last executing test programs: 10m20.5443547s ago: executing program 32 (id=70): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/4099, 0x1003}, {&(0x7f0000000340)=""/112, 0x70}], 0x2}}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000280)=""/40, 0x28}], 0x5, &(0x7f0000002ec0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x9}, 0x5}], 0x3, 0x2121, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) acct(0x0) acct(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10m2.106049856s ago: executing program 0 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) unshare(0x6a040000) 9m59.988430572s ago: executing program 33 (id=133): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x4c000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40}, 0x94) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x2, 0x0, [{0x5, 0x99, &(0x7f0000000b80)=""/153}, {0x0, 0xf, &(0x7f0000000180)=""/15}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 9m59.850634424s ago: executing program 0 (id=136): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x401, 0x14210000, 0x81, 0x1005, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 9m59.635537966s ago: executing program 0 (id=137): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x10001}}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) 9m59.313052858s ago: executing program 0 (id=138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@test_dummy_encryption_v1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@noload}, {@quota}]}, 0x83, 0x440, &(0x7f0000000d80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlink(0x0) 9m57.547760286s ago: executing program 0 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) unshare(0x6a040000) 9m55.104282397s ago: executing program 0 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace_dev_match', 0x2000, 0x108) readahead(r0, 0x3, 0xffffffff) 9m54.649775816s ago: executing program 34 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace_dev_match', 0x2000, 0x108) readahead(r0, 0x3, 0xffffffff) 9m49.4470524s ago: executing program 5 (id=72): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 9m47.758824245s ago: executing program 5 (id=164): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) close(0x3) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11d) 9m47.106886416s ago: executing program 5 (id=166): mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') rmdir(&(0x7f0000000100)='./control\x00') 9m44.52578619s ago: executing program 5 (id=170): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 9m44.003749323s ago: executing program 35 (id=170): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3m26.939109409s ago: executing program 4 (id=1230): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) close(0xffffffffffffffff) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x00', &(0x7f00000004c0)='!', 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) tkill(r1, 0xb) 3m26.742660068s ago: executing program 4 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x6c, r1, 0x402, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x7a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x10000, @value=r3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x52, 0x0, 0x80000000, 0x11000, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xb, @void, @value, @value=r3}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r4, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fd67bcd1c6ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) listen(r2, 0xc4d) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 3m22.478814284s ago: executing program 4 (id=1245): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 3m20.507220838s ago: executing program 4 (id=1257): stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f0000000580)={[{@gid={'gid', 0x3d, r0}}, {@umask={'umask', 0x3d, 0x5}}, {@dmode={'dmode', 0x3d, 0x3}}, {@nostrict}, {@unhide}, {@undelete}, {@shortad}, {@uid_ignore}, {@shortad}, {@uid}, {@adinicb}, {@uid_ignore}, {@fileset={'fileset', 0x3d, 0x4}}, {@uid_forget}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) move_mount(r1, 0x0, r1, 0x0, 0x353) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) 3m19.60745378s ago: executing program 4 (id=1259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x1, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) 3m18.978844528s ago: executing program 4 (id=1260): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3m18.076654239s ago: executing program 36 (id=1260): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3m13.908382188s ago: executing program 1 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x6c, r1, 0x402, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x7a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x10000, @value=r3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x52, 0x0, 0x80000000, 0x11000, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xb, @void, @value, @value=r3}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r4, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fd67bcd1c6ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) listen(r2, 0xc4d) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 3m11.515838988s ago: executing program 1 (id=1284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x12) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4, 0x3a, '/dev/rtc0\x00', 0x3a, '\x00'/10, 0x3a, './file0', 0x3a, [0x46]}, 0x3c) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000000000)={0xfffffff8, 0x9}) 3m10.318716019s ago: executing program 1 (id=1289): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x1}, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'veth1_vlan\x00', {0x2}, 0x9}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(', @ANYRES64=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(&(0x7f0000000180)='/dev/vhost-vsock\x00', 0x1, 0x100, &(0x7f0000000580)={0x1000, 0x4, 0xfffffffd, 0xc6}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) 3m8.463299939s ago: executing program 1 (id=1292): pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x151b, &(0x7f0000011680)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 3m7.994332776s ago: executing program 1 (id=1295): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = syz_open_dev$media(&(0x7f0000000180), 0x9, 0x10040) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000540)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x168, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev, 0x0, 0x1}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6}}}, [@tmpl={0x44, 0x8, [{{@in=@local}, 0x0, @in=@loopback}]}]}, 0x168}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 3m6.870906868s ago: executing program 1 (id=1299): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8"], 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a000000000005000300050000000500080001000000"], 0x6c}}, 0x0) 3m6.243367678s ago: executing program 37 (id=1299): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8"], 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a000000000005000300050000000500080001000000"], 0x6c}}, 0x0) 2m23.749803582s ago: executing program 8 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) 2m22.062240756s ago: executing program 8 (id=1436): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc, 0x0, 0x2, 0xc, 0x0, 0x2}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2m21.879678187s ago: executing program 8 (id=1438): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) 2m21.664656862s ago: executing program 8 (id=1440): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f0000000480)={[{@noadinicb}, {@adinicb}, {@gid_forget}, {@nostrict}, {@unhide}, {@undelete}, {@shortad}, {@anchor={'anchor', 0x3d, 0x4}}, {@shortad}, {@gid}, {@adinicb}, {@uid_ignore}, {@fileset={'fileset', 0x3d, 0x2}}, {@uid_forget}]}, 0x5, 0xc24, &(0x7f0000000d00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 2m20.786069812s ago: executing program 8 (id=1446): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc041) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m20.350875882s ago: executing program 8 (id=1449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004000000020000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 2m18.08141592s ago: executing program 38 (id=1449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004000000020000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 50.41671658s ago: executing program 6 (id=1654): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x52, 0x0, 0x80000000, 0x11000, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xb, @void, @value, @value=r1}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r2, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fd67bcd1c6ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) listen(r0, 0xc4d) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 47.618040088s ago: executing program 6 (id=1657): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4b1, &(0x7f0000000500)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x3}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=default,uni_xlate=0,uni_xlate=1,codepage=862,shortname=lower,allow_utime=00777777777777777777777,iocharset=maccyrillic,uni_xlate=0,iocharset=cp1251,rodir,shortname=mixed,nnonumtail=1,shortname=lower,unieuid<\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x25, 0x36e, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lstat(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chmod(0x0, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) creat(0x0, 0x26) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 45.258165177s ago: executing program 6 (id=1661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x10001}}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2, 0xc1a}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) syz_emit_ethernet(0x552, &(0x7f0000000b80)={@local, @random="7004f5b37507", @val, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "31a451", 0x514, 0x2f, 0x0, @local, @private0, {[@routing={0x33, 0xc, 0x3, 0x40, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, @private0, @mcast2]}, @fragment={0x3a, 0x0, 0x60, 0x0, 0x0, 0x2, 0x64}, @srh={0xc, 0x8, 0x4, 0x4, 0x2, 0x40, 0x1, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x44}]}, @fragment={0x0, 0x0, 0xc8, 0x1, 0x0, 0x2, 0x68}, @dstopts={0x73, 0xf, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x2, 0x12, 0xfb, 0x8d4, [0x9a4, 0x5, 0x74, 0x2, 0x8000, 0x410, 0x80000000, 0x1000, 0x7f]}}, @ra={0x5, 0x2, 0x4c}, @hao={0xc9, 0x10, @loopback}]}, @fragment={0x3b, 0x0, 0x9, 0x0, 0x0, 0x3, 0x65}, @hopopts={0x3b, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x5, 0xff80, [0x6, 0x9, 0x1, 0xfff, 0xfffffffffffffffd, 0x2, 0x0]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x33, 0x0, 0x7, 0x1, 0x0, 0x7, 0x64}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd8, 0x2, [0x90a, 0x2e], "ffe4dbc75dcb1361a4fa1351177462f978efa8b00dd68e4169522d784fe13ee7eefc80dc629944d66c60b5d9a46b42cac4d4eeb072061dd7c5b43b2239bf326096230cb7ac03524c1f1f60e8f4e4c71e5b58dd98695275af674f2576a54fcb68f3efc3cf8d6990c93a1852277f17e44d380cc648d40a839a43ee101c4e0cd6103476e333d2b86da9f987b372dcfbe84241e1823b1b75c8691344cc6d1ab94238827804385d182c96e4c11c44b109340462d32f08bf0b04034a58d70ff50f7d2fe12973c98f38d3b3d1b433e7f82347aecdf0dd248c46948b"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbb6c, 0x0], "ad39869e6db15275c8d9377a5afb20d1a60c26aed9dfe27d381c001a74798b60ef919644d6f514147d044a98e86fd8e83308647b11490e7948ac3f88905796bbcbdfc8a4fadd76da417bfe573b68247056a03d59336abfa6f9c7a4e727185ba3a3e34f3b67070732497960a04df7fa79f1d5b808c7f0180acb608970124d3805ab2d512bf213c27a229bad0aa541e8881ef0b6eac82e9f4f4542734467c13ddf80a78afe73c11d0008f73197ac34754794f94a72158f4cd982acc9152845a43b232f579e1519a7e0253b0f"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0xfffe, 0x900], "064473b3ab43230fdcc05f71cfda2bdcb4afd4935d7d9515d4869a2158efefa765d831e096472cb2cb257e1b79dc3ad0950edc9a7ab89b7bb66131ba5f82407000901cd1f10fc6958ac6c43c4f9de244b10185be2156e97d7993b08d755b195a44e006373d018b1493906a266535e80e0724a01800d607a489e7fa2b98a6dda36b44f32bbd489df7a152dc6a01aa392211ae24863ce344023058a92efff8c8e165d2ab920f720ce22bcf5e558d3e"}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3, 0x9}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x4, {{0xa, 0x2, 0x2e, 0x2, 0x1, 0x2, 0x0, 0xc}, 0x2, {0x6, 0x401, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "35fb4a5b06ad992447b04d4c6dcf63af8578692d731d948dd7b15d9313acb5f1df4b976a0b6d30cdee2747af46b35fd65125273ac6c3f15d23d2e576882a8144e2dfee3f6d6269034471be0cfdb57e69c97863b5a7f817e5d0541b4edfe1cd9666f1e706f4d20a81870db94448bf147a662377ac385172bd68675dee3ab0dc08453896083d4dc4c6a11cb5608b2c6044e32e59c78a4f76424c0eb86d4fda6f7afa8ad3b5bc0122c1fb789bfa67ebe5b1306f261456e182e6db97819ac7677592e0"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) r4 = creat(0x0, 0x8) read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0xfffffffffffffce1) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x14}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) 35.455744127s ago: executing program 6 (id=1688): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 35.111509233s ago: executing program 6 (id=1691): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) writev(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 19.941400335s ago: executing program 39 (id=1691): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) writev(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 14.95433242s ago: executing program 7 (id=1733): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) ptrace(0x9, r3) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fddbdf256600000008000300", @ANYRES32=r8, @ANYBLOB="000100"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.776860518s ago: executing program 7 (id=1736): r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x32f, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0xa4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x8010000, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x1ff, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x0, 0x1}, {}, {}, {0xffffffff}, {0x0, 0x10000}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) dup2(r0, r3) 11.351139802s ago: executing program 9 (id=1738): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) ptrace(0x9, r3) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fddbdf256600000008000300", @ANYRES32=r8, @ANYBLOB="000100"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.151352319s ago: executing program 7 (id=1739): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 10.742712993s ago: executing program 7 (id=1740): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a00000000000500030005000000050008000100000004000600050009"], 0x6c}}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000300)={0x1fe, 0x0, &(0x7f0000ced000/0x4000)=nil}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000140)=0x10) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) gettid() 9.330744872s ago: executing program 7 (id=1742): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) 7.28908505s ago: executing program 2 (id=1744): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f00000000c0), 0x1, 0x559, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 7.150478352s ago: executing program 3 (id=1745): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0xffffff81, 0x2a000b02, 0x2, 0x0, 0x6}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) ioctl$FIBMAP(r2, 0x2203, &(0x7f00000001c0)=0x6) 6.755220479s ago: executing program 3 (id=1746): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x40000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6.146740547s ago: executing program 7 (id=1747): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 6.102837095s ago: executing program 2 (id=1748): r0 