] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5500'. [ 3194.149765][T16542] macvtap0: entered promiscuous mode [ 3195.925671][T16555] wg1 speed is unknown, defaulting to 1000 [ 3197.281474][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1410 seconds [ 3197.294138][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1410 seconds [ 3197.305559][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1410 seconds [ 3197.316850][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1410 seconds [ 3198.766237][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1410 seconds [ 3199.413409][T16570] wg1 speed is unknown, defaulting to 1000 [ 3201.661476][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5509'. [ 3201.671066][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5509'. [ 3202.364644][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5520'. [ 3202.373820][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5520'. [ 3203.516189][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5512'. [ 3203.525541][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5512'. [ 3203.628400][T16619] wg1 speed is unknown, defaulting to 1000 [ 3205.154873][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.161494][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.176018][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1710 seconds [ 3205.570885][T16643] loop6: detected capacity change from 0 to 2048 [ 3205.609820][T16643] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3205.703312][T16643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3206.867260][T16652] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5515'. [ 3206.873300][T16647] vlan2: entered promiscuous mode [ 3207.497081][T16660] wg1 speed is unknown, defaulting to 1000 [ 3207.537637][T16661] vlan2: entered promiscuous mode [ 3207.563965][T16661] macvtap0: entered promiscuous mode [ 3207.598762][T16663] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5519'. [ 3209.710476][T16675] wg1 speed is unknown, defaulting to 1000 [ 3209.725209][T16677] vlan2: entered promiscuous mode [ 3209.765101][T16676] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5525'. [ 3209.828101][T16679] wg1 speed is unknown, defaulting to 1000 [ 3210.504080][T16696] wg1 speed is unknown, defaulting to 1000 [ 3213.620584][ T28] audit: type=1326 audit(1758639464.365:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.6.5552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86bdf8eec9 code=0x8000000 [ 3216.986127][T16787] autofs4:pid:16787:autofs_fill_super: called with bogus options [ 3217.237704][T16793] vlan2: entered promiscuous mode [ 3217.324733][T16794] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5567'. [ 3217.359883][ T1332] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3217.599129][ T1332] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3217.638415][ T1332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3217.692679][ T1332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3217.730323][ T1332] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3217.856948][ T1332] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3217.876319][ T1332] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3217.914101][ T1332] usb 6-1: Manufacturer: syz [ 3217.949111][ T1332] usb 6-1: config 0 descriptor?? [ 3218.897288][ T1332] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 3218.920817][ T1332] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 3218.977602][ T1332] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 3220.488071][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5571'. [ 3220.497484][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5571'. [ 3221.099844][T15997] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 3221.433660][T15938] usb 6-1: USB disconnect, device number 18 [ 3222.222416][T15997] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3222.624696][T15997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3222.636197][T15997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3222.646163][T15997] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3222.740173][T15997] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3222.781410][T15997] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3222.911186][T15997] usb 10-1: Manufacturer: syz [ 3222.948621][T15997] usb 10-1: config 0 descriptor?? [ 3224.152478][T15997] usbhid 10-1:0.0: can't add hid device: -71 [ 3224.178527][T15997] usbhid: probe of 10-1:0.0 failed with error -71 [ 3224.198580][T15997] usb 10-1: USB disconnect, device number 14 [ 3225.598501][T16843] wg1 speed is unknown, defaulting to 1000 [ 3225.861662][T16846] vlan2: entered promiscuous mode [ 3227.244497][ T1726] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 3228.053207][ T1726] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 3228.092757][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1440 seconds [ 3228.097394][ T1726] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 3228.104087][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1440 seconds [ 3228.124215][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1440 seconds [ 3228.135341][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1440 seconds [ 3228.399935][ T1726] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 3228.703107][ T1726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3228.854017][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5584'. [ 3228.869972][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5584'. [ 3229.061414][T12766] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 3229.423988][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1440 seconds [ 3229.467967][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5586'. [ 3229.482956][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5586'. [ 3231.081372][T11644] Bluetooth: hci1: command 0x1003 tx timeout [ 3231.164530][T16883] wg1 speed is unknown, defaulting to 1000 [ 3231.403387][T21975] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3231.575070][ T1726] usb 6-1: USB disconnect, device number 19 [ 3231.596530][T16885] loop9: detected capacity change from 0 to 2048 [ 3231.636239][T16885] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3231.677926][T16885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3231.735046][T16887] wg1 speed is unknown, defaulting to 1000 [ 3234.465533][T16901] loop6: detected capacity change from 0 to 2048 [ 3234.520377][T15997] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 3234.583515][T16901] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3234.711501][T15997] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 3234.723326][T15997] usb 10-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 3234.745255][T15997] usb 10-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 3234.757133][T16901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3234.799346][T15997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.929797][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1740 seconds [ 3236.113027][T16904] wg1 speed is unknown, defaulting to 1000 [ 3236.236892][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5595'. [ 3236.246021][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5595'. [ 3236.691772][T16917] loop3: detected capacity change from 0 to 2048 [ 3236.744232][T16917] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3236.861355][T16917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3237.720039][T15938] usb 10-1: USB disconnect, device number 15 [ 3238.444618][T16926] loop5: detected capacity change from 0 to 2048 [ 3238.456331][T16927] vlan2: entered promiscuous mode [ 3238.510811][T16926] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3238.518449][T16932] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5599'. [ 3238.587759][T16926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3238.617638][T16933] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5600'. [ 3238.883841][T16931] vlan2: entered promiscuous mode [ 