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x32f, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0xa4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x8010000, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="793ee8124cae238514b8c25ae999ed25fc14bf8b7b98a25a245fcba38072b1fedc29513a368f3753c8cd311777db79f9a772985bc9efa1243c41f1eeb4e1a07e2b57a390d4913acd4034182074ab783d616673714d72e8a273101c78ddc61411334318894a156cd2cc34f3f42052dd7e79c5c9c1ca3f59ee651bd294bf4d262b31cbe8f8f23a5504a804a083084d5519637e97e94880f549394676c0edec1af036823ea8c423a7792330b8491a5a4a01deb4660d6b420b1e394fb1cb9cde473f2000fe3c4acd591851c258cf231df8c46dd18cc78dbb72189af635ce08b35374c567aebce0303b716c9cacffb6f60e102f9172e0e1a91760c558b580a3c56b5682ade32ad42e7df55faa4e056f3568abf5dea4415018c211637c362ec3c40afa47a2960a2bb4b6936a83223898564e2667bbc1fb774199c99701a726073070c0e19f57a63f4a38d1b03a0c98f8fd20666abd5e66768182c4df12343bce3e617f62d29f2faa1d5fa831a0a582f4708b547aac5129985fa32b345a82aa89958370c1d331935b304a8ad2eeff24f520e667a37b7c0d8f93d35546b8300ec3dfebb32933938e32bfa54d563ef22bfeb6aa8f16765a3f4788e03477fe9236e3d5869335ec18058779c5e63ff5877369898fab14e58cd0608f6f4d423eb1bf09a6eff87d999fc9e7be28390d471acde8543d571246138da540956867a32f3bb1d2d91931dbcfb8ade5cc313dc54f64ad96b7ada7ff63ba1702576d2bc48a1c6cc4cec815e0b8aee9c31d5c5cb119952b8d321181c1a14793266df2cab56d161111caf86d4a7eafd42c2622a63862533d1ddbec5fdaa888d0a03240bb08476198ba789aa552d0ab149a07977da16d1ed4bc635d94225d1ac84c788407fd4425f5a56f687dcbe688b9d0b26cf86671f985028e2ae3592ffb82fd5587ccc3dcb406969e11be470b519eca6114895fd8a4b93b1c4d1a9ca4e0001a62185e72b6cff213c7ded22effa555b45aad686bf2b388c0530058feade244e0672b02128946c190b4c076fcde7e0bb6941852e2c2b90d5ebf53771583e749dc07627f840808ba034474da51eed8b04cbab8981fed4a96fbd4b7ce98e93afab9040581ee91eb42f5d5d8ada63cae87711aa82f8493ae3a64883b99a1a8466a5bdcb753927f22487f01f7782f7e8278ce98da8e76b5230d1f21fa89e02a5f59ec8ceb7b5bb90518a8745d9a43047cb74e9591ea0a0db79601656e784a9321c3d7ab6a14b3d030e3deb7aaff2a2c89cf7ee0e2072936dc7b43ccd6233fc75eca52994a6e9f8c7929f6c370c93aff6f46bbcf05c1d85cd5b126fc08cf1cad82d3218f4127be9aa6e21bba7f1fb9cc4ffe5fc293b903f5ab407d67418a24579704f9df8e08ea157c480b3115d48a9109138f6b391901367e66a7f7573bf20a6d12de0bdad082f08599f912e8860aa4b6a6ef2a5ea071af07be64925bea34913660918032b72b55d01f1d8e09a4e79d70b4bf9f43fa0862fa75d1a0eabe3a769d3df7bf5ce7e0449d54295c06d5396a8f049294e9ff6d60687786d7143e8cbd23c30e36ff7dbeb266f6e63952d65998d844251dcab1cac0669bd0561b5dfefd1c7e0ebbc1567526797b64c97a4f31f87de4e034071b2d48fcbd15ef386ca172c0af3d71aa98744047ee463b3a20a1ef9b8bf1753f83d0f3ca9604e2234a71c3d00f78fb8a0d093af48f2ac0a15ba0c7c21ddab80ce394dc6e6245784ea17dd3949b76e3ca91fd29ea51afe5e50d71ac1067b665d8f57ae49a7fd635146e04861406681637fcf6b53c1404b9b69f4743a93874f2953aa827aac1b5462c852beba5d1080889d05741a11b86436589e9d9e6ebbb3fe89da9dede91731ee70851c9e1501beaa155844f238b299216e69cb88153d20f113faa9a51fc147dd31c5820b46c0cf5136d08761a6cbbfab1652c656d6f7dc7ce1e6a084962ca9e07ebbf949392482b9fb942b6025b71a903ac99ac858d99b7eb46e92360de03a0631bf77763d8c098879a9b50907bbf0d6868ea23eb8e471700214d984d661040c51a4b01488718dcf09b3cd50c720b627d664fee7a1ea50ae6951bc0d0f6f59839ebefc18b99c844ccbfb3c4c04d19f07879ce06a3137b59ebf4c7daa52e1d850924d4cf76630101d37881f30e914346ff4f6e73cdcfd56dd81058cb6763110d88d34cca16cbc7b51953d44e09c57b3565e6527aea04949cc28dc502811e82c8cd8ae181dedfca4a47d3b22626eac388f272995add71bb5504a38c03b5ca8381ce09f10acb5f5fade0942f30334a0ffd03dec00fc7a4976a95851d0f347fff16e5e6f663c5feefaf7efa743b2766f1d442ef882f4852318c25a81b3d2bd4fb5b683e3837ea7d4df69fcb8a87788a3a0a759c86877cf56caa98f5fa04c71652d44bf5250ee6f9c54794bed3b48e33a063161eb324456da5e28ebb5ba271dcc826bf7b646b6c89da67605cbb953c35c070e76be46ca66ccdd060fa07af82d53c525c19eb8eb6e08426f160340ec8ec6a57a5aa146f5b67d84184a46b4b8a1373669070123f8346cb607be14a4d5b9124b369289b0ee7f184d498ae3043b14f3ecad6e2b9e71661e85e2dc0b6b053300468d53e36f1e99545a33fc1b84da6fc20d8f7f7f9ae614588f351fa59c818ba833920164d9b434052f4e788bbdaf1e9913c822fca65e0cfad203bedc6be2abac264a0cec0dd4e813dd84d28d853cd9b85d9dc94b96a80643dd3e2aaf73ec85566124204f7b98abc8c5e354a66dc838c080d26cebd3bf388eb8018a06b15708311043a785a937e63c09465ffc71d1658d2a84ed6b346b68e98459cd0725efde386cce85928eaf90641c5ad4a7f1c733fd5238bdfe348456704546afc4a982b42e3a5bb473cd71dfef785473ff88175d92d2f72f1ac5cf77344c8dcc07a78be9575f1cde05e8c5e2950b1f597a21b4351295e9f59e926a8b03551934c73f090ca3fb644a4e95dfa91bad452f59a5cde71b50e8da90ead55ea96181cc1b5c6deea431f27666bc67d36b26004aac6c02c29c80c0d6de163660bf56c48bbd7c5a06d1ef622d5aab46a746b6fad00ef47ddad8290ee81509ebc19cb85acff4ffe3d9123774b76ef96db3cb942776eadad084bd7351c340fc219ea696df3657a992792890bece7dd84e08af3800535b0a0946f9af6ea30dc20916e133f8eda3aef83082c1497d606fb99e81bbeedb70d9d32f93fee0a2090136746fde09038d1f8a7ae494ac012665f3db1119c49650012ae7e172f9be15622d0e2458c431bf386b5163c444e2515f1c99d56d2843863eb5487bb346d324bcb163891b10db02cde5003c111c984c690927580964b9afcf6c6cd1d9ccf30339f3d7fb8ac348604634848c85bb9a11969152d2b1bbd870c3fd95251d38f39a5ee0d48962e414ef7225150dd3134a87cc954eadf8e1a78ff8914de38f4d9dbbcc01553d2992f64b14377e21658cf2573393301bd0a46654cf5fb5d6a1a6f452450db63300b3dd037c5678c85f84b7dcf52036bde51f6af406b82b8ce0c3bb64dbd538dab2e6ecbf4da5a57d43ac5aa0e2aa1cf466167662d088a09e109a95040865fd6bcfd68e5f6d6f3990c82f201da1bd0f4a5332bf6155584afbb70197d4e59e829312a3db47a7095c08251a7f574d4869177ab8c0a380adf87be8a1a016bcb8061e3f2a3f69661cfdb54a48e951c45d257fd3efb8dcda01d25274df0adcc0bf797caeb9296322738a972d8e40b07509e3505ffeb2c08793c75783a4c65fd11dc5af607dc3700cbd44f431eb4eec603185dfa8cc5e4693b737bae7c8b1ecf24798a3c72da8d688f5454947c99c339b752d027248ec9c08fb42df0a302ddd3c823ca1ad9cbfc2b2bdf3e7c9181da0ba1878ec434b5049163ef309892652ccd365df8d8260dce74e0d9a0aff0e1e56ab831bffc582f5d13d288dde7c3bc1548cb446d54f360b6656b99ad812d7f98e71cc21918336b1592ff22cacf28b602c4f3053a619899a5903ce80dbba757f6012ee4dbaa375fed540fe02fb66c82841606429ad00685c6fabc130b9b556020fd04b39b1fd0aab194c85a0fc95fc51ea8838ccf388e77cc85744e6770e75f570c0abd0834135192a9e1a54fd90db93b2ed733e3c2491adfb3bd9078b9c75f6157c7af332d7a3f3f2354539083b05100b9dd3ca90e073df2c2ba3f348c780151ae629afa20870dd7842f5c71f163accc6376370a7c5cab922d09d87d89aa451c47e8f54ee5d761d83b057d31120ccb26c818ea1ebc0683ad26e3b3cc62cd3be1f622203c87f39f0c5789be119589cc9ea57f0b04592bbde0a18bb59e36b6e92f4f7ccd01789b58adac60c803c8f072a4e9c280f3245604a2dbfa8ba7c21a918654c75fe48b5748d91112f5b61af65da4b355bb8f0a180254c7af66b56a7b1790afb8d589fb386db3cf84c5f41545a6a1a65ddb6f9888b5a08787626792bc609f397978310263858c2209230ad88965aeb1f533ee3271c8cc033ea128a181032e0fb469ab8e4e5453ea92444e02d4c8cb2dd7289225d070d6a0f22fa73512466d458b343ae80a950a92e0df66817d25ce5ca5fa64e5b31e3ffebdd8ce49d66fb31d01ac3d096889b30c6a7f50b7d50f422d2442ec56c10e61a41054c150c6fa922ae176e4aa82eaede99a5e6249edec0b066fac5caf6280079babdd528d2f4c0556f74f3329e7f57e6f56b8a5423894bcf87246e7db449784d88c9e459549ca7e4670504427d95a9505ca2a243a28475ebcb2c0380b9825bcb9eab3a4a7fbdcc85ce514b8e839761526508d4d782691605bf326297d5ceed21e6832462194dd8dbe6976f4a3049e48a0aa52318f49be25933eb3d9ca9b0916c90a17dfb22f8066dc95d0dd25925e1ddbe46e589523051a34514f3ab114154e0ffd9ee0a463f4c6d0e0734863d081049ffb02f906fa30eef1d15b6dc95fd71a7fe148504ee1d532d81aae2e783746c821a40db2dc03119d8b51e56e8624473c709ce339171737660add577066960031b6f7a1d871a1c6b46f678a85ece774aca728ceebdb4a3f9b6ea169cde4bc390536f71ccfb63afcaf7c8e02cc90d47a238747d341508754dba5ee0200bf3c1dd38a56bdb15161709297308f0d4aaa878078b9978cf1760a3d81ddef482baaa47d4578fb492d749a824868ea6de3a51a17a0dbefc4046156e0dd28f59ec4d5099b33e66cfa369438c7503e5c9a4aa7a779422c51154c21cf12ecf3233e3112751a29bec131d50fd434bc9825dbf528e725cd4299d9d3adb3b4d20adb4a721ec7e4d2d4f1b3254a059b24ac500cd11871098c016394b5679a696869035dd14fecf924a2eb20dab48f86270c08e19f41034a07c3cdae33e0322052f5fc74bcda7731ceb5eae50de0e3643e326f7d40d76ca124e59fd6eab80e0c40a4a1729081f2078c878f506800189b4068064f8003fc38c20fc666a525ee19b128cb0b341988868d07988b175fca82ffe8da18edce9dc1e3df170d774cf39b740d153a903497701bd71be079dd8211ad2d3a9eaaabb2402823cb8979797af079979c1355d923896e598132fc991e4e532310d0e25c5ae227d22c014400127f37a1828474a53dac446c508c3e94808cc5ad2b2ed756cf2f04dd62692db1d83019d1500d146c3e0d765b8f12ff650d0fa8f83358a761f1e54c041b134703d8c3059aa1f3106f6011b4df33f2dd738c2da81b43cdf9da65b5033c829d4f5a1a6c1cf8ea2e74fd5fdf2e751b62d138fa6672a12fad88d128872e6c958f4902a6b444b17bd24dc2dc0b9d27dfa5d11ba700de9b116ad2679c71e8d4d7de323e33f1b5ef967e87c7cb1ddccfc1a36ab7c27a6b969751307b55f9237040afa34ec6d45f575841afee0053b985b889ae3e016202fe93012104e13e99e9c2f62bb978f0b217fb1f5ae4b1e93845f381c47529f77f7b642ce8cffdabd1429bd1b95174c33c144fd00cff2fe538e5837d62b593a9afc7aecd2efc25b565dbf9420348d20169b4f556d87cd415a7002690ddc8332099043f34b32e83dfe9651f94745645ea379d97f82eb1fc24ccb9ff51a880ca28016235ec9ab7e9a23d05f48013ad867920cb5974e06ef48e73c46e57ad248ed70442d3e0575b232c21c84eef0f84edcc714deca1cc4fb6fb5b201fbbd94e9dcb6094bd4cebbecc690d00bb940c6c840f69e1f9e2babe60c014d3f5b292c2c45bfdbed136c08a11d2e1aa7df5839cd7156f670a542ca8ad23ae0e564e8f87b30407cfd498191b902539585ca241bd4a4106a4712383140c6ec6283a2bf74454b959b8677c23561c73f9feac98a7b28fda204a87984570558ab269cdb23184d374ab172d3d9faac113c450f2faca565007b7c5013f02c66c408c81bc731f8559802fa452a0028bbcfc387389a00958b9adb83517940dd6b8f1386b971b2d92a4980e486d7954889323f6f8ba4452ba0002c984e6aa91d7642e0f8e92321494394b264cfa30cbaf9df96bd62d9b098554a8a8554fe84c95699a87b0da4e541d9395c5a4a69302bd3503ff763467beb111a3650287cebc4cd0804841f3990899992d2aacaff2bc1f7464fd9670450cad2ee153e8ed45331f694048fc0c4e2e7d034ab69e159226542fdb90449da050363bf7b683a2215bf5272d4c18fd2ebee8bd29dc180f448b1f85f4429d066c692a350aa9f036ee43ee74f942bba2164f692cfa70b79cb8149a6a79fbf3197101f75933cb0458dc2b9ffd7a987cd9a139cbb853064bc62343e305052a4f77e72c98760b972ac3ac84b374f4422bf44d15334f38291c61ff630a818a34d33d516da256e1ad5e187a79846dcc087a761df9e664afc9785115a6b78dca0908d0957be795a3001ca2d3ad9fc544f992660b643da5edade7890217d07452ffa7454fa59907cb325c9dd445fee201bcffc8dce888da13059bee2286a5ef0e863dc107478f12baf983209060b1aee7286bee1e699b84332327c845a1574b8a0897eb1cd31b4a7498a33fe1e2dc4f8afcafff76eeee019c8c73cf8de0285e342e08ad0a9a43f7260bd5fbc903ebe099c73850982e2e8533c97a26f67855c155a3bfb025b2277e9b627a0bc860c1be18875241a9f8b4fc61039f9d71f7bbc537d2f51f1a5e840dbff7786f4a374f51cb2e657a6f2c8052cfc3ffa7e603a1266df3eec49c00a40d6f82b1b4a670b99534f401866ed6401602f8da9bb7243a97321cfb7540734aee1b75cab753db13f81a4bc67bf01bd467c44852bca45e699bfeb783326f631deb5d22c47b97d9d0c2adbe97c373e149321613a0d6f25dd822d8fa76431b97e88aa397eb467ffaead4fe9c196fd69b81db3906f3b4eb40fdaa19bd5607f7a3bd442c88731014da0af1d33be3e63f3967b00f193e37419f18df4f013017bd280091679e14428cdab0a8a77522a2b6a3337021d3bbc8b7e8774fdd2f387d5d455d10d91bb7c05a15e2950a51b00edea2b5723539770d321c8f9d4e5d24f291e033acb2e4a5c1f8671fe91150d023dd031cadead806bcfa69bc44946935d1e49a628bfcbffaedebd5789a6828950414052d9f7d261e69c841da3291270d7387662f74e20651b6c75722b530aef69cae0c2c9ef5663bedfa37e0192369c3aea78991e0ffef0bff4157d25edd29acd148a3b255157a84c4dfa25b5af681fbe93015382bdf742c1a5076caa52b5370943d02fb98531be900ed3687b4dd076daeebbd3025db56a8c7628a0542a4ac23626b3549abf114127627e44f5df17a81328bd84132e36cb6127c4081199b4fca0dff46021396038c37c832c9bf2fe43729ea45b6ee6aa5f34b2869965f78481d56e6f8ca913301e4fc61b2616c9ea23dcce1f9ec2a0ad97959f00e6c1a99fe5c9be180e1d03826b433a120c654171afedabd20fa42b8bfd3d0bfe64a560cccb9cd001220965576e6f1664097cd3e28d9bbb63c84c801f832e7ca8afff3bae368b66b3b62907881a3c3ae821d5a8725cd11fb3219eb956dd586254a88ab4788e432da28db60a4fe97f203e27d4052cbee48d2edb022d8c72e2a3499378f4ef7076abf712c3a24ba10e43f8b0efdc226c8b10788f0160d1ed23ddc002ea200a4825dc9bf25f56d2d134d25cb2603fa28df93c58820a7ceb690a950f7a6fd1b893ef414d50b57468343a96f55625a141293e6a4e8d0a6aa824a0c31b206c75b48540dc46b20f0f55e5adf8c2514b01ccf4f15faa43df71aa711f8d76ba335a881887c0648aafc434810bbf808eebc1cc9161ac4e111496e4d68400d52c96dc93abdb47ef1901b1674888bb836362786444916135e22f9b10d37400748d6a11fee36b75e6caeba02790665045a274e50ded6fa969fe715751d429c2ace6c2faa5848ab1417e003c49c29d0efe18f1d157c5ac8cd3db4d7209fec82c77b7de669e8d0034eff8c2e49f731f76b0fccc9b65b6a8ed1efe50e407570d73c61403eabb8c376bd3326e57d490bcd74bc1a520cc4522ae65aa025e4782d54a4f82a042da6f9273678de3621527a6f4bab529c7e17726e094d00eacb739e931f3afa8dad84a6d1e89f8024c194833742b967e4cfc8f63fcbf591fb469e25bc6a9267b85d4031bb4b434f2f0b2c1e38dd27c894b029b41455477b8d69f95b8dfb7a22890ce7d71660c6f4a84dfb843172d711f9520063a7f935dffbc10abfb0f44f95af6fa49b2f0fdeef56fa960a98f369b574435cbb18b14b96b8937cd2f6737075c04dad79b77b786f203b2951e4bdf1228449a83306cb0e5a98c3976ce8b63a389be9ce4a5adaedd30a4e069152c35e49bb0e42a3873fd3c88e277cdefb816b0286ad1f12d6ca33805e90e4391f5a59bbc86479c9bea9d71fbc5253cf3017fd6862daf0f72d52c2bb44247b6a303722387cd01cefcb14e79bb6fd507daf09833aa094868132df358725a4db57dd1e2e37bcb37536ad59d8b68e4293d15f38715c68885126c0fff1eafe295aeb4a88919561e03cd4f7436cea1ee69bd66e308425e41eee1dc9e9609ec211aca2cae25ed4369c9fcd7bfe316c9f2b9707b6e3789f6c41a70e28121a26d5591ce94cd60900b27ebfb995d34cd509fd0c8fe204969e5ef6ccd9c1605c47da01a437cbfe612d928a63c83d998dc2de6ea4695f36865febbe065db2f75c2a700c4b23251fec61bedf33e45eb8fde785178647999b9a0069aa45fa01f4ed8ecb072de1e256a8b95365831aa975b249f57bd38064edc6886620ad24ddd589dbe3587c23bf12a71a7edf34b8c46a079adbe410fe32abb408a264a01f3ecaa115e4ad2e47e9bed54df1fcff145222c544c89b15b2943e5e6ce37477ecf4e17fbe33d74e60461c52c3682cdb7b0d1ba016cf7756ae9042b296c308da630b7021a20c71600b21198221a3fb905c2716ea4b6a35af3fc204dceb81bb4270b51a7f552e33aecf4a704b5c6e3538e7d91da4166d747ed854de3dc15ef3b07a04d9237ce0351b446c09cd2b4e87aae02e08dceab1d35c31334520eb3979617928048d3510d9f3d5db36477fb1ec21ad57e7d757eb7accfb1875b59bd1627b62f33ca853e11b211f3a02500e43c5655dac4c8ba62247da245453cb690700de3b9521e5d2841fcdb73d550f4ad20f53b3f0ec2f229e7bc564daf94a42044c2a8f93b13d11e9e27562c290f47017e507275f12932f3c608b2ac955c15cfa100fd5df86a223d4acd4350dedfa26d15c3e3595cb003b1187a77f784385b59e582308cecfd6e53a4be286e6b27b2e66dff8a578f30bd89f5cee1014a55423b5297dc23c5d9e0fef458d8c5df03c989ff7f1f0ca8ed10e97c1040e07bcccb3e4bf5cf8e6ca08a23fc75fc861e6749fa29ac8a8be70c341627b0b8a75f02eb1493ca574c98fa69efb5d76261391195687d947dc785a712d61a7e1a9b954d5b4c159fb4ac0710eacb0086419d12176681a911c10364011b151edaa0323d1a1ae040f9f26be099465a8c67fa522b6805df36ac81cd422e4c34028882ceec4b4fb08d86c05aa4c16a02fe99eea84c75a0821373188489198c2296f290efd5c905e1a5ce0091b4da05e376a416d80720e14c17d2bb84b91cf989fa72c3822d37661467e811b0b1fa6e4948dab66911f5e0394d211e773d66ab2c94a4a14329abb1e9307ff36701908ef85cea4d8ceeaf24520b53ed0e401a166aa05f821cbbc5d1f0d16e4e5d14a4d04e5e5224a2b5a7f34dfc03b691487e1d7199675f00b137c37a87cfed418e013d0b3c3862da3f812d2adda99cc8ab4da10d3ab9d392bef7c9b11ca49fcf7f7af9f6010772b1a04b143eaf940d56865887b202fe0b8f70fe2d45bcb0c20e95abdf2e76d32160df1fcef36aff0ce2e9af3453904f7b2eb43a1bad754e3f1216258f49d34fe6462354366e82a86c4ed81a4021afce5b66039622c6b9c9a24c5f0e57ade4b8e64104e6bd4237fb98c55a6f3c2a5128e96c14bdb1615a0b9c0da306454b76d5f698e321d48719a3171083b41455f59f28560dc616250be61a598b1e753943ead0ca5270bd2039b2f5e480349455011f86d2d8f46ec562f8b1e57872576127f3a050fc6e32e7c4c4c7ab1d2855e8c8d649b8eb00f1d8d02c80a39eb6c1b23fb1d5ba28742e217a02276c724b8b32ca2d39bd3f71cc7fc2a9dd52a28c4ca566038fa2967881c9303ba138bc8054761651e7ee7e6b8960346f227a07007c74280f8419e6baf856e2473cb91ad9c206df2f7a8073ca3462cdb23ba5dd538efa2af2b0b43049a29931e315c4c9290b99c7edeb7b938ea05bfe3744735fb2e550a7e15b7d7d6a17dbd87add165d7a13668884fb235b1fd70e4c3a67895ea0c9b8824b8b14d41a9ce80debc8ee3bef4a57d40994d2d422e2621dd9fdcbe1edb712ffe43774cbbe5839a8146a936317310c3be4daa693685262ee3a44aabe86281b0927e78df3ca4086a81e8d7af261fc51d3eb75cd8852729adfd68579958b61aec37f4f6bbecb4a3f09eea3ce0a49d35666d1050f65da5d5e917d79390d0133e81d07aa285c53d3c7d3bfb82d7cb8e6ecf4f8203b78787963277e98c5dd8cdeb2d83b049d9671b98563eb006ae8148215eb87004551aa357016cf88caba47d4fe3f4209ba0190f5020c5a8ae6e37e60c9a3fe856fbbfa0acf3dd1a2953fb31f0c913a9f8bc6a7bd4feffb8dcacbd764f84eb370cc7baaafd48c9a8972b22c989a49b9f5ca332a1331fd591d412892f45a080d6a3f5effc802364d0ddf03cb391d97ba4fc8371a91650a8a28c5e6221f66d15b4a4b0afe7502034a60c9a1bab525b51225ef9d40ba9a5e870faf19fab07933f2840c4ba52b9a82442c207147bd7327da8468ff6ce98c3de6f7092db9e1673dfbd54d31c4f0462524483edc8f73274137ab5770230a87118751f97d915644f793da732cbb2936c08595209fc42a1ee095591ca9ab503e27ff19b5ee3375a79921f3ffae984a89b1e49eaf21a9d6c1d7c14138b97fdbbf824e3bfb06457aaf1b78ff393bde10b7bbd9bd2d632013d6dd33a12be84dc33afaef1a6f259439356e89290de74007e1bf127594db485b9d07c2dd67876401922bc943a45c743377c", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x1ff, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x0, 0x1}, {}, {}, {0xffffffff}, {0x0, 0x10000}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) dup2(r0, r3) 5.805078896s ago: executing program 9 (id=1749): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 5.731092866s ago: executing program 2 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x6c, r1, 0x402, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x7a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x802) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fd67bcd1c6ffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30}, 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) listen(r2, 0xc4d) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 5.442734568s ago: executing program 3 (id=1751): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a00000000000500030005000000050008000100000004000600050009"], 0x6c}}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000300)={0x1fe, 0x0, &(0x7f0000ced000/0x4000)=nil}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000140)=0x10) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) gettid() 4.826686692s ago: executing program 9 (id=1752): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x11c, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000004c0)="761521", 0x3}, {&(0x7f0000000680)="3fdfc640809a40bb268c5ba4", 0xc}, {&(0x7f0000000700)="1a4ec6ac1d86c677e6c7ee966002b9f8181257a3e137727797b1c013e55ff9b0f0ed2937d1b03b968357b3ad83978955358f579b219bbb5cb05a9fac4757e297f653789e7124680e11fe0a638409568151465343c909aff2b5490dc6f46877857d", 