3240.784487][T16948] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5604'. [ 3240.941086][T10956] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 3240.991576][T16943] vlan2: entered promiscuous mode [ 3241.127877][T16949] wg1 speed is unknown, defaulting to 1000 [ 3241.232362][T10956] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 3241.257446][T10956] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 3241.278202][T10956] usb 4-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 3241.299806][T10956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3241.910392][T16958] wg1 speed is unknown, defaulting to 1000 [ 3242.044393][ T8365] Bluetooth: hci1: Frame reassembly failed (-84) [ 3242.215238][ T1301] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 3243.000658][T15977] Bluetooth: hci4: command 0x0406 tx timeout [ 3243.778327][T16975] hub 9-0:1.0: USB hub found [ 3243.785934][T16975] hub 9-0:1.0: 1 port detected [ 3244.924021][T21975] Bluetooth: hci1: command 0x1003 tx timeout [ 3245.079145][T11644] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3246.229861][T10956] usb 4-1: USB disconnect, device number 23 [ 3246.305018][T16985] vlan2: entered promiscuous mode [ 3246.341243][T16987] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5613'. [ 3246.435370][T16986] hub 9-0:1.0: USB hub found [ 3246.459855][T16986] hub 9-0:1.0: 1 port detected [ 3246.722489][T16996] hub 9-0:1.0: USB hub found [ 3246.732705][T16996] hub 9-0:1.0: 1 port detected [ 3247.601480][T17002] loop6: detected capacity change from 0 to 1024 [ 3247.632373][T16998] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5615'. [ 3247.649566][T17003] loop3: detected capacity change from 0 to 2048 [ 3247.742024][T17003] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3247.814627][T17003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3248.999452][T17002] hfsplus: xattr searching failed [ 3249.124786][T17014] loop5: detected capacity change from 0 to 1024 [ 3249.629274][T17006] wg1 speed is unknown, defaulting to 1000 [ 3249.838026][T17016] loop3: detected capacity change from 0 to 2048 [ 3249.875949][T17016] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3249.935955][T17016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3249.950263][T17014] hfsplus: xattr searching failed [ 3253.561418][T17045] hub 9-0:1.0: USB hub found [ 3253.569896][T17045] hub 9-0:1.0: 1 port detected [ 3254.414827][T17050] loop6: detected capacity change from 0 to 2048 [ 3254.574030][T17050] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3254.973579][T17050] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3255.269486][T17056] vlan2: entered promiscuous mode [ 3255.371461][T17057] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5630'. [ 3255.500780][T17061] loop5: detected capacity change from 0 to 1024 [ 3255.716240][T17061] hfsplus: xattr searching failed [ 3256.428411][T17066] vlan2: entered promiscuous mode [ 3256.467894][T17067] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5632'. [ 3256.949495][T17075] loop3: detected capacity change from 0 to 2048 [ 3256.973506][T17075] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3256.988237][T17075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3258.591084][T17085] hub 9-0:1.0: USB hub found [ 3258.689888][T17085] hub 9-0:1.0: 1 port detected [ 3259.497658][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1470 seconds [ 3259.508547][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1470 seconds [ 3259.520431][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1470 seconds [ 3259.531798][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1470 seconds [ 3259.649146][T17089] loop9: detected capacity change from 0 to 2048 [ 3259.676303][T17089] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3259.742865][T17089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3259.787827][T17091] vlan2: entered promiscuous mode [ 3260.014739][ T5867] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 3260.026564][T17092] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5639'. [ 3260.120452][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1470 seconds [ 3260.627283][ T5867] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 3260.674204][ T5867] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 3260.701480][ T5867] usb 6-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 3260.755569][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3261.539301][ T1301] Bluetooth: hci1: Frame reassembly failed (-84) [ 3261.623596][T17106] vlan2: entered promiscuous mode [ 3261.666453][T17109] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5641'. [ 3263.332776][T17124] hub 9-0:1.0: USB hub found [ 3263.337693][T17124] hub 9-0:1.0: 1 port detected [ 3263.621264][T11644] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3263.868593][T17132] vlan2: entered promiscuous mode [ 3263.990545][ T1726] usb 6-1: USB disconnect, device number 20 [ 3264.816590][T17144] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5648'. [ 3264.904290][T17149] loop9: detected capacity change from 0 to 2048 [ 3264.948981][T17149] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3265.025476][T17149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3265.063360][T17152] loop3: detected capacity change from 0 to 2048 [ 3265.108705][T17154] loop5: detected capacity change from 0 to 2048 [ 3265.131053][T17154] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3265.152681][T17154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3265.173203][T17152] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3266.114688][T17152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3266.178252][T17160] loop6: detected capacity change from 0 to 2048 [ 3266.371051][T17160] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3266.426114][T17160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3266.592519][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.612995][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.173900][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1770 seconds [ 3267.569253][T17168] hub 9-0:1.0: USB hub found [ 3267.576915][T17168] hub 9-0:1.0: 1 port detected [ 3268.048006][T17171] loop9: detected capacity change from 0 to 2048 [ 3268.075691][T17171] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3268.371083][T17171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3268.923206][T17180] loop5: detected capacity change from 0 to 128 [ 3270.414420][T17187] loop5: detected capacity change from 0 to 2048 [ 3270.445622][T17187] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3270.454231][T17189] vlan2: entered promiscuous mode [ 3270.498750][T17187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3270.532529][T17190] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5661'. [ 3271.912380][T17209] loop5: detected capacity change from 0 to 1024 [ 3272.063472][T17209] hfsplus: xattr searching failed [ 3272.094996][T17216] loop9: detected capacity change from 0 to 2048 [ 3272.162705][T17218] loop6: detected capacity change from 0 to 1024 [ 3272.188323][T17214] vlan2: entered promiscuous mode [ 3272.255573][T17216] Alternate GPT is invalid, using primary GPT. [ 3272.292084][T17216] loop9: p1 p2 p3 [ 3272.355399][T17218] hfsplus: xattr searching failed [ 3272.823188][T17228] loop9: detected capacity change from 0 to 2048 [ 3273.025421][T17224] loop3: detected capacity change from 0 to 2048 [ 3273.054309][T17228] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3273.158337][T17224] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3273.303021][T17224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3273.317342][T17228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3274.578102][T17238] vlan2: entered promiscuous mode [ 3274.676904][T17241] loop9: detected capacity change from 0 to 2048 [ 3274.734163][T17241] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3274.829802][T17241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3275.032460][T17243] loop5: detected capacity change from 0 to 2048 [ 3275.122587][T17243] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3275.435798][T17243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3276.528927][T17256] loop3: detected capacity change from 0 to 2048 [ 3276.695472][T17256] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3276.821701][T17256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3276.952514][T17264] loop9: detected capacity change from 0 to 128 [ 3277.654358][T17265] vlan2: entered promiscuous mode [ 3277.659435][T17265] macvtap0: entered promiscuous mode [ 3277.680038][T17263] loop6: detected capacity change from 0 to 2048 [ 3277.753494][T17263] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3277.776081][T17263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3278.761513][T17261] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5683'. [ 3278.843154][T11644] Bluetooth: hci0: command 0x0406 tx timeout [ 3279.068142][T17274] loop3: detected capacity change from 0 to 2048 [ 3279.106107][T17274] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3279.188211][T17274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3279.329953][T10956] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 3279.539780][T10956] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3280.255426][T10956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3280.270667][T10956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3280.285852][T10956] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3280.360382][T10956] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3280.371871][T10956] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3280.399795][T10956] usb 10-1: Manufacturer: syz [ 3280.480701][T10956] usb 10-1: config 0 descriptor?? [ 3281.241990][T10956] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 3281.258976][T10956] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 3281.382094][T17294] overlayfs: failed to resolve './file1': -2 [ 3281.895077][T10956] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 3282.014627][T10956] usb 10-1: USB disconnect, device number 16 [ 3282.107797][T17297] fido_id[17297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 3285.669776][T17321] 9pnet_fd: Insufficient options for proto=fd [ 3286.792586][T17328] vlan2: entered promiscuous mode [ 3286.866451][T17329] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5700'. [ 3287.635560][T17338] loop6: detected capacity change from 0 to 128 [ 3288.481000][T17342] fuse: Unknown parameter 'group_id00000000000000000000' [ 3289.256455][T17345] vlan2: entered promiscuous mode [ 3289.350588][T17347] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5705'. [ 3290.727346][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1500 seconds [ 3290.857793][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1500 seconds [ 3290.869318][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1500 seconds [ 3290.877163][ T5842] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3290.883563][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1500 seconds [ 3290.900126][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1500 seconds [ 3291.022264][T17358] overlayfs: failed to resolve './file0': -2 [ 3291.152401][ T5842] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3291.250202][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3291.293469][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3291.378580][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3291.462522][ T5842] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3291.514729][ T5842] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3292.198823][T17364] binder: 17363:17364 ioctl c0306201 0 returned -14 [ 3292.874655][ T5842] usb 6-1: Manufacturer: syz [ 3292.934052][ T5842] usb 6-1: config 0 descriptor?? [ 3293.169838][ T5842] usb 6-1: can't set config #0, error -71 [ 3293.620836][ T5842] usb 6-1: USB disconnect, device number 21 [ 3296.062159][T17377] vlan2: entered promiscuous mode [ 3296.131889][T17380] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5713'. [ 3297.186399][T17387] binder: 17384:17387 ioctl c0306201 0 returned -14 [ 3298.042361][T17389] loop6: detected capacity change from 0 to 2048 [ 3298.129873][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1800 seconds [ 3298.258701][T17389] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 3298.353358][T17389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3298.427003][T17391] loop9: detected capacity change from 0 to 2048 [ 3298.601044][T17391] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3299.136189][T17391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3300.649880][T10956] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3302.254433][T10956] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3302.275534][T10956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3302.299792][T10956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3302.309580][T10956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3302.324740][T10956] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3302.350307][T10956] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3302.389826][T10956] usb 6-1: Manufacturer: syz [ 3302.404576][T10956] usb 6-1: config 0 descriptor?? [ 3302.749896][T17410] binder: 17408:17410 ioctl c0306201 0 returned -14 [ 3304.166229][T10956] usbhid 6-1:0.0: can't add hid device: -71 [ 3304.172369][T10956] usbhid: probe of 6-1:0.0 failed with error -71 [ 3304.216870][T10956] usb 6-1: USB disconnect, device number 22 [ 3304.777182][T17416] binder: 17414:17416 ioctl c0306201 0 returned -14 [ 3306.552598][T17421] overlayfs: failed to resolve './file0': -2 [ 3310.821706][T17435] loop5: detected capacity change from 0 to 2048 [ 3310.889469][T17435] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3310.914734][T17435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3319.418315][ T8199] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3319.555040][T17472] overlayfs: failed to resolve './file0': -2 [ 3321.483505][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1530 seconds [ 3321.520111][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1530 seconds [ 3321.535297][ T8199] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3322.869992][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1530 seconds [ 3322.882267][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1530 seconds [ 3322.900849][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1530 seconds [ 3322.919815][ T8199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3322.930759][ T8199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3322.940555][ T8199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3322.956663][ T8199] usb 4-1: string descriptor 0 read error: -71 [ 3322.964226][ T8199] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3322.973336][ T8199] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3322.983771][ T8199] usb 4-1: config 0 descriptor?? [ 3323.000229][ T8199] usb 4-1: can't set config #0, error -71 [ 3323.041540][ T8199] usb 4-1: USB disconnect, device number 24 [ 3324.548559][T17483] loop5: detected capacity change from 0 to 2048 [ 3324.604755][T17483] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3324.713830][T17483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3328.936884][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.943710][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3330.341966][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1830 seconds [ 3334.860796][T15997] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 3334.886302][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 3335.070956][T15997] usb 7-1: device descriptor read/64, error -32 [ 3335.359914][T15997] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 3336.299627][T17537] binder: 17536:17537 ioctl c0046209 0 returned -22 [ 3336.859819][T15997] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3336.880488][T15997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3336.932464][T15997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3336.952770][T15997] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3336.994716][T15997] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3337.023996][T15997] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3337.040180][T15997] usb 7-1: Manufacturer: syz [ 3337.062293][T15997] usb 7-1: config 0 descriptor?? [ 3337.521055][T15997] usbhid 7-1:0.0: can't add hid device: -71 [ 3337.527091][T15997] usbhid: probe of 7-1:0.0 failed with error -71 [ 3337.572427][T15997] usb 7-1: USB disconnect, device number 16 [ 3351.640212][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1560 seconds [ 3352.093695][T17589] loop5: detected capacity change from 0 to 2048 [ 3352.174860][T17589] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 3353.627823][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1560 seconds [ 3353.638750][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1560 seconds [ 3353.650718][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1560 seconds [ 3353.662101][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1560 seconds [ 3353.728653][T17589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3353.951574][T10956] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 3354.993194][T10956] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3355.057372][T10956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3356.451086][T10956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3356.469868][T10956] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3356.484645][T10956] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3356.518301][T10956] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3356.546911][T10956] usb 10-1: Manufacturer: syz [ 3356.575027][T10956] usb 10-1: config 0 descriptor?? [ 3357.992096][T10956] usb 10-1: can't set config #0, error -71 [ 3358.000954][T10956] usb 10-1: USB disconnect, device number 17 [ 3361.901662][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1860 seconds [ 3371.784383][T17657] loop9: detected capacity change from 0 to 2048 [ 3373.193380][T17657] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 3373.254007][T17657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3376.440764][T17674] binder: 17672:17674 ioctl c0046209 0 returned -22 [ 3377.029123][ T5867] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3378.720811][ T5867] usb 4-1: device not accepting address 25, error -71 [ 3381.719991][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1590 seconds [ 3382.355006][T17698] binder: 17696:17698 ioctl c0046209 0 returned -22 [ 3384.280612][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1590 seconds [ 3384.292461][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1590 seconds [ 3384.305178][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1590 seconds [ 3384.316517][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1590 seconds [ 3390.030998][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3390.038241][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3391.664753][ T5158] udevd[5158]: worker [17763] /devices/virtual/block/nbd0 timeout; kill it [ 3391.699920][ T5158] udevd[5158]: seq 20379 '/devices/virtual/block/nbd0' killed [ 3391.707489][ T5158] udevd[5158]: worker [15183] /devices/virtual/block/nbd1 timeout; kill it [ 3391.740440][ T5158] udevd[5158]: seq 23853 '/devices/virtual/block/nbd1' killed [ 3391.781263][ T5158] udevd[5158]: worker [11490] /devices/virtual/block/nbd2 timeout; kill it [ 3391.804945][ T5158] udevd[5158]: seq 23892 '/devices/virtual/block/nbd2' killed [ 3391.970206][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1890 seconds [ 3395.195520][T17754] binder: 17752:17754 ioctl c0306201 0 returned -14 [ 3398.636274][T17764] binder: 17761:17764 ioctl c0046209 0 returned -22 [ 3405.631100][T17794] binder: 17793:17794 ioctl c0306201 0 returned -14 [ 3411.800538][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1620 seconds [ 3414.800793][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1620 seconds [ 3414.811725][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1620 seconds [ 3414.824202][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1620 seconds [ 3414.835556][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1620 seconds [ 3419.308650][T17844] vlan2: entered promiscuous mode [ 3419.471130][T17847] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5814'. [ 3423.460197][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1920 seconds [ 3426.670228][T17880] binder: 17878:17880 ioctl c0306201 0 returned -14 [ 3429.047151][T17891] loop8: detected capacity change from 0 to 7 [ 3429.071565][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3429.080795][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3429.094192][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3429.103421][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3429.128556][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3429.137973][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3429.299896][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3429.309071][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.071084][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3431.080269][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.111975][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3431.121189][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.129509][T17891] ldm_validate_partition_table(): Disk read failed. [ 3431.139945][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3431.149116][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.157414][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3431.166620][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.175712][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3431.184960][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.193137][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3431.202334][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3431.210413][T17891] Dev loop8: unable to read RDB block 0 [ 3431.220212][T17891] loop8: unable to read partition table [ 3431.225994][T17891] loop8: partition table beyond EOD, truncated [ 3431.232211][T17891] loop_reread_partitions: partition scan of loop8 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 3434.708632][T17907] binder: 17903:17907 ioctl c0046209 0 returned -22 [ 3437.484059][T17919] binder: 17917:17919 ioctl c0046209 0 returned -22 [ 3441.880111][T14145] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1650 seconds [ 3442.294233][T17948] binder: 17937:17948 ioctl c0306201 0 returned -14 [ 3444.031987][T17954] binder: 17952:17954 ioctl c0046209 0 returned -22 [ 3445.109947][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1650 seconds [ 3445.127842][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1650 seconds [ 3445.139290][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1650 seconds [ 3445.166044][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1650 seconds [ 3448.490882][T17967] binder: 17965:17967 ioctl c0306201 0 returned -14 [ 3450.489821][T17972] binder: 17970:17972 ioctl c0306201 0 returned -14 [ 3450.848473][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.855028][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.029076][T17987] loop8: detected capacity change from 0 to 7 [ 3451.084625][ C1] blk_print_req_error: 11 callbacks suppressed [ 3451.084647][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3451.100044][ C1] buffer_io_error: 10 callbacks suppressed [ 3451.100058][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3451.148222][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3451.157447][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3451.211328][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3451.220549][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3451.239256][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3451.248499][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3452.168889][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3452.178217][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3453.100392][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3453.109584][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3453.134178][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3453.143396][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3453.151334][T17987] ldm_validate_partition_table(): Disk