0x61}, {&(0x7f0000000780)="67c64bd7175d5aa89ad4d096cf4a3b6ca516da77f8bfc0b9296cc8181b011d8dd467fbedcf3cd00216296e5010a58ea6b4a89132e64385491ec9f433e8558da9b55da389560ec1abe2d13fb4cd555d8efbee81c5a032d56c7be617e81172ecf0328b05f5e51f3b422aa62715e61ffed93f6544beb8baa9eb43bef983e0f552fca8525c025d200299e61251f61244f57a78622f27bcb40cd28f06a1d7aa06cc4cec7b8ccaa92aa5f11606e6f887abea619beb5205c7f7011150700306ab4c1277a7330e95824baf77a9e33cba33f39e977d332f9f762c818290dc3409bd37b54e36e6b5d8e1805bfd39b084e6cefa11494785a81cdff3946bd4ae7f71c9fc6868226d8a735f45444039ffcc941f35d489f85bc4ea1714cef81b05929e9e44f9542b9ab124fb888515d024f39f30a8279c23c4d5cfceb5bae9289d63ff90e7348043366bfaae68d2ad9ab5ec47e1ec115e55f048da5a4739f527fc9f4e97b512d0cd750ee133cac19b47f2475888f53339d267de1fda1d1b2d1ddb2dd7694e62dd8834d6826a91241edc4070a98321b234479e8f11ebd511cc02e7f889fbf9532b3cdfef630a0743a43f6934a7b3aa668a35f08e7decdf66a60b172ccba6542258d1ab9fc8a42086b548ed7a68d4fb173b9cc0fb9699ee20de4d2088ad7857ac915eaff26b6479a397a3dca441499dfdf5ced12771ff6ddc00d7ae119f3494a72fcf0efc8ee3cd8af56d8ea6988320a04aa094e421251f582aa032afbc81486da53a33f14841cbc15290a45ac82ef6df1bf0e6f6627f9b35cc6cb2bceaf2a84798c18bd2e6ced8193ef27e1eb546e32afd89f3282143bc2fc715123a6a3eed407824a0c86037b5f0d3c9f7936e99d322b8e6a7ec07a1f483ea080f0a635aa58308a0ce55ae5baa2031578c2c3d7cf8f417861967bcc6f0da43e7d07459ff11cb6791eb27e51fac81f39d429cc6df59884f19bea48f95e074be8a5752451a9f9b98163be5739c2721904d322c13eaa42d61be156958824e0cc97442715a5e26f7bf8df8c259b69c8807f19e169af26dd125f38ed6ae1f714c329d44b34e4715e9ea705b9bd09ba45ef306bea6994a1ef6421b2214c486e5dedb66719451e49597487dae2a676dd497020dddece2af20dfead969d36875c34e522fc5ae18ffe3451602a6bed8e3da986e7df1998be503f18f1d69a8b1da6244eded71f0e8b1ae4c4c6a1467876688fd68c6e2a65a9f127639d3e88ae07406ae0cd85c9632b392274d5298cbe88f2609540efcaf3a0c8142a6cc759d2463169348cfba8cbd24b079384df1141624989d75f8d4175545116f2058dac5822c59a1a8f03c91347cf12955c4279fd85a567cbbb0d1afda3b4ed86e00f45bc090b8553f6b7a0996614d81b5969598d4eaa76ce80ae4ecf47b105a3f5d1d09ad2ec7688befea28129445980e04e3f2e1b662158c9bd1ec66f9ada01fdaffd887b0014b6a0a32894dee6c77c7eebaeab8e40c9a27c8e0da694cfcd133087944c4558eb3e422968a64395cb13e99cbd438e1185af12ed306f8b5fdd914e72917be46c0da701d8f90cd208c33c19d1af88c7f6457b27b9309740852f8ede14e358ca7beb39d9a759e28a20cb7b06dc530ccac36593fb03324c42892ae183449fb4a84c5f37607cbe6a1e3531a03329f5c6bfc7d5586c6ee70d2a04fae022b761257d35460b387333e5643868993c0213afd381d2c6ba083ab2a079ea910fcb12f40cdde4084cbbb350a80be56793c56a2b76ab1eaaccc98b8868f566407cffe515ec4c5ea54b97e3eec054678ec2b8502295aafbb05cd8cb0076b1c95b2cca97387c12a209fe3ee1707069446b65bc07375afd192999c374574f11bce36dc57136d07f0d50e69393a388f44bc5f2ccbd2fb60de95a48338307dd10b81a5cd7079f4a92e4bf736e1224e0d9fe84a6f83f9b362a5b3e02fc428daec16cf4ee3b1df7e715d3fbe2310e5ee09a09a769c0cb5a3613ec0c17b87584e4981f7911a402da58ffa8888045f4b24a86ea9b0bef322df251c347068a056cca5d5e2386dda5136ce416a42f8b7d62181ed9c191692fe78e0d0bc26952e8dde68babf5d7c4b01af04e62905c736b55ebd2febfca9c89abf67d7324f817af5418bc26523eeda7a06cdfef9b9675855dd36088eb2f9e31476f7623ae328d1d483fd7567d0c7f1072f82fb58ab425fc02cf9957159da6c82cdde3ee6d17193c85255df0246abb680032d0411fe13a6cea7c173d165cb752bfd1573d9e0f3552eb649ea841a7c367801c2c969858fac4bc4c36a1a8688bf513056bebae7c923481bfcaebec249480baab4ae0fbd13b811164764ddbd09ce6ac48b0b85089efe7932ebdbd3a2efe1d10b311423e35706eb91aafac0915cef780fbee9ecb75c0a570021818291d9d6b1689fff8d51fff86d7658d89780536567d09b26f3e6d6022bde747adb7e684c1fa537936e579b34562fea206b2d22ad17ade65d25da39ecfbdef16b482046a4131e845a4e391b671cd994a6c697c24b4577832385c0a7d72af62ce50bba290b3ae8ca5715c21667271809860827f202ee3f4caf67f82fee89c8cba3a56e0b09ad4fab1fc2b18ca69d4811ab583e9d4d6debb517b1dd96cb2c5dfd267ba0631dd3f0c200c8925f314134fdc1d7af9f7f5fd2b07ecf37113fb4b6e1581de730fb47135b775d9dd5e12a4eb042651983bcbdba7c4747abf5592c0332159aba151c3c71b5611aee41d9370877a73bff6ec1dc32e9c7b9a61b8783bd9d2ca08d01d6e3223d09e122987e59659f09cbf214d389140e52e0bc1527d25a8c28267b3132e4d82edbe416f6bcf0357e0ef0778b1eef80e4f854e9def4829fb1e2b1856e5053a6a86fe62a3a8410a34d9b1c06136883383bb8cab6da7134c1ae77de3372138114b8ed657d777df9ace4c9fe214d27841ab8877daaf0a3458fd2c9e48572f3b2f32676b52e2fe54c46f8b69f4f36a5c81426de6f432c82e8290b77cf471817533aeaaed11936eba963668cd974837894cb52fde3f06333b43ea964929fa0a7aee2ce092a1196d26cad4c53b2f753b2c925514148cf309d347f2eb28910d003c0eabf8d455b52c300ee77037a662f411a51e58e410d43708f80f3fbc1b735e6c29ffb534c4852664c4628b7b3284d520639e0f7f0ab45e09a55135ecc153b207d3ec21d10f374273e19be6ae530499bf770e4b3e382156feedb1052b1df595c29219507dbabf0ca852d9a72730d75e75f11909426423591853225d02cf5ddc4d12337c809caae47e88c9a45f73199dae31d3aabd33c80a25c6d26bf47666e6ccdbbae27de19de47d330b03df6073289a198514b50ee1a2ac43eb240d7e6f449c44c6e74188aab485c7dcfd10e91925e8ed65e706e78f061e2d54871460280be605e2267c0f9588b4bbec5b28c84a18fe6fb91350159ff209a3750f2c1bd000002754514f3d576cde6452b87f1265d3def7502716bdb277e21fe15f2a4dd830331dd52ad21a13e84a48d42cbaa613695b9731dca8a5e88061d2e9e459ee324946661b03e95c58c702f4a9778784fd1f8dbf98509c9054da12a702f5924fa4c860dacd1fea1255b4c7866834b521fa1358e13e84fadf6337387235a3aff75e458099c1a72b6bec08ef7253bf1c341c966d8e07517851ff281a274b4c1c029647db312f81ec2caf870d7da7c1637d2845eedb1b30211bd0d61e7841261c2645785304a0737768a732bce11d9ce47ea4f7782ff04392bf2fce00a0af4ad0481a5147246c4c3eee5f6ea0dc69f4693942a04d919e69f12b19d9d1b1e87a937fe7854830c714764313f4c6692eef041f862c9152853b4581f585ef7f1bcface093db178d923d48aa1c7d0e1878bee67285617ce83da359e85d5f3c34ef1d56a4b08e577877c48db2130f5b46981503df296edb9b7a3f90ec563c0ef5efd2089485392e39a87cb651bc94e90a174a9bf543c67d8f23b130ce595ebcd6c614403880664d589663597005d7fb9b0db0e634cc8ea92e9940b1dfc9f5be30b830806fe6147a49bfd850bfa46309b60df9af10ac45bee97c5dba1d739e64ce82d2df6902fad7f83b88ead0187938f81f7866f384bb696c0de2d79ab1cf85df3e105c424af219bb9c80e03d93ae46ca550ecdf9d5b8831adf298ff6e8852583385e6ac0101f7c08741c5b9f1f871cdcb5b7eb069881aecd458c2367f5b038a19d3c5d735422615839d6b3f0468b4dbc6c2cb8c6068cc88d649924c7b03a9a529f9d2f1e8e6b676f0eb9b2ef61021b188007d590cdbeee009bd7ea2db41cb2c055c420e3df39862ffcb96cf849349061be5ee47e7864207e60cf2a78c9aeb4ca594198743586d442aa05cb44b6a3a780f370ca63a1dbfd8f354f19320067bad58f57af288e12e4c432829d1aa6ccfa67a84fc57d8f63c412aa5c78b589b70a1caba04953e91d207bf966600fc23b24dcf347f4d98c6bdc167d26685e0750fb7eabcf6fc53905453b13295ec3a39141d99e5a4478d8a870110d14d2df55bdc5921661115431b0e9a29ccb462f7df602dd44abdb9305fefa9738a5282c653dff6e02d1ee208efb864f40bce4da9aa2a1463e71ab026adc4261abdc85d3be473bfd074c64d3174da134c9a37774365107045708c661becc0cf5d90fe4ccc942c3f3832387cd2605efb525122afe127a85d1bf59d3b700708c1b6b323b628e38a3bc316b4f88498ff1c2bba97946e5c7b72d894fc41dd5a27f11f5f3fe2893e2d8869e4a257ae1f9547553b2f12c415bbe52fa9326c88769ae6f03d36ef356b5c2ea39b0d45ab6adad7c8f50ae354a62c1216747958d1a56ac543d3a34c96e8f01eae14380853fd9b47279d6a66e3602fbf92f82043c43e223ee8bd50918c951d1fa1a1eba2a8d42f23ff96dc477325f63c38bc581cda9f09a660046d8b9cde2b485b02404ee9dedf72610238540a5ae261ed679d562ebf86794222847a6aa1081ef669ab3e5f48487eee28c0a2971f51180fbc5464a8baa68805e49aa60095be44f62b1c8e6812ad47102249ef443d62f79ab6e3a204ed4d32541487a10be4b1c131e1cdd37d971c8c5f21f2281fdcbe51fd8fa215605120d566bd0712971802a56caa85e42894d117ddba8e36f3aaefb689e73eae329dff9f05d3dd0b548f41c04172b7705f21d99ab1860cbb837f71771391e2f4cbed72c0e4bb9c967d3ff3d2a62ffcbcb13fe99465a088eeb6d0600055baba722612d58f9b19308a6d5e0e87b50ceaa824f38b6666128ffafe5c3b98a39df9c399e5165ac8c62235e3e3c7c1f63c5296adaca7c93cc7056aae4e2cfb7ddb4fd914a69f4745c88819c91911cc1de463f0e6821338acd70ebfb37ebfa1039bb039c9e749594f3c55b6fd7378727f21d2977fb654cf54b947918560c3928eb3e54dee57bb20d163a5104224334325b899eb91bd51413d2362304c35f915a94b91f38042be3749287f2e0c939c8fc6c4dcd3893a646d6f9d354a78a8894715f811a0d1e8642ea8db065bca1fea28e8c163110f919852f02783bf32fded5db6dead287767e38f4dd53d349e0eba358ec889678cca0a9e7a7b4f0bf2f8b2cb66a271da17d83009f4a482122ce359cae5f8126892bb5a2acacb2cf49f29433e31e878731fbfd97ba39d01c4655b8adf33b1e3a42e73bdde50d2aa77dc0ff5de367095233b1772ea9de0139b529f6cda10b6e3a2d6b0eec7e4af2f6b79f9d8a3c43e27282f09c1fbf6fc699b55d19e6043ee3e590ef90a49ef2c83c8dbf4b0b12fd73dad36", 0x1000}], 0x4, &(0x7f00000017c0)}}, {{&(0x7f0000001800)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xbbe}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001840)="9dccd25554ef7e558af13bc8c0ac5f0aca164d5dacac4c1a28848d30c36a51094436e036ec7f73318679b37e307451f2ca4b992d1684dfcb6368fe5dc3ec6678c98ea3e4be1e3e83b12bc094f442b140fd5c115d5fb7c530dde9b9ada0705c818de724f49e1e76ec86996ee9f00dc383da75bd1b9ae3b124a74506925b5ffea8d68083e1e984b0e859d894f8598b02af588443d7d29e7116a6af92a134a199ec6827b7d0e19c0d322d466325acd78a25cec96cb29fc295ca2809b5ab3f89e015399d", 0xc2}, {&(0x7f0000001940)="8eb0afe64c1bbb70280d85f768f7916942fe3cb2d73f2453d20f116267aca3b5a7ed816deb5add539a7cd92bf3319cac26f9e3a81675cc140fe6ab2281c87df1a2050eb2f64abe50e36c7281514a91f6578b2e8e53d8852210e8b5c0c88ac6d02bcd1eb1a83be2ff1723999bc996a3c97a32587f74d06f9f02d8f6030d6fcd703b", 0x81}], 0x2, &(0x7f0000001a40)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0xc, 0x7, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x200}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x8, {0x3, 0x0, 0x4, 0x2fcf}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x11, 0x8, 0x1, 0xc, 0x0, [@private2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1f}, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x84, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xfc}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x3}]}}}], 0x138}}, {{&(0x7f0000001b80)={0xa, 0x4e20, 0x2, @local, 0x5}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000001bc0)="097fa58b0485843cdec8315a577b364823baf815cfa94dcd29347eaa84034b1fbb1075f550f42e66e0218524aad16fb0f243040ab7", 0x35}, {&(0x7f0000001c00)="a03d24ebee6335d2c31d0a31b0ff00f26f97a75a52b2335cec1c66238417d797f813137a67a5e951acfa9a27571a8e538b9ad3ca630132b0bd29e74fb30fe3fd4e0bebfd6c3363a054a6ff694b3508a76ebe563d28d277b007ef859460660dc545b8d60255fb6bba0d32d613d28c5cc7f898394093cfa4bd7383e3203f38d797449d", 0x82}, {&(0x7f0000001cc0)="5313ca280b05e9997bccb63d0fb1a81550081ac2c63c23c0e33af2ce0ec177bd91ce9794453cd1cd702da383a42ae98b3de35470b5037308a48799fa56a22e805fc62f0fdfe9fe447a92f893c647db2a", 0x50}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)}, {0x0}], 0x6}}], 0x4, 0x4001c00) 4.564106742s ago: executing program 2 (id=1753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.956364377s ago: executing program 9 (id=1754): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8"], 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a00000000000500030005000000050008000100000004000600050009"], 0x6c}}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000300)={0x1fe, 0x0, &(0x7f0000ced000/0x4000)=nil}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000140)=0x10) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) gettid() 3.288638374s ago: executing program 3 (id=1755): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="640f171c77296d6f64653d307830303030303030303030743d6d6163677265656b2c6d54703d6e6f726d616c2c6e6f636f6d70726573732c6d61703d6f66662c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6d61703d6f66662c636865636b3d7374726963742c686964652c6e6f726f636b2c6f76657272696465726f636b7065726d2c6f76657272696465726f636b7065726d2c756e686964652c63727566742c626c6f636b3d307830303030303030303030303030"], 0x2, 0x9e8, &(0x7f0000000440)="$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") chown(0x0, 0xee00, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111840000000000851000000200000085000000a000000095000000000000009500a50500000000af1a6db79580509a77e0f08095ac87bc51639b6c90636e3ad224a2b7bec46f8d5327b4442469be298cee3df1c246b384cb8b00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.032856458s ago: executing program 9 (id=1756): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 1.724624562s ago: executing program 3 (id=1757): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80008) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x60000090) 1.619204443s ago: executing program 9 (id=1758): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8"], 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a00000000000500030005000000050008000100000004000600050009"], 0x6c}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000140)=0x10) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) 1.444861933s ago: executing program 2 (id=1759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) ptrace(0x9, r3) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fddbdf256600000008000300", @ANYRES32=r8, @ANYBLOB="000100"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 601.613455ms ago: executing program 3 (id=1760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0x2, 0x3}, 0x6) tkill(0x0, 0xb) bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000300)=0x80) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) 0s ago: executing program 2 (id=1761): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nvalid interface number: 52 but max is 0 [ 414.951380][ T5928] usb 7-1: config 5 has no interface number 0 [ 414.978628][ T5928] usb 7-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 414.998628][ T5928] usb 7-1: language id specifier not provided by device, defaulting to English [ 415.036987][ T5928] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 415.048695][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.071276][ T5928] usb 7-1: Product: Ñ [ 415.075483][ T5928] usb 7-1: SerialNumber: syz [ 415.118308][T10274] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 415.416738][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 415.425786][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 415.903362][ T5928] aircable 7-1:5.52: aircable converter detected [ 415.965016][ T5928] usb 7-1: aircable converter now attached to ttyUSB0 [ 416.060850][ T5928] usb 7-1: USB disconnect, device number 7 [ 416.102992][ T5928] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 416.132584][ T5928] aircable 7-1:5.52: device disconnected [ 416.591868][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 416.631370][ T5843] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 417.147071][T10331] tipc: Enabled bearer , priority 0 [ 417.221276][T10330] tipc: Disabling bearer [ 417.226850][T10335] fuse: Unknown parameter 'group_id00000000000000000000' [ 417.246294][ T2153] vhci_hcd: vhci_device speed not set [ 417.254162][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 417.269508][ T5843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.281438][ T5843] usb 2-1: config 0 has no interface number 0 [ 417.288833][ T43] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 417.301306][ T5843] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.312488][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.321970][ T5843] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 417.342943][ T43] usb 8-1: config 0 descriptor?? [ 417.359996][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.386872][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 417.397260][ T5843] usb 2-1: config 0 descriptor?? [ 417.502575][ T5843] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 417.652762][T10343] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 417.659574][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 417.715925][ T5843] usb 2-1: USB disconnect, device number 7 [ 417.716234][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 417.725525][T10343] vhci_hcd vhci_hcd.0: Device attached [ 417.769918][T10347] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 417.776561][T10347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.171358][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.8.962'. [ 418.197818][ T2153] vhci_hcd: vhci_device speed not set [ 418.253393][T10347] vhci_hcd vhci_hcd.0: Device attached [ 418.294521][T10343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.344474][T10347] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 418.351118][T10347] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 418.391057][T10347] vhci_hcd vhci_hcd.0: Device attached [ 418.407393][T10343] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 418.414032][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 418.472527][T10361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.542611][T10347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.583440][T10343] vhci_hcd vhci_hcd.0: Device attached [ 418.613777][T10366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.630730][T10343] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(28) [ 418.637373][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 418.656593][T10343] vhci_hcd vhci_hcd.0: Device attached [ 418.685177][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 418.707029][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 418.742785][T10359] vhci_hcd: connection closed [ 418.744386][ T6212] vhci_hcd: stop threads [ 418.755631][T10344] vhci_hcd: connection closed [ 418.759575][T10355] vhci_hcd: connection closed [ 418.764498][T10348] vhci_hcd: connection closed [ 418.802674][ T6212] vhci_hcd: release socket [ 418.823352][ T6212] vhci_hcd: disconnect device [ 418.958895][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.6.966'. [ 418.967956][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.966'. [ 419.258017][ T2153] usb 41-1: device descriptor read/64, error -110 [ 419.333499][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 419.343346][T10367] vhci_hcd: connection closed [ 419.343788][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 419.355170][ T6212] vhci_hcd: stop threads [ 419.359746][ T6212] vhci_hcd: release socket [ 419.364283][ T6212] vhci_hcd: disconnect device [ 419.369304][ T6212] vhci_hcd: stop threads [ 419.373561][ T6212] vhci_hcd: release socket [ 419.378671][ T6212] vhci_hcd: disconnect device [ 419.383629][ T6212] vhci_hcd: stop threads [ 419.387948][ T6212] vhci_hcd: release socket [ 419.392465][ T6212] vhci_hcd: disconnect device [ 419.401273][T10369] ceph: No mds server is up or the cluster is laggy [ 419.418645][ T6212] vhci_hcd: stop threads [ 419.457365][ T6212] vhci_hcd: release socket [ 419.474179][ T6212] vhci_hcd: disconnect device [ 419.866313][ T1787] libceph: connect (1)[c::]:6789 error -101 [ 420.235304][ T43] gspca_stv06xx: I2C: Read error writing address: -71 [ 420.247592][ T43] usb 8-1: USB disconnect, device number 8 [ 420.321371][ T1787] libceph: mon0 (1)[c::]:6789 connect error [ 420.531550][T10388] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 420.579408][T10382] ubi0: attaching mtd0 [ 420.586371][T10382] ubi0: scanning is finished [ 420.591993][T10388] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 420.637908][T10396] fuse: Unknown parameter 'group_id00000000000000000000' [ 420.719007][T10398] tipc: Enabling of bearer rejected, already enabled [ 420.810365][ T6004] usb usb42-port1: attempt power cycle [ 420.875862][ T2153] vhci_hcd: vhci_device speed not set [ 420.977588][T10388] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 421.155006][T10388] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 421.304778][T10388] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 421.544213][T10388] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 421.675593][T10382] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 421.849241][T10388] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 421.870280][T10388] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 422.070047][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.980'. [ 422.217909][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.978'. [ 422.227000][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'. [ 422.269319][ T5843] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 422.692555][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.828898][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.845933][ T5843] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 422.855079][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.937769][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 422.969988][T10174] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 422.974628][ T5843] usb 9-1: config 0 descriptor?? [ 422.982853][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.268008][T10423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 423.274651][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.301343][ T6004] usb usb42-port1: unable to enumerate USB device [ 423.332152][T10174] usb 8-1: Using ep0 maxpacket: 8 [ 423.382831][T10174] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.403350][ T6212] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 423.406634][T10174] usb 8-1: config 0 has no interface number 0 [ 423.423107][T10423] vhci_hcd vhci_hcd.0: Device attached [ 423.441875][T10174] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.445945][ T6212] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.455859][T10174] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 423.471007][T10427] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 