read failed. [ 3453.160441][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3453.169572][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3453.180644][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3453.189803][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3453.198298][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3453.207509][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3453.215802][T17987] Dev loop8: unable to read RDB block 0 [ 3453.252483][T17987] loop8: unable to read partition table [ 3453.258420][T17987] loop8: partition table beyond EOD, truncated [ 3453.264724][T17987] loop_reread_partitions: partition scan of loop8 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 3454.068405][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1950 seconds [ 3456.030679][T18013] binder: 18007:18013 ioctl c0306201 0 returned -14 [ 3458.535749][T18020] binder: 18019:18020 ioctl c0046209 0 returned -22 [ 3461.485712][T18034] binder: 18031:18034 ioctl c0046209 0 returned -22 [ 3462.792694][T18038] overlayfs: failed to resolve './file1': -2 [ 3465.288466][T18050] loop8: detected capacity change from 0 to 7 [ 3466.600497][ C0] blk_print_req_error: 10 callbacks suppressed [ 3466.600518][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.615923][ C0] buffer_io_error: 10 callbacks suppressed [ 3466.615939][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.669600][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.678859][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.809841][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.819034][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.840780][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.849992][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.860522][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.869690][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.879850][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.889003][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.897113][T18050] ldm_validate_partition_table(): Disk read failed. [ 3466.899918][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.912848][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.928196][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.937430][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.946784][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.955978][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.964067][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3466.973282][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3466.981427][T18050] Dev loop8: unable to read RDB block 0 [ 3467.029913][T18050] loop8: unable to read partition table [ 3467.035821][T18050] loop8: partition table beyond EOD, truncated [ 3467.043646][T18050] loop_reread_partitions: partition scan of loop8 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 3471.996908][T17946] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1680 seconds [ 3473.491894][T18089] binder: 18086:18089 ioctl c0046209 0 returned -22 [ 3476.404484][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1680 seconds [ 3476.415518][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1680 seconds [ 3476.426894][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1680 seconds [ 3476.438232][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1680 seconds [ 3480.250420][T18109] binder: 18108:18109 ioctl c0046209 0 returned -22 [ 3481.649748][T18116] binder: 18114:18116 ioctl c0046209 0 returned -22 [ 3484.620382][T18130] binder: 18129:18130 ioctl c0306201 0 returned -14 [ 3485.209946][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 1980 seconds [ 3485.772358][T18135] binder: 18133:18135 ioctl c0306201 0 returned -14 [ 3490.208456][T18153] binder: 18151:18153 ioctl c0046209 0 returned -22 [ 3491.627547][T18159] loop8: detected capacity change from 0 to 7 [ 3491.651753][ C1] blk_print_req_error: 10 callbacks suppressed [ 3491.651774][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3491.667137][ C1] buffer_io_error: 10 callbacks suppressed [ 3491.667151][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3491.762779][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3491.772019][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3491.782576][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3491.791844][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3491.855665][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3491.864900][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3492.192367][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3492.201583][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3492.261459][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3492.270697][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3492.308116][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3492.317344][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3492.325300][T18159] ldm_validate_partition_table(): Disk read failed. [ 3492.336385][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3492.345605][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3493.283797][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3493.292998][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3493.333272][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3493.342521][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3493.356917][T18159] Dev loop8: unable to read RDB block 0 [ 3493.374586][T18159] loop8: unable to read partition table [ 3493.380621][T18159] loop8: partition table beyond EOD, truncated [ 3493.386837][T18159] loop_reread_partitions: partition scan of loop8 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 3499.835824][T18178] binder: 18177:18178 ioctl c0306201 0 returned -14 [ 3500.259654][T18195] loop3: detected capacity change from 0 to 128 [ 3500.344207][T18195] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3500.510123][T18195] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3501.036376][T18200] binder: 18198:18200 ioctl c0046209 0 returned -22 [ 3502.615546][T17946] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1710 seconds [ 3502.951419][T12700] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3503.210450][T18208] loop8: detected capacity change from 0 to 7 [ 3503.278090][ C0] blk_print_req_error: 10 callbacks suppressed [ 3503.278111][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.293556][ C0] buffer_io_error: 10 callbacks suppressed [ 3503.293571][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.323830][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.333074][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.342429][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.351638][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.361007][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.370297][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.378799][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.388020][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.426000][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.435235][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.450509][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.459763][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3503.467815][T18208] ldm_validate_partition_table(): Disk read failed. [ 3503.477101][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3503.486527][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3505.325753][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3505.335007][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 