423.477620][T10427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.486528][T10174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.495279][ T6212] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 423.495449][T10429] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 423.509971][T10429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.521299][T10427] vhci_hcd vhci_hcd.0: Device attached [ 423.528080][T10174] usb 8-1: config 0 descriptor?? [ 423.540208][ T6212] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.544745][T10431] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 423.554990][T10431] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 423.564961][ T5843] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 423.583228][T10174] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 423.603761][ T6212] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 423.613526][T10431] vhci_hcd vhci_hcd.0: Device attached [ 423.635859][ T6212] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.647903][ T5843] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0003/input/input17 [ 423.664457][T10427] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.676047][ T2153] vhci_hcd: vhci_device speed not set [ 423.688251][T10429] vhci_hcd vhci_hcd.0: Device attached [ 423.707592][T10423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 423.714327][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.745874][ T2153] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 423.750132][ T5921] usb 8-1: USB disconnect, device number 9 [ 423.753409][ C0] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 423.762832][T10443] fuse: Unknown parameter 'group_id00000000000000000000' [ 423.794338][T10427] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.839047][T10423] vhci_hcd vhci_hcd.0: Device attached [ 423.858188][T10423] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.878385][ T5843] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 423.922281][T10427] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(29) [ 423.928918][T10427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.996337][ T5843] usb 9-1: USB disconnect, device number 3 [ 424.028362][T10427] vhci_hcd vhci_hcd.0: Device attached [ 424.102935][T10454] binder: BINDER_SET_CONTEXT_MGR already set [ 424.141072][T10454] binder: 10452:10454 ioctl 4018620d 200000000040 returned -16 [ 424.152598][T10434] vhci_hcd: connection closed [ 424.154353][T10430] vhci_hcd: connection closed [ 424.160292][ T6212] vhci_hcd: stop threads [ 424.174858][T10428] vhci_hcd: connection closed [ 424.183278][T10439] vhci_hcd: connection closed [ 424.183397][ T6212] vhci_hcd: release socket [ 424.191160][T10451] fido_id[10451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 424.192992][T10424] vhci_hcd: connection reset by peer [ 424.235044][T10448] vhci_hcd: connection closed [ 424.239713][ T6212] vhci_hcd: disconnect device [ 424.251792][T10454] binder: 10452:10454 ioctl c0306201 200000000240 returned -11 [ 424.269139][ T6212] vhci_hcd: stop threads [ 424.284243][ T6212] vhci_hcd: release socket [ 424.315977][ T6212] vhci_hcd: disconnect device [ 424.327187][ T6212] vhci_hcd: stop threads [ 424.332891][ T6212] vhci_hcd: release socket [ 424.348674][ T6212] vhci_hcd: disconnect device [ 424.384825][ T6212] vhci_hcd: stop threads [ 424.406015][ T6212] vhci_hcd: release socket [ 424.424853][ T6212] vhci_hcd: disconnect device [ 424.465360][ T6212] vhci_hcd: stop threads [ 424.475004][ T6212] vhci_hcd: release socket [ 424.482952][ T6212] vhci_hcd: disconnect device [ 424.524910][ T6212] vhci_hcd: stop threads [ 424.536035][ T6212] vhci_hcd: release socket [ 424.560816][ T6212] vhci_hcd: disconnect device [ 424.594950][T10458] tipc: Enabled bearer , priority 0 [ 424.633369][T10457] tipc: Disabling bearer [ 424.648519][T10462] input: syz0 as /devices/virtual/input/input18 [ 425.423308][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.991'. [ 425.432392][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 426.424522][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.6.993'. [ 427.505569][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.8.996'. [ 427.548163][T10498] binder: 10494:10498 ioctl c0306201 200000000240 returned -11 [ 427.575026][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.996'. [ 427.587003][T10499] fuse: Bad value for 'user_id' [ 427.591885][T10499] fuse: Bad value for 'user_id' [ 427.695100][T10502] ubi0: attaching mtd0 [ 427.695429][T10501] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 427.701192][T10502] ubi0: scanning is finished [ 427.714300][T10501] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.026485][T10501] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 428.039028][T10501] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.040115][T10502] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 428.135978][ T24] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 428.178729][T10514] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 428.185377][T10514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 428.207822][T10514] vhci_hcd vhci_hcd.0: Device attached [ 428.238726][T10501] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 428.250804][T10514] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(14) [ 428.257439][T10514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.292951][T10501] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.307727][T10514] vhci_hcd vhci_hcd.0: Device attached [ 428.308275][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.334636][T10522] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(17) [ 428.341283][T10522] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.349265][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.383441][ T24] usb 8-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 428.385923][T10445] vhci_hcd: vhci_device speed not set [ 428.416574][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.418596][T10522] vhci_hcd vhci_hcd.0: Device attached [ 428.452168][ T24] usb 8-1: config 0 descriptor?? [ 428.456712][T10514] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(16) [ 428.463725][T10514] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.485234][T10501] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 428.499407][T10514] vhci_hcd vhci_hcd.0: Device attached [ 428.502586][T10445] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 428.533000][T10501] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.544851][T10522] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(19) [ 428.551483][T10522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 428.569513][T10522] vhci_hcd vhci_hcd.0: Device attached [ 428.588143][T10514] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.620911][T10522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.647676][T10514] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.682047][T10514] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(28) [ 428.688684][T10514] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 428.740279][T10514] vhci_hcd vhci_hcd.0: Device attached [ 428.774548][T10533] vhci_hcd: connection closed [ 428.778422][T10530] vhci_hcd: connection closed [ 428.778529][T10528] vhci_hcd: connection closed [ 428.788003][ T6151] vhci_hcd: stop threads [ 428.800895][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 428.809291][T10518] vhci_hcd: connection closed [ 428.809584][T10516] vhci_hcd: connection reset by peer [ 428.819848][T10523] vhci_hcd: connection closed [ 428.831215][ T6151] vhci_hcd: release socket [ 428.846225][ T2153] vhci_hcd: vhci_device speed not set [ 428.852542][ T1150] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.876146][ T6151] vhci_hcd: disconnect device [ 428.892206][ T1150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 428.903862][ T24] zydacron 0003:13EC:0006.0004: unknown main item tag 0x1 [ 428.915821][ T6151] vhci_hcd: stop threads [ 428.920099][ T6151] vhci_hcd: release socket [ 428.928576][ T1150] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.946092][ T24] zydacron 0003:13EC:0006.0004: reserved main item tag 0xd [ 428.953589][ T6151] vhci_hcd: disconnect device [ 428.972516][ T1150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 428.981650][ T6151] vhci_hcd: stop threads [ 428.986082][ T24] zydacron 0003:13EC:0006.0004: unknown main item tag 0x4 [ 428.993335][ T6151] vhci_hcd: release socket [ 429.000326][ T1150] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 429.009073][ T6151] vhci_hcd: disconnect device [ 429.014541][ T24] zydacron 0003:13EC:0006.0004: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.7-1/input0 [ 429.028434][ T6151] vhci_hcd: stop threads [ 429.032710][ T6151] vhci_hcd: release socket [ 429.069863][ T6212] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 429.081750][ T6151] vhci_hcd: disconnect device [ 429.103465][ T6212] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 429.119984][ T6151] vhci_hcd: stop threads [ 429.124267][ T6151] vhci_hcd: release socket [ 429.168186][ T6151] vhci_hcd: disconnect device [ 429.385883][T10174] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 429.443803][ T6151] vhci_hcd: stop threads [ 429.449583][ T6151] vhci_hcd: release socket [ 429.469223][ T6151] vhci_hcd: disconnect device [ 429.567147][T10174] usb 7-1: Using ep0 maxpacket: 16 [ 429.589340][T10174] usb 7-1: unable to get BOS descriptor or descriptor too short [ 429.611999][T10174] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 429.638478][T10174] usb 7-1: can't read configurations, error -71 [ 429.790484][T10566] fuse: Bad value for 'user_id' [ 429.798682][T10564] binder: 10563:10564 ioctl c0306201 200000000240 returned -11 [ 429.802107][T10566] fuse: Bad value for 'user_id' [ 429.814843][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 429.855112][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 430.169023][ T9] usb usb42-port1: attempt power cycle [ 431.807400][ T9] usb usb42-port1: unable to enumerate USB device [ 431.819245][T10174] usb 8-1: USB disconnect, device number 10 [ 432.524566][T10590] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 432.531203][T10590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 432.729919][T10593] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(15) [ 432.736556][T10593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.817793][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1016'. [ 433.107873][T10590] vhci_hcd vhci_hcd.0: Device attached [ 433.113650][T10593] vhci_hcd vhci_hcd.0: Device attached [ 433.127667][T10598] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(18) [ 433.134671][T10598] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 433.217023][T10608] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(14) [ 433.223660][T10608] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 433.231877][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 433.285906][T10174] vhci_hcd: vhci_device speed not set [ 433.316169][T10598] vhci_hcd vhci_hcd.0: Device attached [ 433.341686][T10608] vhci_hcd vhci_hcd.0: Device attached [ 433.347588][T10174] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 433.400635][T10590] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(20) [ 433.407270][T10590] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 433.425659][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 433.468031][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.479605][T10614] syzkaller1: entered promiscuous mode [ 433.485100][T10614] syzkaller1: entered allmulticast mode [ 433.511359][ T6004] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 433.523818][T10593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.539508][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.575654][T10598] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.611894][ T9] usb 7-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 433.641301][T10608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.649846][T10445] vhci_hcd: vhci_device speed not set [ 433.665670][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.673991][ T9] usb 7-1: Product: syz [ 433.711550][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 433.719699][ T9] usb 7-1: Manufacturer: syz [ 433.724445][ T9] usb 7-1: SerialNumber: syz [ 433.729940][T10590] vhci_hcd vhci_hcd.0: Device attached [ 433.767002][ T6004] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.775075][ T6004] usb 5-1: config 0 has no interface number 0 [ 433.803164][ T9] usb 7-1: config 0 descriptor?? [ 433.811756][T10620] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(23) [ 433.818387][T10620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.851489][ T6004] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.918121][ T6004] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 433.963635][T10620] vhci_hcd vhci_hcd.0: Device attached [ 433.975258][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.014740][T10624] input: syz0 as /devices/virtual/input/input19 [ 434.026330][T10621] vhci_hcd: connection closed [ 434.037286][ T1150] vhci_hcd: stop threads [ 434.047829][T10591] vhci_hcd: connection reset by peer [ 434.053214][T10594] vhci_hcd: connection closed [ 434.053867][T10609] vhci_hcd: connection closed [ 434.059220][T10615] vhci_hcd: connection closed [ 434.073554][T10600] vhci_hcd: connection closed [ 434.085603][ T6004] usb 5-1: config 0 descriptor?? [ 434.259575][ T1150] vhci_hcd: release socket [ 434.268496][ T1150] vhci_hcd: disconnect device [ 434.311834][ T6004] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 434.376362][ T1150] vhci_hcd: stop threads [ 434.397516][ T1150] vhci_hcd: release socket [ 434.444072][ T1150] vhci_hcd: disconnect device [ 434.473652][ T1150] vhci_hcd: stop threads [ 434.483278][ T6004] usb 5-1: USB disconnect, device number 7 [ 434.489297][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 434.525407][ T1150] vhci_hcd: release socket [ 434.566907][ T1150] vhci_hcd: disconnect device [ 434.614525][ T1150] vhci_hcd: stop threads [ 434.652566][ T1150] vhci_hcd: release socket [ 434.689242][ T1150] vhci_hcd: disconnect device [ 434.726701][ T1150] vhci_hcd: stop threads [ 434.769049][ T1150] vhci_hcd: release socket [ 434.804172][ T1150] vhci_hcd: disconnect device [ 434.844086][ T1150] vhci_hcd: stop threads [ 434.874109][ T1150] vhci_hcd: release socket [ 434.907627][ T1150] vhci_hcd: disconnect device [ 435.041488][ T5921] usb usb50-port1: attempt power cycle [ 435.495274][ T5843] usb 7-1: USB disconnect, device number 10 [ 435.551443][T10445] libceph: connect (1)[c::]:6789 error -101 [ 435.591498][T10445] libceph: mon0 (1)[c::]:6789 connect error [ 435.617122][ T5921] usb usb50-port1: unable to enumerate USB device [ 435.643684][T10642] ceph: No mds server is up or the cluster is laggy [ 438.134363][T10679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1032'. [ 438.143720][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 438.971516][T10174] vhci_hcd: vhci_device speed not set [ 439.403766][T10684] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 439.410411][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.507230][T10684] vhci_hcd vhci_hcd.0: Device attached [ 439.518170][T10692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 439.580175][T10688] lo speed is unknown, defaulting to 1000 [ 439.610657][T10684] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 439.617297][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 439.685970][T10684] vhci_hcd vhci_hcd.0: Device attached [ 439.695856][ T5921] vhci_hcd: vhci_device speed not set [ 439.814807][ T5921] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 439.857609][T10701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 439.864262][T10701] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 439.885555][T10692] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 439.892165][T10692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 439.914268][T10445] libceph: connect (1)[c::]:6789 error -101 [ 439.946024][T10445] libceph: mon0 (1)[c::]:6789 connect error [ 440.000489][T10692] vhci_hcd vhci_hcd.0: Device attached [ 440.073139][T10705] ceph: No mds server is up or the cluster is laggy [ 440.096135][T10701] vhci_hcd vhci_hcd.0: Device attached [ 440.156505][T10684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 440.185794][T10711] input: syz0 as /devices/virtual/input/input20 [ 440.281812][T10692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 440.388389][T10684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 440.446917][T10684] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26) [ 440.453555][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 440.470177][T10684] vhci_hcd vhci_hcd.0: Device attached [ 440.586715][T10721] vhci_hcd: connection closed [ 440.587210][T10702] vhci_hcd: connection closed [ 440.589446][T10686] vhci_hcd: connection reset by peer [ 440.591966][T10693] vhci_hcd: connection closed [ 440.602049][T10699] vhci_hcd: connection closed [ 440.627402][ T1787] usb usb48-port1: attempt power cycle [ 440.640301][ T49] vhci_hcd: stop threads [ 440.644554][ T49] vhci_hcd: release socket [ 440.689794][ T49] vhci_hcd: disconnect device [ 440.766140][ T49] vhci_hcd: stop threads [ 440.779259][ T49] vhci_hcd: release socket [ 440.811656][ T49] vhci_hcd: disconnect device [ 440.892962][ T49] vhci_hcd: stop threads [ 440.902856][ T49] vhci_hcd: release socket [ 440.922367][ T49] vhci_hcd: disconnect device [ 440.989041][ T49] vhci_hcd: stop threads [ 440.993327][ T49] vhci_hcd: release socket [ 441.016717][ T49] vhci_hcd: disconnect device [ 441.030025][ T49] vhci_hcd: stop threads [ 441.034300][ T49] vhci_hcd: release socket [ 441.109521][ T49] vhci_hcd: disconnect device [ 441.339193][ T1787] usb usb48-port1: unable to enumerate USB device [ 443.737829][T10748] ubi0: attaching mtd0 [ 443.755340][T10748] ubi0: scanning is finished [ 443.758398][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 443.770490][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 443.893198][T10772] ceph: No mds server is up or the cluster is laggy [ 444.036240][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 444.043733][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 444.287244][T10748] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 444.519074][T10799] input: syz0 as /devices/virtual/input/input21 [ 444.638141][ T1787] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 445.009824][ T5921] vhci_hcd: vhci_device speed not set [ 445.070354][ T1787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 445.173553][ T1787] usb 5-1: not running at top speed; connect to a high speed hub [ 445.479740][ T1787] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.645018][ T1787] usb 5-1: config 1 interface 0 has no altsetting 0 [ 445.690406][ T1787] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 445.740753][ T1787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.786163][ T1787] usb 5-1: Product: syz [ 445.805044][ T1787] usb 5-1: Manufacturer: syz [ 445.831989][ T1787] usb 5-1: SerialNumber: syz [ 446.120251][ T1787] usbhid 5-1:1.0: can't add hid device: -71 [ 446.148096][ T1787] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 446.208917][ T1787] usb 5-1: USB disconnect, device number 8 [ 446.467749][ T6004] usb usb36-port1: attempt power cycle [ 447.633795][ T1787] libceph: connect (1)[c::]:6789 error -101 [ 447.640024][ T1787] libceph: mon0 (1)[c::]:6789 connect error [ 447.646175][T10844] ceph: No mds server is up or the cluster is laggy [ 447.776126][ T6004] usb usb36-port1: unable to enumerate USB device [ 450.082780][T10874] fuse: Bad value for 'fd' [ 450.147433][T10877] syzkaller0: entered promiscuous mode [ 450.162774][T10877] syzkaller0: entered allmulticast mode [ 450.458350][T10884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1076'. [ 450.468678][T10884] siw: device registration error -23 [ 450.738228][T10619] libceph: connect (1)[c::]:6789 error -101 [ 450.771260][T10619] libceph: mon0 (1)[c::]:6789 connect error [ 450.825218][T10619] libceph: connect (1)[c::]:6789 error -101 [ 450.858080][T10619] libceph: mon0 (1)[c::]:6789 connect error [ 451.066670][T10896] ceph: No mds server is up or the cluster is laggy [ 451.194979][ T1787] libceph: connect (1)[c::]:6789 error -101 [ 451.264714][ T1787] libceph: mon0 (1)[c::]:6789 connect error [ 453.017139][T10930] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 453.169578][T10934] fuse: Bad value for 'fd' [ 456.892919][T10961] ceph: No mds server is up or the cluster is laggy [ 457.237110][ T1787] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 457.309093][T10982] fuse: Bad value for 'fd' [ 457.407528][ T1787] usb 9-1: Using ep0 maxpacket: 8 [ 457.509653][ T1787] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.703909][ T1787] usb 9-1: config 0 has no interface number 0 [ 457.837642][ T1787] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.010393][ T1787] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 458.101852][ T1787] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.115852][ T30] audit: type=1326 audit(2000000005.402:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.4.1096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab8cf8e929 code=0x0 [ 458.161927][ T1787] usb 9-1: config 0 descriptor?? [ 458.265496][ T1787] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 458.336075][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1101'. [ 458.483805][T10995] ubi0: attaching mtd0 [ 458.508090][T10995] ubi0: scanning is finished [ 458.515272][T10986] lo speed is unknown, defaulting to 1000 [ 459.644980][T10995] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 459.667767][T10995] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 459.722327][T10995] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 459.745939][T10995] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 459.763825][T10995] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 459.775312][T10995] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 459.803335][T10995] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 846084890 [ 459.834029][T10995] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 459.851176][T11019] ubi0: background thread "ubi_bgt0d" started, PID 11019 [ 459.859006][T10998] ubi0: detaching mtd0 [ 459.884050][T10998] ubi0: mtd0 is detached [ 460.827775][T11032] lo speed is unknown, defaulting to 1000 [ 461.711653][T11036] ceph: No mds server is up or the cluster is laggy [ 462.501963][T11053] binder: 11052:11053 ioctl c0306201 200000000240 returned -11 [ 463.443750][T11064] fuse: Bad value for 'fd' [ 463.838571][ T5954] usb 9-1: USB disconnect, device number 4 [ 465.653348][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 465.659555][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 465.945879][T11089] ceph: No mds server is up or the cluster is laggy [ 465.955622][T11100] lo speed is unknown, defaulting to 1000 [ 466.026225][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 466.032342][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 467.654125][T11123] fuse: Invalid rootmode [ 467.663500][T11122] fuse: Bad value for 'fd' [ 467.976898][T11133] loop8: detected capacity change from 0 to 128 [ 468.043056][T11133] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.162824][T11133] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 468.185899][T11137] usb usb8: usbfs: process 11137 (syz.7.1132) did not claim interface 0 before use [ 468.390432][T11142] loop6: detected capacity change from 0 to 524287999 [ 469.519579][T11142] Dev loop6: unable to read RDB block 8 [ 469.525374][T11142] loop6: unable to read partition table [ 469.531244][T11142] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 469.568734][ T6681] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.172216][T11173] lo speed is unknown, defaulting to 1000 [ 476.193072][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1139'. [ 476.526646][T11188] fuse: Bad value for 'fd' [ 476.775011][T11192] fuse: Invalid rootmode [ 477.261050][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1145'. [ 477.273208][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 478.583182][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'. [ 482.511751][T11239] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1152'. [ 483.171625][T11251] fuse: Bad value for 'fd' [ 483.391962][T11248] lo speed is unknown, defaulting to 1000 [ 483.758365][T11262] loop6: detected capacity change from 0 to 524287999 [ 484.708687][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 484.721034][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 484.807078][T11262] Dev loop6: unable to read RDB block 8 [ 484.812877][T11262] loop6: unable to read partition table [ 484.819084][T11262] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 484.923820][T11276] loop7: detected capacity change from 0 to 128 [ 484.998897][T11276] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 485.457726][T11282] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 485.518484][T11285] loop1: detected capacity change from 0 to 128 [ 485.674991][T11285] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 486.006864][T11287] TCP: out of memory -- consider tuning tcp_mem [ 486.150255][T11295] binder: BINDER_SET_CONTEXT_MGR already set [ 486.183833][T11295] binder: 11293:11295 ioctl 4018620d 200000000040 returned -16 [ 486.298813][T11295] binder: 11293:11295 ioctl c0306201 200000000240 returned -11 [ 486.556719][T11298] fuse: Bad value for 'fd' [ 486.710630][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1166'. [ 488.587321][T11305] lo speed is unknown, defaulting to 1000 [ 490.318642][T11340] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1172'. [ 490.327836][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1172'. [ 491.076933][T11353] loop6: detected capacity change from 0 to 524287999 [ 491.392128][T11351] ceph: No mds server is up or the cluster is laggy [ 491.613454][T11353] loop6: unable to read partition table [ 491.653839][T11353] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 491.759269][T11372] input: syz0 as /devices/virtual/input/input23 [ 492.101727][T11377] loop1: detected capacity change from 0 to 512 [ 492.177802][T11377] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 492.440531][T11377] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 493.261973][T11377] EXT4-fs error (device loop1): __ext4_get_inode_loc:4791: comm syz.1.1180: Invalid inode table block 1 in block_group 0 [ 493.650018][T11377] EXT4-fs (loop1): Remounting filesystem read-only [ 493.892734][T11405] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 494.356357][T11377] EXT4-fs (loop1): get root inode failed [ 494.363124][T11377] EXT4-fs (loop1): mount failed [ 495.034836][T11418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1185'. [ 495.044035][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 496.151607][T11414] lo speed is unknown, defaulting to 1000 [ 497.528070][ T5954] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 497.933104][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.036990][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.268709][T11432] fuse: Bad value for 'fd' [ 498.419473][ T5954] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.656345][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.722508][ T5954] usb 5-1: Product: syz [ 498.732794][ T5954] usb 5-1: Manufacturer: syz [ 498.776872][ T5954] usb 5-1: SerialNumber: syz [ 499.036483][ T5954] usb 5-1: 0:2 : does not exist [ 499.174762][ T5954] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 499.432802][ T5954] usb 5-1: USB disconnect, device number 9 [ 499.594016][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.131057][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1196'. [ 500.383456][T11462] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 505.762944][T11512] lo speed is unknown, defaulting to 1000 [ 509.812060][T11532] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 511.482180][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1217'. [ 511.641774][T11554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1217'. [ 511.655418][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1219'. [ 513.789694][T11582] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 517.141361][T11598] input: syz0 as /devices/virtual/input/input24 [ 518.447065][T11623] loop6: detected capacity change from 0 to 1024 [ 518.969308][T11623] hfsplus: xattr searching failed [ 518.990464][T11629] lo speed is unknown, defaulting to 1000 [ 519.129407][ T3453] hfsplus: b-tree write err: -5, ino 3 [ 519.169579][ T6512] hfsplus: node 4:3 still has 1 user(s)! [ 521.534882][T11681] loop6: detected capacity change from 0 to 8 [ 521.638942][T11686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 521.645496][T11686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 521.704715][T11686] vhci_hcd vhci_hcd.0: Device attached [ 521.718035][T11693] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 521.724676][T11693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.735138][T11693] vhci_hcd vhci_hcd.0: Device attached [ 521.742583][T11686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 521.752518][T11686] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 521.759135][T11686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 521.767297][T11686] vhci_hcd vhci_hcd.0: Device attached [ 521.822605][T11686] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 521.829247][T11686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 521.867100][T11686] vhci_hcd vhci_hcd.0: Device attached [ 521.875932][ T24] vhci_hcd: vhci_device speed not set [ 521.898460][T11693] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 521.905107][T11693] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 521.957205][ T24] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 521.958363][T11686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 521.979219][T11693] vhci_hcd vhci_hcd.0: Device attached [ 522.401312][T11686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 522.506579][T11686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 522.582505][T11693] vhci_hcd vhci_hcd.0: port 0 already used [ 522.599855][T11717] lo speed is unknown, defaulting to 1000 [ 522.623752][T11726] kvm: kvm [11724]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000005d) [ 522.689901][T11705] vhci_hcd: connection closed [ 522.690116][T11697] vhci_hcd: connection closed [ 522.695046][T11695] vhci_hcd: connection closed [ 522.699951][T11699] vhci_hcd: connection closed [ 522.706413][T11687] vhci_hcd: connection reset by peer [ 522.765894][ T49] vhci_hcd: stop threads [ 522.770187][ T49] vhci_hcd: release socket [ 522.899017][ T49] vhci_hcd: disconnect device [ 522.945233][ T49] vhci_hcd: stop threads [ 522.981003][ T49] vhci_hcd: release socket [ 523.024016][ T49] vhci_hcd: disconnect device [ 523.237597][ T49] vhci_hcd: stop threads [ 523.241913][ T49] vhci_hcd: release socket [ 523.265136][ T49] vhci_hcd: disconnect device [ 523.274773][ T49] vhci_hcd: stop threads [ 523.287502][ T49] vhci_hcd: release socket [ 523.292066][ T49] vhci_hcd: disconnect device [ 523.325333][ T49] vhci_hcd: stop threads [ 523.330299][ T49] vhci_hcd: release socket [ 523.344422][ T49] vhci_hcd: disconnect device [ 523.733748][T11750] loop4: detected capacity change from 0 to 2048 [ 524.022124][T11750] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 524.051975][T11750] UDF-fs: Scanning with blocksize 512 failed [ 524.193082][T11750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.472411][ T6031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.821203][ T6031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.041051][ T6031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.565921][T10619] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 526.837181][T10619] usb 9-1: config 0 has an invalid interface number: 170 but max is 0 [ 526.865826][T10619] usb 9-1: config 0 has no interface number 0 [ 526.872244][T10619] usb 9-1: config 0 interface 170 has no altsetting 0 [ 526.915865][T10619] usb 9-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 526.946143][T10619] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.063639][ T6031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.077060][T10619] usb 9-1: config 0 descriptor?? [ 527.097086][ T24] vhci_hcd: vhci_device speed not set [ 527.104496][T10619] usb 9-1: bad CDC descriptors [ 527.131792][ T30] audit: type=1326 audit(2000000074.430:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.1.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb8878e929 code=0x0 [ 527.262601][T11797] lo speed is unknown, defaulting to 1000 [ 527.349549][ T5954] usb 9-1: USB disconnect, device number 5 [ 527.373564][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.387398][T11804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.401727][T11804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.413461][T11804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.424044][T11804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.450298][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.487638][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.495310][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.506439][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.515291][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.012489][T11801] lo speed is unknown, defaulting to 1000 [ 528.452079][T11822] input: syz0 as /devices/virtual/input/input25 [ 528.482431][ T2153] usb usb42-port1: attempt power cycle [ 529.682473][ T5854] Bluetooth: hci2: command tx timeout [ 529.694271][ T2153] usb usb42-port1: unable to enumerate USB device [ 530.739292][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.755622][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.772522][ T6031] bond0 (unregistering): Released all slaves [ 530.919676][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1275'. [ 530.928851][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1275'. [ 531.231491][ T6031] tipc: Disabling bearer [ 531.511879][ T6031] tipc: Left network mode [ 531.736383][ T5854] Bluetooth: hci2: command tx timeout [ 532.050424][T11860] fuse: Bad value for 'fd' [ 532.598267][T11873] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1283'. [ 532.608288][T11873] siw: device registration error -23 [ 532.923612][T11801] chnl_net:caif_netlink_parms(): no params data found [ 532.959287][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1287'. [ 533.225552][ T6031] hsr_slave_0: left promiscuous mode [ 533.507019][ T6031] hsr_slave_1: left promiscuous mode [ 533.521119][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.550930][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.618973][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.635894][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.661883][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1288'. [ 533.709533][ T6031] veth1_macvtap: left promiscuous mode [ 533.727336][ T6031] veth0_macvtap: left promiscuous mode [ 533.739869][ T6031] veth1_vlan: left promiscuous mode [ 533.745400][ T6031] veth0_vlan: left promiscuous mode [ 533.816828][ T5854] Bluetooth: hci2: command tx timeout [ 534.043082][ T30] audit: type=1326 audit(2000000081.200:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.8.1286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f079698e929 code=0x0 [ 534.520606][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 534.579390][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 535.395561][T10445] lo speed is unknown, defaulting to 1000 [ 535.504840][T10445] infiniband syz2: ib_query_port failed (-19) [ 535.623393][T11917] loop1: detected capacity change from 0 to 256 [ 535.772551][T11917] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d) [ 535.802344][T11917] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 535.896462][ T5854] Bluetooth: hci2: command tx timeout [ 536.009141][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.123113][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.143301][ T5835] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000006) [ 536.172192][T11801] bridge_slave_0: entered allmulticast mode [ 536.188849][T11930] binder: 11929:11930 ioctl c0306201 200000000240 returned -11 [ 536.222266][ T5835] exFAT-fs (loop1): Filesystem has been set read-only [ 536.233347][T11801] bridge_slave_0: entered promiscuous mode [ 536.279781][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.348055][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.436344][T11801] bridge_slave_1: entered allmulticast mode [ 536.444131][T11801] bridge_slave_1: entered promiscuous mode [ 537.051503][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.086412][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.315366][T11801] team0: Port device team_slave_0 added [ 537.339633][T11801] team0: Port device team_slave_1 added [ 537.621633][ T6031] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.647040][ T6031] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 537.697833][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.704808][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.762756][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.964321][ T6031] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.991470][ T6031] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 538.030903][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.045121][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.084039][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.102442][ T6031] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 538.122483][ T6031] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 538.261704][ T6031] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 538.281125][ T6031] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 538.412586][T11801] hsr_slave_0: entered promiscuous mode [ 538.426894][T11801] hsr_slave_1: entered promiscuous mode [ 538.462285][T11801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.490730][T11801] Cannot create hsr debugfs directory [ 538.551002][T11804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.563303][T11804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.572663][T11804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.647989][T11804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.665244][T11804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.985226][T11977] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 540.018712][T11988] binder: 11987:11988 ioctl c0306201 200000000240 returned -11 [ 540.702062][ T5854] Bluetooth: hci1: command tx timeout [ 541.055268][T11990] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1308'. [ 541.102479][T11998] fuse: Unknown parameter 'grou00000000000000000000' [ 541.163417][ T30] audit: type=1326 audit(2000000088.460:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.8.1306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f079698e929 code=0x0 [ 541.670240][T12002] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 541.770622][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1310'. [ 542.124160][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.147125][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.167737][ T6031] bond0 (unregistering): Released all slaves [ 542.210357][ T6031] bond1 (unregistering): Released all slaves [ 542.351986][T11995] lo speed is unknown, defaulting to 1000 [ 542.357969][T11995] lo speed is unknown, defaulting to 1000 [ 542.364662][T11995] lo speed is unknown, defaulting to 1000 [ 542.384868][T11995] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 542.414043][T11995] lo speed is unknown, defaulting to 1000 [ 542.424749][T11995] lo speed is unknown, defaulting to 1000 [ 542.434151][T11995] lo speed is unknown, defaulting to 1000 [ 542.441883][T11995] lo speed is unknown, defaulting to 1000 [ 542.450050][T11995] lo speed is unknown, defaulting to 1000 [ 542.458163][T11995] lo speed is unknown, defaulting to 1000 [ 542.465980][T11995] lo speed is unknown, defaulting to 1000 [ 542.783574][ T5854] Bluetooth: hci1: command tx timeout [ 542.852245][T11993] lo speed is unknown, defaulting to 1000 [ 544.323713][ T6031] hsr_slave_0: left promiscuous mode [ 544.355822][ T6031] hsr_slave_1: left promiscuous mode [ 544.362586][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.416533][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.446876][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.454324][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.508669][T12034] TCP: out of memory -- consider tuning tcp_mem [ 544.517296][ T6031] veth1_macvtap: left promiscuous mode [ 544.533061][ T6031] veth0_macvtap: left promiscuous mode [ 544.555885][ T6031] veth1_vlan: left promiscuous mode [ 544.566318][ T6031] veth0_vlan: left promiscuous mode [ 544.855193][T12040] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 544.861740][T12040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 544.876065][T12040] vhci_hcd vhci_hcd.0: Device attached [ 544.881591][ T5854] Bluetooth: hci1: command tx timeout [ 544.924687][T12040] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 544.931323][T12040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 544.949667][T12040] vhci_hcd vhci_hcd.0: Device attached [ 544.972317][T12045] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 544.984721][T12040] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 544.991341][T12040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 545.013625][T12040] vhci_hcd vhci_hcd.0: Device attached [ 545.025265][T12040] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 545.031909][T12040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 545.039696][T12040] vhci_hcd vhci_hcd.0: Device attached [ 545.058208][T12040] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(19) [ 545.064846][T12040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 545.081610][ T5954] vhci_hcd: vhci_device speed not set [ 545.090757][T12040] vhci_hcd vhci_hcd.0: Device attached [ 545.097931][T12040] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.129071][T12040] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.155653][T12040] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.156049][ T5954] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 545.211209][T12040] vhci_hcd vhci_hcd.0: port 0 already used [ 545.278795][T12051] vhci_hcd: connection closed [ 545.279049][ T3445] vhci_hcd: stop threads [ 545.279158][T12049] vhci_hcd: connection closed [ 545.284333][T12043] vhci_hcd: connection closed [ 545.297198][ T3445] vhci_hcd: release socket [ 545.302200][T12041] vhci_hcd: connection reset by peer [ 545.311821][T12047] vhci_hcd: connection closed [ 545.320168][ T3445] vhci_hcd: disconnect device [ 545.343905][ T3445] vhci_hcd: stop threads [ 545.354370][ T3445] vhci_hcd: release socket [ 545.361436][ T3445] vhci_hcd: disconnect device [ 545.366858][ T3445] vhci_hcd: stop threads [ 545.371212][ T3445] vhci_hcd: release socket [ 545.380931][ T3445] vhci_hcd: disconnect device [ 545.387991][ T3445] vhci_hcd: stop threads [ 545.392511][ T3445] vhci_hcd: release socket [ 545.401171][ T3445] vhci_hcd: disconnect device [ 545.418608][ T3445] vhci_hcd: stop threads [ 545.423048][ T3445] vhci_hcd: release socket [ 545.433133][ T3445] vhci_hcd: disconnect device [ 545.698608][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 545.750522][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 546.634132][T11801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 546.669788][T11971] chnl_net:caif_netlink_parms(): no params data found [ 546.689241][T11801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 546.710652][T11801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 546.735971][T11801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 546.935832][ T5854] Bluetooth: hci1: command tx timeout [ 547.131788][T12070] fuse: Unknown parameter 'grou00000000000000000000' [ 547.382599][T11971] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.401792][T11971] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.422168][T11971] bridge_slave_0: entered allmulticast mode [ 547.438918][T11971] bridge_slave_0: entered promiscuous mode [ 547.457303][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.472748][T11971] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.491046][T11971] bridge_slave_1: entered allmulticast mode [ 547.697625][T11971] bridge_slave_1: entered promiscuous mode [ 547.897275][T12084] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 549.441579][ T6031] IPVS: stop unused estimator thread 0... [ 549.455164][T11971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.669434][T12095] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1319'. [ 549.708422][T11971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.852643][T12099] IPv6: Can't replace route, no match found [ 549.969577][T11971] team0: Port device team_slave_0 added [ 549.977922][T11971] team0: Port device team_slave_1 added [ 550.005994][T11801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.297673][ T5954] vhci_hcd: vhci_device speed not set [ 550.467905][T11971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.509160][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.542211][T11971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.653336][T11971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.660918][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.686922][T11971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.716891][T11801] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.861982][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.869143][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.892071][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.899206][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.191928][T11971] hsr_slave_0: entered promiscuous mode [ 551.221716][T11971] hsr_slave_1: entered promiscuous mode [ 551.626896][T10619] usb usb46-port1: attempt power cycle [ 551.815066][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1329'. [ 551.846302][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1329'. [ 552.083393][ T30] audit: type=1326 audit(2000000099.380:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.6.1328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b87f8e929 code=0x0 [ 552.208367][T10619] usb usb46-port1: unable to enumerate USB device [ 552.481661][T12146] binder: 12144:12146 ioctl 4018620d 0 returned -22 [ 552.559310][T12146] binder: 12144:12146 ioctl c0306201 200000000240 returned -11 [ 552.701812][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1330'. [ 552.710845][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1330'. [ 553.279759][T12139] lo speed is unknown, defaulting to 1000 [ 553.933707][T12172] loop8: detected capacity change from 0 to 512 [ 553.953330][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.966263][T12172] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.013570][T12159] TCP: out of memory -- consider tuning tcp_mem [ 554.018704][T12172] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 554.043856][T12172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 554.057524][T12172] System zones: 1-12 [ 554.069334][T12172] EXT4-fs error (device loop8): ext4_iget_extra_inode:5034: inode #15: comm syz.8.1334: corrupted in-inode xattr: e_value size too large [ 554.111323][T12172] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.1334: couldn't read orphan inode 15 (err -117) [ 554.185362][T12172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.305247][T12172] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1334: Unrecognised inode hash code 4 [ 554.383230][T12172] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1334: Corrupt directory, running e2fsck is recommended [ 554.399440][T11971] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.477356][T11971] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 554.559667][T11971] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 554.625098][T11971] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 554.635229][ T6681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.933568][T11801] veth0_vlan: entered promiscuous mode [ 555.126611][T11801] veth1_vlan: entered promiscuous mode [ 555.138961][T12202] loop6: detected capacity change from 0 to 8192 [ 555.199696][T12202] vfat: Unknown parameter './file0' [ 555.244482][T11971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.824002][T11971] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.129888][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.137176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.150332][T12218] binder: 12216:12218 ioctl 4018620d 0 returned -22 [ 556.183114][T12218] binder: 12216:12218 ioctl c0306201 200000000240 returned -11 [ 556.201511][T12219] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1341'. [ 556.249831][T11801] veth0_macvtap: entered promiscuous mode [ 556.296668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.303848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.422486][T11801] veth1_macvtap: entered promiscuous mode [ 556.501425][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.661233][T12228] loop6: detected capacity change from 0 to 1024 [ 556.720227][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.809765][T12228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.843018][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.864840][T12228] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.993171][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.015839][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.029495][T12228] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 557.098584][T12228] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 29 with error 28 [ 557.136117][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.146479][T12228] EXT4-fs (loop6): This should not happen!! Data will be lost [ 557.146479][T12228] [ 557.160391][T12228] EXT4-fs (loop6): Total free blocks count 0 [ 557.191992][T12228] EXT4-fs (loop6): Free/Dirty block details [ 557.204447][T12228] EXT4-fs (loop6): free_blocks=4293918720 [ 557.219240][T12228] EXT4-fs (loop6): dirty_blocks=64 [ 557.595847][T12228] EXT4-fs (loop6): Block reservation details [ 557.601877][T12228] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 557.664865][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.737447][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.813250][ T1150] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 557.952877][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.998655][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.440789][T12261] binder: 12258:12261 ioctl 4018620d 0 returned -22 [ 558.464057][T11971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.474599][T12263] loop6: detected capacity change from 0 to 1024 [ 558.495148][T12261] binder: 12258:12261 ioctl c0306201 200000000240 returned -11 [ 558.615193][T12263] hfsplus: xattr searching failed [ 558.732754][T11971] veth0_vlan: entered promiscuous mode [ 558.776487][T11971] veth1_vlan: entered promiscuous mode [ 558.840779][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1352'. [ 559.030118][T11971] veth0_macvtap: entered promiscuous mode [ 559.110439][T11971] veth1_macvtap: entered promiscuous mode [ 559.341572][T11971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.388599][T12286] input: syz0 as /devices/virtual/input/input27 [ 559.481848][T11971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.534815][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.549943][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.640966][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.698175][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.143543][T12294] loop6: detected capacity change from 0 to 512 [ 560.183830][T12294] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 560.221555][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.251802][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.270624][T12294] EXT4-fs (loop6): 1 truncate cleaned up [ 560.286405][ T2153] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 560.319260][T12294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.247846][ T2153] usb 10-1: config index 0 descriptor too short (expected 65069, got 45) [ 561.293686][ T2153] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 561.325592][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.338380][ T6512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.375767][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.392765][ T2153] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 561.456372][ T2153] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.509672][ T2153] usb 10-1: config 0 has no interfaces? [ 561.531708][ T2153] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 561.586726][ T2153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.657476][ T2153] usb 10-1: config 0 descriptor?? [ 561.811771][T12318] binder: 12315:12318 ioctl c0306201 0 returned -14 [ 561.875623][ T6924] usb 10-1: USB disconnect, device number 2 [ 562.931981][T12329] loop6: detected capacity change from 0 to 524287999 [ 563.511640][T12329] loop6: unable to read partition table [ 563.517694][T12329] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 563.728486][T12339] input: syz0 as /devices/virtual/input/input28 [ 566.092559][T12373] binder: 12372:12373 ioctl c0306201 0 returned -14 [ 567.333466][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1377'. [ 567.404754][T12393] usb usb8: usbfs: process 12393 (syz.8.1379) did not claim interface 0 before use [ 567.433147][T12393] usb usb8: selecting invalid altsetting 5 [ 567.930323][T12408] fuse: Bad value for 'fd' [ 568.412316][T12425] binder: 12423:12425 ioctl c0306201 0 returned -14 [ 568.526564][T12425] binder: 12423:12425 ioctl c0306201 200000000240 returned -11 [ 568.782159][T12149] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 568.883272][T12434] fuse: Unknown parameter '0x0000000000000004' [ 568.984092][T12149] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 569.015768][T12149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.057712][T12149] usb 3-1: config 0 descriptor?? [ 569.281836][T12149] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 569.485893][T12149] [drm:udl_init] *ERROR* Selecting channel failed [ 570.241183][T12149] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 570.255145][T12149] [drm] Initialized udl on minor 2 [ 570.265069][T12149] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 570.301174][T12149] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 570.346843][ T6924] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 570.377012][T12149] usb 3-1: USB disconnect, device number 2 [ 570.390663][ T6924] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 570.580857][T12460] loop6: detected capacity change from 0 to 256 [ 570.625202][T12460] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 