3505.352372][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3505.361603][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 3505.369598][T18208] Dev loop8: unable to read RDB block 0 [ 3505.378815][T18208] loop8: unable to read partition table [ 3505.384731][T18208] loop8: partition table beyond EOD, truncated [ 3505.391101][T18208] loop_reread_partitions: partition scan of loop8 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 3506.259894][T18217] binder: 18215:18217 ioctl c0046209 0 returned -22 [ 3507.181971][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1710 seconds [ 3507.193163][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1710 seconds [ 3507.204452][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1710 seconds [ 3507.219867][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1710 seconds [ 3512.521373][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.547404][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3515.420350][T18263] binder: 18262:18263 ioctl c0306201 0 returned -14 [ 3516.140288][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 2010 seconds [ 3517.081035][T18269] loop9: detected capacity change from 0 to 1024 [ 3517.184685][T18269] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 3517.498035][T18269] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.5914: bg 0: block 10: padding at end of block bitmap is not set [ 3518.310413][T18269] Quota error (device loop9): write_blk: dquota write failed [ 3518.318384][T18269] Quota error (device loop9): find_free_dqentry: Can't write quota data block 2 [ 3519.836555][T18269] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 3519.930667][T18269] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.5914: Failed to acquire dquot type 0 [ 3520.181401][T18269] Quota error (device loop9): write_blk: dquota write failed [ 3520.320408][T18269] Quota error (device loop9): find_free_dqentry: Can't write quota data block 2 [ 3520.329542][T18269] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 3520.659908][T18286] capability: warning: `syz.3.5911' uses 32-bit capabilities (legacy support in use) [ 3520.671871][T18269] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.5914: Failed to acquire dquot type 0 [ 3520.701296][T18269] EXT4-fs error (device loop9): ext4_free_blocks:6676: comm syz.9.5914: Freeing blocks not in datazone - block = 0, count = 4096 [ 3521.076367][T18269] Quota error (device loop9): write_blk: dquota write failed [ 3521.119918][T18269] Quota error (device loop9): find_free_dqentry: Can't write quota data block 2 [ 3521.229118][T18269] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 3521.270084][T18269] EXT4-fs error (device loop9): ext4_acquire_dquot:6940: comm syz.9.5914: Failed to acquire dquot type 0 [ 3521.370638][T18269] EXT4-fs (loop9): 1 orphan inode deleted [ 3521.377662][T18269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3522.925480][T14336] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3524.480357][T18309] binder: 18308:18309 ioctl c0306201 0 returned -14 [ 3527.676913][T18321] binder: 18319:18321 ioctl c0306201 0 returned -14 [ 3533.289886][T17946] block nbd2: Possible stuck request ffff888021c10000: control (read@0,4096B). Runtime 1740 seconds [ 3537.151835][T18351] binder: 18345:18351 ioctl c0306201 0 returned -14 [ 3538.053703][ T9246] block nbd1: Possible stuck request ffff888021ba8000: control (read@0,1024B). Runtime 1740 seconds [ 3538.064599][ T9246] block nbd1: Possible stuck request ffff888021ba8200: control (read@1024,1024B). Runtime 1740 seconds [ 3538.075818][ T9246] block nbd1: Possible stuck request ffff888021ba8400: control (read@2048,1024B). Runtime 1740 seconds [ 3538.086936][ T9246] block nbd1: Possible stuck request ffff888021ba8600: control (read@3072,1024B). Runtime 1740 seconds [ 3540.958494][T18368] binder: 18365:18368 ioctl c0046209 0 returned -22 [ 3543.799931][T12730] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 3543.969893][T12730] usb 10-1: device descriptor read/64, error -71 [ 3544.830638][T18384] 9pnet_fd: Insufficient options for proto=fd [ 3545.510054][T12730] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 3546.303178][T18389] binder: 18388:18389 ioctl c0046209 0 returned -22 [ 3546.900668][ T9246] block nbd0: Possible stuck request ffff888021b78000: control (read@0,1024B). Runtime 2040 seconds [ 3546.949106][T12730] usb 10-1: device descriptor read/64, error -71 [ 3547.102030][T12730] usb usb10-port1: attempt power cycle [ 3549.780157][ T29] INFO: task udevd:11490 blocked for more than 145 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3549.822893][ T29] Not tainted syzkaller #0 [ 3549.827882][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3549.969826][ T29] task:udevd state:D stack:22832 pid:11490 ppid:5158 flags:0x00004006 [ 3549.979359][ T29] Call Trace: [ 3550.597891][T18406] binder: 18404:18406 ioctl c0046209 0 returned -22 [ 3551.409916][ T29] [ 3551.412930][ T29] __schedule+0x14d2/0x44d0 [ 3551.418848][ T29] ? asan.module_dtor+0x20/0x20 [ 3551.459804][ T29] ? mark_lock+0x94/0x320 [ 3551.464240][ T29] ? lock_chain_count+0x20/0x20 [ 3551.469102][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 3551.500674][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 3551.506112][ T29] schedule+0xbd/0x170 [ 3551.529841][ T29] io_schedule+0x80/0xd0 [ 3551.534155][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 3551.539484][ T29] ? folio_wait_bit+0x30/0x30 [ 3551.557571][ T29] ? _compound_head+0x120/0x120 [ 3551.563193][ T29] ? filemap_add_folio+0x192/0x3c0 [ 3551.568343][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 3551.574108][ T29] ? blkdev_writepage+0x30/0x30 [ 3551.579035][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 3551.584528][ T29] ? blkdev_writepage+0x30/0x30 [ 3551.589405][ T29] read_part_sector+0xd2/0x350 [ 3551.594576][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 3551.600218][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 3551.605534][ T29] ? put_partition+0x350/0x350 [ 3551.610745][ T29] ? alloc_pages+0x4dc/0x740 [ 3551.615394][ T29] bdev_disk_changed+0x73a/0x1410 [ 3551.621130][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 3551.629065][ T29] ? iput+0x347/0x920 [ 3551.633388][ T29] blkdev_get_whole+0x30d/0x390 [ 3551.638264][ T29] blkdev_get_by_dev+0x279/0x600 [ 3551.643631][ T29] blkdev_open+0x152/0x360 [ 3551.648078][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 3551.653127][ T29] do_dentry_open+0x8c6/0x1500 [ 3551.657929][ T29] path_openat+0x274b/0x3190 [ 3551.669308][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 3551.677398][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3551.690059][ T29] ? verify_lock_unused+0x140/0x140 [ 3551.695313][ T29] ? do_filp_open+0x3d0/0x3d0 [ 3551.707139][ T29] ? __virt_addr_valid+0x18c/0x540 [ 3551.712622][ T29] do_filp_open+0x1c5/0x3d0 [ 3551.717160][ T29] ? vfs_tmpfile+0x490/0x490 [ 3551.723201][ T29] ? _raw_spin_unlock+0x28/0x40 [ 3551.729457][ T29] ? alloc_fd+0x58f/0x630 [ 3551.735527][ T29] do_sys_openat2+0x12c/0x1c0 [ 3551.740524][ T29] ? do_sys_open+0xe0/0xe0 [ 3551.744976][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3551.751831][ T29] ? lock_chain_count+0x20/0x20 [ 3551.756719][ T29] __x64_sys_openat+0x139/0x160 [ 3551.761968][ T29] do_syscall_64+0x55/0xb0 [ 3551.766404][ T29] ? clear_bhb_loop+0x40/0x90 [ 3551.772359][ T29] ? clear_bhb_loop+0x40/0x90 [ 3551.777254][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3551.790530][ T29] RIP: 0033:0x7fd8ce2a7407 [ 3551.794999][ T29] RSP: 002b:00007ffe5d306000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 3551.811364][ T29] RAX: ffffffffffffffda RBX: 00007fd8ce9d1880 RCX: 00007fd8ce2a7407 [ 3551.819384][ T29] RDX: 00000000000a0800 RSI: 000055ffae12da20 RDI: ffffffffffffff9c [ 3551.837112][ T29] RBP: 000055ffae11a910 R08: 0000000000000000 R09: 0000000000000000 [ 3551.845753][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ffae12de20 [ 3551.854274][ T29] R13: 000055ffae132410 R14: 