570.647630][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1394'. [ 570.718209][T12460] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 570.790089][T12460] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 571.196043][T10445] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 571.224516][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 571.767514][T10445] usb 9-1: Using ep0 maxpacket: 32 [ 571.794381][T10445] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.825120][T10445] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.855480][T10445] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 572.009595][T10445] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.063821][T10445] usb 9-1: config 0 descriptor?? [ 572.086896][T10445] hub 9-1:0.0: USB hub found [ 572.294350][T10445] hub 9-1:0.0: 17 ports detected [ 572.331142][T10445] hub 9-1:0.0: insufficient power available to use all downstream ports [ 572.529114][T12488] fuse: Unknown parameter '0x0000000000000004' [ 572.955990][T10445] usb 9-1: USB disconnect, device number 6 [ 573.063975][T12495] loop2: detected capacity change from 0 to 1024 [ 573.969019][T12515] loop8: detected capacity change from 0 to 512 [ 573.990363][T12515] EXT4-fs: Ignoring removed nobh option [ 574.019619][T12517] loop6: detected capacity change from 0 to 128 [ 574.078518][T12515] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.1406: iget: bad i_size value: 38620345925642 [ 574.183131][T12515] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.1406: couldn't read orphan inode 15 (err -117) [ 574.222643][T12515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.330385][T12515] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.1406: iget: bad i_size value: 38620345925642 [ 574.420717][T12528] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.1406: iget: bad i_size value: 38620345925642 [ 574.473967][T12531] loop2: detected capacity change from 0 to 16 [ 574.484660][T12515] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.1406: iget: bad i_size value: 38620345925642 [ 574.513595][T12531] erofs (device loop2): mounted with root inode @ nid 36. [ 574.653812][ T6681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.722895][T12535] loop6: detected capacity change from 0 to 1024 [ 574.766027][T12535] hfsplus: request for non-existent node 3 in B*Tree [ 574.798476][T12535] hfsplus: request for non-existent node 3 in B*Tree [ 574.810627][T12538] loop7: detected capacity change from 0 to 256 [ 574.841880][T12540] fuse: Unknown parameter '0x0000000000000004' [ 574.871571][T12538] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 574.998724][T12538] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff) [ 575.488213][T12561] binder_alloc: 12551: binder_alloc_buf, no vma [ 575.566611][T12552] binder: 12551:12552 ioctl c0306201 200000000300 returned -14 [ 575.812134][T12563] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 575.828708][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1419'. [ 580.641392][T12614] loop2: detected capacity change from 0 to 8 [ 581.241275][T12614] SQUASHFS error: lzo decompression failed, data probably corrupt [ 581.636353][T12614] SQUASHFS error: Failed to read block 0x91: -5 [ 581.960686][T12614] SQUASHFS error: Unable to read metadata cache entry [8f] [ 582.002504][T12614] SQUASHFS error: Unable to read inode 0x11f [ 582.141690][T12626] loop9: detected capacity change from 0 to 2048 [ 582.213103][T12626] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 582.291724][T12626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.303968][ T6924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 582.360431][T12626] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.467079][T12642] loop6: detected capacity change from 0 to 2048 [ 582.501609][T12644] loop8: detected capacity change from 0 to 2048 [ 582.510181][ T6924] usb 3-1: Using ep0 maxpacket: 16 [ 582.523473][T11801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.542023][ T6924] usb 3-1: config 28 has an invalid interface number: 98 but max is 0 [ 582.558792][ T6924] usb 3-1: config 28 has no interface number 0 [ 582.571555][ T6924] usb 3-1: config 28 interface 98 has no altsetting 0 [ 582.587441][T12642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.634538][T12644] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 582.655785][ T6924] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=bb.eb [ 582.690642][T12644] UDF-fs: Scanning with blocksize 512 failed [ 582.692710][ T6924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.737232][T12647] TCP: out of memory -- consider tuning tcp_mem [ 582.765056][ T6924] usb 3-1: Product: syz [ 582.795071][ T6924] usb 3-1: Manufacturer: syz [ 582.816767][ T6924] usb 3-1: SerialNumber: syz [ 582.826048][T12644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.126150][ T6924] usb 3-1: USB disconnect, device number 3 [ 583.415409][T12660] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 583.431319][T12660] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1444'. [ 583.716399][ T64] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.921083][ T64] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.207517][ T64] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.360307][ T64] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.239865][T12692] TCP: out of memory -- consider tuning tcp_mem [ 586.342872][T12149] libceph: connect (1)[c::]:6789 error -101 [ 586.354419][T12149] libceph: mon0 (1)[c::]:6789 connect error [ 586.404107][ T64] bridge_slave_1: left allmulticast mode [ 586.428411][ T64] bridge_slave_1: left promiscuous mode [ 586.434295][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.441871][T12695] ceph: No mds server is up or the cluster is laggy [ 586.488162][ T64] bridge_slave_0: left allmulticast mode [ 586.493846][ T64] bridge_slave_0: left promiscuous mode [ 586.527407][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.687510][T12705] loop7: detected capacity change from 0 to 512 [ 586.779216][T12705] EXT4-fs error (device loop7): ext4_iget_extra_inode:5034: inode #15: comm syz.7.1455: corrupted in-inode xattr: invalid ea_ino [ 586.843535][T12705] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1455: couldn't read orphan inode 15 (err -117) [ 586.943306][T12714] loop6: detected capacity change from 0 to 512 [ 586.963976][T12705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.045978][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1456'. [ 587.071799][T11804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.089760][T11804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.139493][T11804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.158485][T12714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.176247][T11804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.188262][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 587.210327][T12714] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.224310][T11804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.241173][T12705] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz.7.1455: invalid fast symlink length 39 [ 587.452547][ T6563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.642489][T12729] fuse: Bad value for 'fd' [ 587.750612][ T6512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.855967][ T5921] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 588.016789][ T5921] usb 10-1: device descriptor read/64, error -71 [ 588.296004][ T5921] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 588.442700][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1460'. [ 588.489176][ T5921] usb 10-1: device descriptor read/64, error -71 [ 588.502564][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1460'. [ 588.573211][T12753] TCP: out of memory -- consider tuning tcp_mem [ 588.617647][ T5921] usb usb10-port1: attempt power cycle [ 588.820502][T12756] loop7: detected capacity change from 0 to 1024 [ 588.916772][ T30] audit: type=1800 audit(2000000136.222:39): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1465" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 588.967541][ T5921] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 589.019759][ T6031] hfsplus: b-tree write err: -5, ino 4 [ 589.019765][ T5921] usb 10-1: device descriptor read/8, error -71 [ 589.035298][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.052757][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.067107][ T64] bond0 (unregistering): Released all slaves [ 589.187333][T12717] lo speed is unknown, defaulting to 1000 [ 589.248904][ T64] tipc: Left network mode [ 589.265807][ T5921] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 589.284318][T12758] ceph: No mds server is up or the cluster is laggy [ 589.322212][ T5921] usb 10-1: device descriptor read/8, error -71 [ 589.341362][ T5854] Bluetooth: hci4: command tx timeout [ 589.477655][ T5921] usb usb10-port1: unable to enumerate USB device [ 590.454518][T12770] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 590.841584][ T64] hsr_slave_0: left promiscuous mode [ 591.052193][ T64] hsr_slave_1: left promiscuous mode [ 591.058809][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.072771][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.083326][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.094035][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.513069][ T5854] Bluetooth: hci4: command tx timeout [ 591.672285][ T64] veth1_macvtap: left promiscuous mode [ 591.679056][ T64] veth0_macvtap: left promiscuous mode [ 591.684997][ T64] veth1_vlan: left promiscuous mode [ 591.700809][ T64] veth0_vlan: left promiscuous mode [ 592.839787][T12805] TCP: out of memory -- consider tuning tcp_mem [ 593.417337][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1476'. [ 593.426504][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1476'. [ 593.436221][T10619] libceph: connect (1)[c::]:6789 error -101 [ 593.442298][T10619] libceph: mon0 (1)[c::]:6789 connect error [ 593.514407][T12824] ceph: No mds server is up or the cluster is laggy [ 593.586197][ T5854] Bluetooth: hci4: command tx timeout [ 594.332531][ T64] team0 (unregistering): Port device team_slave_1 removed [ 594.415507][ T64] team0 (unregistering): Port device team_slave_0 removed [ 594.982615][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1470'. [ 595.016558][T12836] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 595.037799][T12836] pim6reg0: linktype set to 0 [ 595.655956][ T5854] Bluetooth: hci4: command tx timeout [ 596.082126][T12717] chnl_net:caif_netlink_parms(): no params data found [ 596.192634][T12863] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1480'. [ 596.224131][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1480'. [ 596.579024][T12865] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 596.587819][T12865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1479'. [ 597.918802][T12875] loop7: detected capacity change from 0 to 1024 [ 598.444404][ T6031] hfsplus: b-tree write err: -5, ino 4 [ 598.549639][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.559057][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.569430][T12717] bridge_slave_0: entered allmulticast mode [ 598.578871][T12717] bridge_slave_0: entered promiscuous mode [ 598.617978][T12877] lo speed is unknown, defaulting to 1000 [ 598.630201][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.649659][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.663527][T12881] TCP: out of memory -- consider tuning tcp_mem [ 598.689985][T12717] bridge_slave_1: entered allmulticast mode [ 598.710924][T12717] bridge_slave_1: entered promiscuous mode [ 598.943223][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.967762][T12884] ceph: No mds server is up or the cluster is laggy [ 599.009668][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.430295][T12717] team0: Port device team_slave_0 added [ 599.621271][T12894] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 599.723828][T12897] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1489'. [ 600.309519][T12717] team0: Port device team_slave_1 added [ 601.382021][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.404270][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.454127][T12908] IPv6: Can't replace route, no match found [ 601.482904][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.528659][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.543125][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.663650][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.972690][T12717] hsr_slave_0: entered promiscuous mode [ 602.128693][T12717] hsr_slave_1: entered promiscuous mode [ 602.134718][T12717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.455839][T12717] Cannot create hsr debugfs directory [ 602.731453][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1495'. [ 602.740681][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1495'. [ 602.764431][T12921] TCP: out of memory -- consider tuning tcp_mem [ 603.268202][T12925] ceph: No mds server is up or the cluster is laggy [ 604.164818][T12934] loop2: detected capacity change from 0 to 4096 [ 604.297301][T12934] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 604.529238][T12939] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 604.590003][T12944] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1501'. [ 604.620895][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1502'. [ 605.733846][T12943] netlink: 2456 bytes leftover after parsing attributes in process `syz.9.1502'. [ 605.831261][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 606.038541][T12958] TCP: out of memory -- consider tuning tcp_mem [ 606.056584][T12955] ubi0: attaching mtd0 [ 606.059306][T12954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.071361][T12955] ubi0: scanning is finished [ 607.088272][T12955] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 607.098364][T12955] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 607.108885][T12955] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 607.147816][T12955] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 607.157871][T12955] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 607.210784][T12149] libceph: connect (1)[c::]:6789 error -101 [ 607.228692][T12149] libceph: mon0 (1)[c::]:6789 connect error [ 607.267473][T12955] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 607.300079][T12968] ceph: No mds server is up or the cluster is laggy [ 607.325857][T12955] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 846084890 [ 607.358728][T12955] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 607.436181][T12961] ubi0: detaching mtd0 [ 607.446014][T12966] ubi0: background thread "ubi_bgt0d" started, PID 12966 [ 607.477586][T12961] ubi0: mtd0 is detached [ 607.668368][T12954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.798658][ T6924] libceph: connect (1)[c::]:6789 error -101 [ 608.824052][ T6924] libceph: mon0 (1)[c::]:6789 connect error [ 609.105329][T12988] binder_alloc: 12987: binder_alloc_buf, no vma [ 609.112857][T12149] libceph: connect (1)[c::]:6789 error -101 [ 609.141724][T12149] libceph: mon0 (1)[c::]:6789 connect error [ 609.346503][T12981] ceph: No mds server is up or the cluster is laggy [ 609.574313][T12994] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.583463][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1515'. [ 609.597157][T12954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.026623][T12997] loop6: detected capacity change from 0 to 32768 [ 610.050232][T12954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.065530][T12997] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.074208][T12997] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.121029][T12997] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 610.154041][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.174832][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 611.171372][T12717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 611.242537][T12717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 611.293522][T12717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 611.299316][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1124ms [ 611.347683][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 611.373195][ T6151] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.386077][T12997] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 611.455815][T12717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 611.554889][T12997] gfs2: fsid=syz:syz.0: found 1 quota changes [ 612.515772][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.751131][ T9] libceph: connect (1)[c::]:6789 error -101 [ 612.761032][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 612.812641][ T6212] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.830796][T13023] ceph: No mds server is up or the cluster is laggy [ 612.851200][ T6212] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.455827][T10619] libceph: connect (1)[c::]:6789 error -101 [ 613.515794][T10619] libceph: mon0 (1)[c::]:6789 connect error [ 613.590754][T13030] fuse: Bad value for 'fd' [ 613.838159][T13034] binder: BINDER_SET_CONTEXT_MGR already set [ 613.844275][T13034] binder: 13033:13034 ioctl 4018620d 200000000040 returned -16 [ 613.854806][T13034] binder: 13033:13034 ioctl c0306201 200000000240 returned -11 [ 614.115532][T13040] input: syz0 as /devices/virtual/input/input29 [ 614.152120][ T1787] libceph: connect (1)[c::]:6789 error -101 [ 614.372180][ T1787] libceph: mon0 (1)[c::]:6789 connect error [ 614.940746][ T1787] libceph: connect (1)[c::]:6789 error -101 [ 615.136042][ T1787] libceph: mon0 (1)[c::]:6789 connect error [ 615.161756][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.179727][T13041] ceph: No mds server is up or the cluster is laggy [ 615.209119][T12717] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.234090][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.241382][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.301727][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.308935][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.328704][T13049] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1528'. [ 615.694508][T13049] netlink: 2456 bytes leftover after parsing attributes in process `syz.7.1528'. [ 615.839091][T13052] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 