0000000000000000 R15: 000055ffae12de20 [ 3551.863098][ T29] [ 3551.866192][ T29] INFO: task udevd:15183 blocked for more than 147 seconds. [ 3551.873923][ T29] Not tainted syzkaller #0 [ 3551.878881][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3551.888874][ T29] task:udevd state:D stack:22760 pid:15183 ppid:5158 flags:0x00004006 [ 3551.903875][ T29] Call Trace: [ 3551.907242][ T29] [ 3551.910692][ T29] __schedule+0x14d2/0x44d0 [ 3551.915244][ T29] ? asan.module_dtor+0x20/0x20 [ 3551.920636][ T29] ? mark_lock+0x94/0x320 [ 3551.925089][ T29] ? lock_chain_count+0x20/0x20 [ 3551.940489][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 3551.945580][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 3551.959023][ T29] schedule+0xbd/0x170 [ 3551.963441][ T29] io_schedule+0x80/0xd0 [ 3551.967720][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 3551.981803][ T29] ? folio_wait_bit+0x30/0x30 [ 3551.986527][ T29] ? _compound_head+0x120/0x120 [ 3552.002078][ T29] ? filemap_add_folio+0x192/0x3c0 [ 3552.007245][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 3552.024406][ T29] ? blkdev_writepage+0x30/0x30 [ 3552.029314][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 3552.036144][ T29] ? blkdev_writepage+0x30/0x30 [ 3552.051228][ T29] read_part_sector+0xd2/0x350 [ 3552.056041][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 3552.068408][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 3552.076202][ T29] ? put_partition+0x350/0x350 [ 3552.086640][ T29] ? alloc_pages+0x4dc/0x740 [ 3552.094635][ T29] bdev_disk_changed+0x73a/0x1410 [ 3552.099993][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 3552.105312][ T29] ? iput+0x347/0x920 [ 3552.109397][ T29] blkdev_get_whole+0x30d/0x390 [ 3552.119751][ T29] blkdev_get_by_dev+0x279/0x600 [ 3552.124741][ T29] blkdev_open+0x152/0x360 [ 3552.129176][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 3552.145550][ T29] do_dentry_open+0x8c6/0x1500 [ 3552.151726][ T29] path_openat+0x274b/0x3190 [ 3552.156364][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 3552.168173][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3552.174441][ T29] ? verify_lock_unused+0x140/0x140 [ 3552.179660][ T29] ? do_filp_open+0x3d0/0x3d0 [ 3552.192276][ T29] ? __virt_addr_valid+0x18c/0x540 [ 3552.197452][ T29] do_filp_open+0x1c5/0x3d0 [ 3552.204637][ T29] ? vfs_tmpfile+0x490/0x490 [ 3552.209293][ T29] ? _raw_spin_unlock+0x28/0x40 [ 3552.214706][ T29] ? alloc_fd+0x58f/0x630 [ 3552.219082][ T29] do_sys_openat2+0x12c/0x1c0 [ 3552.224336][ T29] ? do_sys_open+0xe0/0xe0 [ 3552.228782][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3552.235179][ T29] ? lock_chain_count+0x20/0x20 [ 3552.241755][ T29] __x64_sys_openat+0x139/0x160 [ 3552.246649][ T29] do_syscall_64+0x55/0xb0 [ 3552.251899][ T29] ? clear_bhb_loop+0x40/0x90 [ 3552.256599][ T29] ? clear_bhb_loop+0x40/0x90 [ 3552.261680][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3552.267598][ T29] RIP: 0033:0x7fd8ce2a7407 [ 3552.272401][ T29] RSP: 002b:00007ffe5d306000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 3552.281174][ T29] RAX: ffffffffffffffda RBX: 00007fd8ce9d1880 RCX: 00007fd8ce2a7407 [ 3552.289174][ T29] RDX: 00000000000a0800 RSI: 000055ffae1416d0 RDI: ffffffffffffff9c [ 3552.297603][ T29] RBP: 000055ffae11a910 R08: 0000000000000000 R09: 0000000000000000 [ 3552.305888][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ffae161d10 [ 3552.314179][ T29] R13: 000055ffae132410 R14: 0000000000000000 R15: 000055ffae161d10 [ 3552.328751][ T29] [ 3552.332155][ T29] INFO: task udevd:17763 blocked for more than 148 seconds. [ 3552.360038][ T29] Not tainted syzkaller #0 [ 3552.365026][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3552.382659][ T29] task:udevd state:D stack:23784 pid:17763 ppid:5158 flags:0x00004006 [ 3552.392589][ T29] Call Trace: [ 3552.395897][ T29] [ 3552.398842][ T29] __schedule+0x14d2/0x44d0 [ 3552.408172][ T29] ? asan.module_dtor+0x20/0x20 [ 3552.413556][ T29] ? mark_lock+0x94/0x320 [ 3552.417932][ T29] ? lock_chain_count+0x20/0x20 [ 3552.423243][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 3552.428291][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 3552.434291][ T29] schedule+0xbd/0x170 [ 3552.438391][ T29] io_schedule+0x80/0xd0 [ 3552.469854][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 3552.475225][ T29] ? folio_wait_bit+0x30/0x30 [ 3552.489749][ T29] ? _compound_head+0x120/0x120 [ 3552.494657][ T29] ? filemap_add_folio+0x192/0x3c0 [ 3552.520696][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 3552.526050][ T29] ? blkdev_writepage+0x30/0x30 [ 3552.547724][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 3552.579790][ T29] ? blkdev_writepage+0x30/0x30 [ 3552.584722][ T29] read_part_sector+0xd2/0x350 [ 3552.589510][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 3552.622328][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 3552.627684][ T29] ? put_partition+0x350/0x350 [ 3552.659755][ T29] ? alloc_pages+0x4dc/0x740 [ 3552.664428][ T29] bdev_disk_changed+0x73a/0x1410 [ 3552.669500][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 3552.689808][ T29] ? iput+0x347/0x920 [ 3552.693875][ T29] blkdev_get_whole+0x30d/0x390 [ 3552.698744][ T29] blkdev_get_by_dev+0x279/0x600 [ 3552.719911][ T29] blkdev_open+0x152/0x360 [ 3552.724403][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 3552.729022][ T29] do_dentry_open+0x8c6/0x1500 [ 3552.749862][ T29] path_openat+0x274b/0x3190 [ 3552.754533][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 3552.759576][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3552.789830][ T29] ? verify_lock_unused+0x140/0x140 [ 3552.795103][ T29] ? do_filp_open+0x3d0/0x3d0 [ 3552.809765][ T29] ? __virt_addr_valid+0x18c/0x540 [ 3552.814964][ T29] do_filp_open+0x1c5/0x3d0 [ 3552.819503][ T29] ? vfs_tmpfile+0x490/0x490 [ 3552.839842][ T29] ? _raw_spin_unlock+0x28/0x40 [ 3552.844753][ T29] ? alloc_fd+0x58f/0x630 [ 3552.849118][ T29] do_sys_openat2+0x12c/0x1c0 [ 3552.880424][ T29] ? do_sys_open+0xe0/0xe0 [ 3552.885075][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3552.898986][ T29] ? lock_chain_count+0x20/0x20 [ 3552.904696][ T29] __x64_sys_openat+0x139/0x160 [ 3552.909588][ T29] do_syscall_64+0x55/0xb0 [ 3552.919744][ T29] ? clear_bhb_loop+0x40/0x90 [ 3552.924463][ T29] ? clear_bhb_loop+0x40/0x90 [ 3552.929156][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3552.937200][ T29] RIP: 0033:0x7fd8ce2a7407 [ 3552.941882][ T29] RSP: 002b:00007ffe5d306000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 3552.950692][ T29] RAX: ffffffffffffffda RBX: 00007fd8ce9d1880 RCX: 00007fd8ce2a7407 [ 3552.962602][ T29] RDX: 00000000000a0800 RSI: 000055ffae11b520 RDI: ffffffffffffff9c [ 3552.971071][ T29] RBP: 000055ffae11a910 R08: 0000000000000000 R09: 0000000000000000 [ 3552.979061][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ffae12f830 [ 3552.987535][ T29] R13: 000055ffae132410 R14: 0000000000000000 R15: 000055ffae12f830 [ 3552.998711][ T29] [ 3553.013208][ T29] [ 3553.013208][ T29] Showing all locks held in the system: [ 3553.028782][ T29] 1 lock held by khungtaskd/29: [ 3553.039776][ T29] #0: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 3553.077214][ T29] 3 locks held by kworker/u4:8/1317: [ 3553.103663][ T29] #0: ffff8880b8e3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 3553.120016][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0 [ 3553.128822][ T29] #2: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 3553.188189][ T29] 2 locks held by getty/5548: [ 3553.207257][ T29] #0: ffff8880310710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3553.229763][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 3553.256333][ T29] 1 lock held by udevd/11490: [ 3553.262860][ T29] #0: ffff888021b104c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 3553.285186][ T29] 1 lock held by udevd/15183: [ 3553.297736][ T29] #0: ffff888021afb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 3553.307952][ T29] 1 lock held by udevd/17763: [ 3553.312993][ T29] #0: ffff88814136d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 3553.334128][ T29] 3 locks held by kworker/1:8/1332: [ 3553.339367][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 3553.358464][ T29] #1: ffffc90003bd7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 3553.370206][ T29] #2: ffffffff8cd357f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 3553.381549][ T29] 3 locks held by syz-executor/12700: [ 3553.386954][ T29] #0: ffff888033144e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 3553.397550][ T29] #1: ffff8880331440b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 3553.411797][ T29] #2: ffffffff8cd357f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 3553.423012][ T29] 3 locks held by syz-executor/14336: [ 3553.428413][ T29] #0: ffff888041bfce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 3553.438629][ T29] #1: ffff888041bfc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 3553.448425][ T29] #2: ffffffff8e129c08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 3553.458551][ T29] 2 locks held by kworker/0:0/15464: [ 3553.463967][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 3553.475800][ T29] #1: ffffc90004eb7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 3553.488396][ T29] 3 locks held by syz-executor/15974: [ 3553.493884][ T29] #0: ffff88804e640e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 3553.503972][ T29] #1: ffff88804e6400b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 3553.513716][ T29] #2: ffffffff8e129c08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 3553.523901][ T29] 4 locks held by syz.6.5576/16836: [ 3553.529108][ T29] #0: ffff88806160ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 3553.539146][ T29] #1: ffff88806160c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 3553.548827][ T29] #2: ffffffff8e129c08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 3553.558933][ T29] #3: ffff88801b7edb38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 3553.577405][ T29] [ 3553.586094][ T29] ============================================= [ 3553.586094][ T29] [ 3553.594666][ T29] NMI backtrace for cpu 0 [ 3553.599023][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 3553.606251][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3553.616301][ T29] Call Trace: [ 3553.619593][ T29] [ 3553.622516][ T29] dump_stack_lvl+0x16c/0x230 [ 3553.627181][ T29] ? preempt_count_add+0x91/0x1a0 [ 3553.632195][ T29] ? show_regs_print_info+0x20/0x20 [ 3553.637380][ T29] ? load_image+0x3b0/0x3b0 [ 3553.641903][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 3553.646916][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 3553.653060][ T29] ? _printk+0xd0/0x110 [ 3553.657198][ T29] ? load_image+0x3b0/0x3b0 [ 3553.661775][ T29] ? load_image+0x3b0/0x3b0 [ 3553.666278][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 3553.672352][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 3553.678333][ T29] watchdog+0xf41/0xf80 [ 3553.682479][ T29] ? watchdog+0x1e1/0xf80 [ 3553.686826][ T29] kthread+0x2fa/0x390 [ 3553.690879][ T29] ? hungtask_pm_notify+0x90/0x90 [ 3553.695895][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3553.700490][ T29] ret_from_fork+0x48/0x80 [ 3553.704889][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3553.709461][ T29] ret_from_fork_asm+0x11/0x20 [ 3553.714250][ T29] [ 3553.719194][ T29] Sending NMI from CPU 0 to CPUs 1: [ 3553.724953][ C1] NMI backtrace for cpu 1 [ 3553.724965][ C1] CPU: 1 PID: 1078 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 3553.724982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3553.724992][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 3553.725045][ C1] RIP: 0010:memset_orig+0x4/0xac [ 3553.725064][ C1] Code: cc cc cc cc cc cc f3 0f 1e fa eb 1a 49 89 f9 40 88 f0 48 89 d1 f3 aa 4c 89 c8 c3 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <49> 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 [ 3553.725078][ C1] RSP: 0018:ffffc9000464f570 EFLAGS: 00000202 [ 3553.725091][ C1] RAX: ffffc9000464fa01 RBX: ffffc9000464f680 RCX: ffffffff813ab908 [ 3553.725103][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000464f698 [ 3553.725114][ C1] RBP: ffffc9000464f698 R08: ffffc9000464f6a7 R09: 1ffff920008c9ed4 [ 3553.725126][ C1] R10: dffffc0000000000 R11: fffff520008c9ed5 R12: ffffc9000464f648 [ 3553.725138][ C1] R13: dffffc0000000000 R14: ffffffff863d2833 R15: ffffffff8f49c9a4 [ 3553.725151][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3553.725165][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3553.725176][ C1] CR2: 0000001b33f0cff8 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 3553.725190][ C1] Call Trace: [ 3553.725196][ C1] [ 3553.725201][ C1] unwind_next_frame+0x1648/0x2970 [ 3553.725231][ C1] ? __alloc_skb+0x138/0x2c0 [ 3553.725276][ C1] ? __alloc_skb+0x138/0x2c0 [ 3553.725293][ C1] ? stack_trace_save+0xe0/0xe0 [ 3553.725311][ C1] arch_stack_walk+0x144/0x190 [ 3553.725330][ C1] ? nsim_dev_trap_report_work+0x293/0xb00 [ 3553.725349][ C1] stack_trace_save+0x9c/0xe0 [ 3553.725366][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 3553.725384][ C1] ? skb_release_data+0x634/0x800 [ 3553.725406][ C1] ? kasan_set_track+0x4e/0x70 [ 3553.725422][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 3553.725439][ C1] kasan_set_track+0x4e/0x70 [ 3553.725453][ C1] ? kasan_set_track+0x4e/0x70 [ 3553.725467][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 3553.725482][ C1] ? __kmalloc_node_track_caller+0xb2/0x230 [ 3553.725503][ C1] ? kmalloc_reserve+0x117/0x260 [ 3553.725521][ C1] ? __alloc_skb+0x138/0x2c0 [ 3553.725561][ C1] ? __kmem_cache_alloc_node+0x13e/0x260 [ 3553.725580][ C1] ? __alloc_skb+0x138/0x2c0 [ 3553.725600][ C1] __kasan_kmalloc+0x8f/0xa0 [ 3553.725616][ C1] ? __alloc_skb+0x138/0x2c0 [ 3553.725633][ C1] __kmalloc_node_track_caller+0xb2/0x230 [ 3553.725653][ C1] ? rcu_is_watching+0x15/0xb0 [ 3553.725672][ C1] ? __alloc_skb+0x138/0x2c0 [ 3553.725691][ C1] kmalloc_reserve+0x117/0x260 [ 3553.725712][ C1] __alloc_skb+0x138/0x2c0 [ 3553.725733][ C1] nsim_dev_trap_report_work+0x293/0xb00 [ 3553.725759][ C1] ? process_scheduled_works+0x957/0x15b0 [ 3553.725777][ C1] process_scheduled_works+0xa45/0x15b0 [ 3553.725810][ C1] ? assign_work+0x400/0x400 [ 3553.725830][ C1] ? assign_work+0x39e/0x400 [ 3553.725850][ C1] worker_thread+0xa55/0xfc0 [ 3553.725868][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 3553.725890][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3553.725903][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 3553.725928][ C1] kthread+0x2fa/0x390 [ 3553.725941][ C1] ? pr_cont_work+0x560/0x560 [ 3553.725959][ C1] ? kthread_blkcg+0xd0/0xd0 [ 3553.725973][ C1] ret_from_fork+0x48/0x80 [ 3553.725990][ C1] ? kthread_blkcg+0xd0/0xd0 [ 3553.726004][ C1] ret_from_fork_asm+0x11/0x20 [ 3553.726031][ C1] [ 3554.069509][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 3554.076407][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 3554.083623][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3554.093705][ T29] Call Trace: [ 3554.096990][ T29] [ 3554.099914][ T29] dump_stack_lvl+0x16c/0x230 [ 3554.104589][ T29] ? show_regs_print_info+0x20/0x20 [ 3554.109782][ T29] ? load_image+0x3b0/0x3b0 [ 3554.114281][ T29] panic+0x2c0/0x710 [ 3554.118169][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 3554.123794][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 3554.128289][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 3554.133827][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 3554.139978][ T29] watchdog+0xf80/0xf80 [ 3554.144133][ T29] ? watchdog+0x1e1/0xf80 [ 3554.148456][ T29] kthread+0x2fa/0x390 [ 3554.152511][ T29] ? hungtask_pm_notify+0x90/0x90 [ 3554.157533][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3554.162111][ T29] ret_from_fork+0x48/0x80 [ 3554.166549][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3554.171127][ T29] ret_from_fork_asm+0x11/0x20 [ 3554.175902][ T29] [ 3554.179135][ T29] Kernel Offset: disabled [ 3554.183467][ T29] Rebooting in 86400 seconds..