617.614204][T13079] binder_alloc: 13078: binder_alloc_buf, no vma [ 618.147161][T12717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.628329][T12717] veth0_vlan: entered promiscuous mode [ 619.653025][T12717] veth1_vlan: entered promiscuous mode [ 619.689043][T13098] input: syz0 as /devices/virtual/input/input30 [ 619.848557][T12717] veth0_macvtap: entered promiscuous mode [ 619.872995][T12717] veth1_macvtap: entered promiscuous mode [ 619.924785][T12717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.945750][T12717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.342264][ T6924] libceph: connect (1)[c::]:6789 error -101 [ 621.354009][ T6924] libceph: mon0 (1)[c::]:6789 connect error [ 621.369034][ T6031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.440797][T13103] ceph: No mds server is up or the cluster is laggy [ 621.724220][ T6031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.809076][ T6031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.935115][T13121] fuse: Invalid rootmode [ 621.939026][T13115] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 622.060511][ T6031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.448504][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.491959][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.238687][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.349987][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.268465][T13150] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 625.276696][T13150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1450'. [ 628.910846][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1554'. [ 628.985920][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1554'. [ 629.504118][T13208] syzkaller0: entered promiscuous mode [ 629.528879][T13208] syzkaller0: entered allmulticast mode [ 629.957382][T13214] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 629.965985][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1559'. [ 631.624434][T13222] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 631.633075][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 633.776013][T13246] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 633.782581][T13246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 633.821037][T13246] vhci_hcd vhci_hcd.0: Device attached [ 633.848112][T13250] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 633.854749][T13250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.873131][T13246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 633.955758][T13246] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 633.962377][T13246] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.015865][T12148] vhci_hcd: vhci_device speed not set [ 634.055064][T13246] vhci_hcd vhci_hcd.0: Device attached [ 634.085758][T13250] vhci_hcd vhci_hcd.0: Device attached [ 634.085803][T12148] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 634.111303][T13258] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 634.117939][T13258] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.200244][T13258] vhci_hcd vhci_hcd.0: Device attached [ 634.254166][T13250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.317784][T13258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.327645][T13246] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 634.331601][T13250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.334267][T13246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 634.355990][T13246] vhci_hcd vhci_hcd.0: Device attached [ 634.900594][T13246] vhci_hcd vhci_hcd.0: port 0 already used [ 635.069188][T13268] vhci_hcd: connection closed [ 635.069454][ T36] vhci_hcd: stop threads [ 635.072307][T13262] vhci_hcd: connection closed [ 635.074163][ T36] vhci_hcd: release socket [ 635.091353][T13247] vhci_hcd: connection reset by peer [ 635.093079][T13251] vhci_hcd: connection closed [ 635.098538][ T36] vhci_hcd: disconnect device [ 635.108248][T13254] vhci_hcd: connection closed [ 635.155737][ T36] vhci_hcd: stop threads [ 635.185371][ T36] vhci_hcd: release socket [ 635.195516][ T36] vhci_hcd: disconnect device [ 635.205961][ T36] vhci_hcd: stop threads [ 635.210237][ T36] vhci_hcd: release socket [ 635.225065][ T36] vhci_hcd: disconnect device [ 635.234064][ T36] vhci_hcd: stop threads [ 635.239673][ T36] vhci_hcd: release socket [ 635.244193][ T36] vhci_hcd: disconnect device [ 635.249152][ T36] vhci_hcd: stop threads [ 635.253481][ T36] vhci_hcd: release socket [ 635.259395][ T36] vhci_hcd: disconnect device [ 635.402634][T13283] loop7: detected capacity change from 0 to 4096 [ 635.588910][T13283] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 636.210615][T13283] overlayfs: overlapping lowerdir path [ 636.351196][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1570'. [ 636.417739][T13301] ubi0: attaching mtd0 [ 636.444091][T13301] ubi0: scanning is finished [ 637.012035][T13301] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 637.013139][T13301] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 637.014238][T13301] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 637.015338][T13301] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 637.017530][T13301] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 637.018638][T13301] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 637.335749][T11804] Bluetooth: hci4: command 0x0405 tx timeout [ 637.642514][T13301] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 846084890 [ 637.642541][T13301] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 637.642617][T13309] ubi0: background thread "ubi_bgt0d" started, PID 13309 [ 637.642665][T13302] ubi0: detaching mtd0 [ 637.974986][T13302] ubi0: mtd0 is detached [ 638.359622][T13315] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 638.360523][T13315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 639.132997][T13314] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1573'. [ 639.133039][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1573'. [ 639.405909][T12148] vhci_hcd: vhci_device speed not set [ 639.415937][T11804] Bluetooth: hci4: command 0x0405 tx timeout [ 639.811475][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 639.817670][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 639.957456][T13327] ceph: No mds server is up or the cluster is laggy [ 640.792020][ T24] usb usb46-port1: attempt power cycle [ 641.476496][T13345] input: syz0 as /devices/virtual/input/input31 [ 641.628468][T13352] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 641.635453][T13352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 641.656460][T13352] vhci_hcd vhci_hcd.0: Device attached [ 641.679476][ T24] usb usb46-port1: unable to enumerate USB device [ 641.691283][T13348] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 641.697916][T13348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 641.713201][T13348] vhci_hcd vhci_hcd.0: Device attached [ 641.759322][T13352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 641.818708][T13358] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 641.825354][T13358] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 641.866349][T13358] vhci_hcd vhci_hcd.0: Device attached [ 641.912798][T10619] usb 37-2: new low-speed USB device number 2 using vhci_hcd [ 641.927754][T13348] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 641.934394][T13348] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 641.988323][T13358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 641.998842][T13352] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 642.005873][T13352] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 642.100921][T13348] vhci_hcd vhci_hcd.0: Device attached [ 642.136983][T13368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 642.196186][T13352] vhci_hcd vhci_hcd.0: Device attached [ 642.214779][T13348] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 642.286647][T13352] vhci_hcd vhci_hcd.0: port 0 already used [ 642.318456][T13364] vhci_hcd: connection closed [ 642.320754][T13355] vhci_hcd: connection reset by peer [ 642.323732][T13361] vhci_hcd: connection closed [ 642.326340][T13353] vhci_hcd: connection closed [ 642.336421][T13359] vhci_hcd: connection closed [ 642.341700][ T13] vhci_hcd: stop threads [ 642.354040][ T13] vhci_hcd: release socket [ 642.363946][ T13] vhci_hcd: disconnect device [ 642.399367][ T13] vhci_hcd: stop threads [ 642.403647][ T13] vhci_hcd: release socket [ 642.413166][ T13] vhci_hcd: disconnect device [ 642.439876][ T13] vhci_hcd: stop threads [ 642.449685][ T13] vhci_hcd: release socket [ 642.529005][ T13] vhci_hcd: disconnect device [ 642.537955][ T13] vhci_hcd: stop threads [ 642.549063][ T13] vhci_hcd: release socket [ 642.576173][ T13] vhci_hcd: disconnect device [ 642.592705][ T13] vhci_hcd: stop threads [ 642.602346][ T13] vhci_hcd: release socket [ 642.626579][ T13] vhci_hcd: disconnect device [ 642.889633][T13382] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 645.808684][T13408] loop2: detected capacity change from 0 to 512 [ 645.956885][T13408] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1586: casefold flag without casefold feature [ 646.268508][T13408] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1586: couldn't read orphan inode 15 (err -117) [ 646.834327][T13408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.906459][T10174] libceph: connect (1)[c::]:6789 error -101 [ 646.912608][T10174] libceph: mon0 (1)[c::]:6789 connect error [ 646.918814][T13416] ceph: No mds server is up or the cluster is laggy [ 647.085954][T10619] vhci_hcd: vhci_device speed not set [ 647.971599][T11971] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.367988][T13439] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 648.377829][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1585'. [ 648.651720][T13447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1593'. [ 648.739581][T13450] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 648.746494][T13450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 648.833550][T13450] vhci_hcd vhci_hcd.0: Device attached [ 648.889994][T13456] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 648.896728][T13456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.089109][ T1787] vhci_hcd: vhci_device speed not set [ 649.102375][ T9] usb usb38-port1: attempt power cycle [ 649.146715][T13450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 649.194579][T13456] vhci_hcd vhci_hcd.0: Device attached [ 649.225891][ T1787] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 649.262182][T13463] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(17) [ 649.268827][T13463] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.366015][T13450] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(20) [ 649.372654][T13450] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.519068][T13456] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15) [ 649.525723][T13456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 649.558442][T13463] vhci_hcd vhci_hcd.0: Device attached [ 649.565473][T13474] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 649.587903][T13450] vhci_hcd vhci_hcd.0: Device attached [ 649.593709][T13456] vhci_hcd vhci_hcd.0: Device attached [ 649.607750][T13450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 649.635502][T13450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 649.711288][T13456] vhci_hcd vhci_hcd.0: port 0 already used [ 649.741095][ T9] usb usb38-port1: unable to enumerate USB device [ 649.750803][T13452] vhci_hcd: connection reset by peer [ 649.756277][T13457] vhci_hcd: connection closed [ 649.756505][T13470] vhci_hcd: connection closed [ 649.761313][T13464] vhci_hcd: connection closed [ 649.771621][T13466] vhci_hcd: connection closed [ 649.785964][ T6151] vhci_hcd: stop threads [ 649.822146][ T6151] vhci_hcd: release socket [ 649.850865][ T6151] vhci_hcd: disconnect device [ 649.856044][ T6151] vhci_hcd: stop threads [ 649.875765][ T6151] vhci_hcd: release socket [ 649.885896][ T6151] vhci_hcd: disconnect device [ 649.905693][ T6151] vhci_hcd: stop threads [ 649.927856][ T6151] vhci_hcd: release socket [ 649.938120][ T6151] vhci_hcd: disconnect device [ 650.012663][ T6151] vhci_hcd: stop threads [ 650.042745][ T6151] vhci_hcd: release socket [ 650.076213][ T6151] vhci_hcd: disconnect device [ 650.084682][ T6151] vhci_hcd: stop threads [ 650.099280][ T6151] vhci_hcd: release socket [ 650.103965][ T6151] vhci_hcd: disconnect device [ 650.797753][T13461] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 651.771689][T13494] ceph: No mds server is up or the cluster is laggy [ 651.998348][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1597'. [ 652.064488][T11804] Bluetooth: hci2: command 0x0406 tx timeout [ 652.510191][T13510] loop7: detected capacity change from 0 to 64 [ 652.594349][T13510] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 652.983005][T13524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 653.009279][T13526] loop2: detected capacity change from 0 to 512 [ 653.043258][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1607'. [ 653.103957][T13526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.139789][T13526] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 653.195950][T13526] EXT4-fs error (device loop2): ext4_do_update_inode:5567: inode #2: comm syz.2.1609: corrupted inode contents [ 653.216479][T13526] EXT4-fs error (device loop2): ext4_dirty_inode:6458: inode #2: comm syz.2.1609: mark_inode_dirty error [ 653.234287][T13526] EXT4-fs error (device loop2): ext4_do_update_inode:5567: inode #2: comm syz.2.1609: corrupted inode contents [ 653.266355][T13526] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1609: mark_inode_dirty error [ 654.373569][ T1787] vhci_hcd: vhci_device speed not set [ 654.601883][T11971] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.507988][T13574] loop6: detected capacity change from 0 to 256 [ 656.588411][T13574] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 656.703510][ T24] usb usb48-port1: attempt power cycle [ 657.497725][ T24] usb usb48-port1: unable to enumerate USB device [ 657.733718][T13587] input: syz0 as /devices/virtual/input/input32 [ 657.832863][T13590] 9pnet_virtio: no channels available for device syz [ 662.335741][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 663.154875][T13617] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 663.206927][T13617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1624'. [ 663.237692][T13622] syzkaller0: entered promiscuous mode [ 663.243336][T13622] syzkaller0: entered allmulticast mode [ 664.729565][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1626'. [ 664.738705][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1626'. [ 665.685820][ T5928] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 665.851293][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.885318][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.931112][ T5928] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 665.950888][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 665.995682][ T5928] usb 3-1: SerialNumber: syz [ 666.193885][T13654] loop6: detected capacity change from 0 to 4096 [ 666.229685][T13654] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 666.250801][ T5928] usb 3-1: cannot find UAC_HEADER [ 666.353152][ T5928] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 666.406077][ T5928] usb 3-1: USB disconnect, device number 4 [ 666.490586][T13660] udevd[13660]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.108348][T13725] fuse: Unknown parameter 'use00000000000000000000' [ 672.437418][T13727] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 672.682584][T13733] loop6: detected capacity change from 0 to 32768 [ 672.724308][T13727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1644'. [ 672.815916][T13733] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 672.947831][T13733] XFS (loop6): Ending clean mount [ 672.960183][T13733] XFS (loop6): Quotacheck needed: Please wait. [ 673.082968][T13733] XFS (loop6): Quotacheck: Done. [ 673.722416][ T6512] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 675.456153][T13772] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 675.467721][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1655'. [ 676.634156][T13778] loop6: detected capacity change from 0 to 512 [ 676.841152][T13778] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.1657: bad orphan inode 13 [ 676.888023][T13778] ext4_test_bit(bit=12, block=4) = 1 [ 676.915812][T13778] is_bad_inode(inode)=0 [ 676.928357][T13778] NEXT_ORPHAN(inode)=0 [ 676.932647][T13778] max_ino=32 [ 676.946764][T13778] i_nlink=1 [ 676.951629][T13778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.857912][T13795] fuse: Unknown parameter 'use00000000000000000000' [ 679.193166][ T6512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.545203][T13804] input: syz0 as /devices/virtual/input/input33 [ 680.089790][T13808] loop9: detected capacity change from 0 to 512 [ 680.282761][T13808] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.310663][T13808] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.619772][ T30] audit: type=1800 audit(2000000060.584:40): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1665" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 680.763154][T13823] loop7: detected capacity change from 0 to 256 [ 680.775833][T11804] Bluetooth: hci4: command 0x0405 tx timeout [ 681.528861][T13808] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 681.646170][T13823] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 682.440738][T11801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.496151][T13823] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff) [ 682.661550][T13833] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 682.675640][T13833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1668'. [ 683.329002][T13840] loop9: detected capacity change from 0 to 128 [ 684.306884][T13840] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 684.509950][T13849] loop7: detected capacity change from 0 to 512 [ 684.649031][T13849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.735783][T13849] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.739191][T13856] fuse: Unknown parameter 'use00000000000000000000' [ 684.933948][T13849] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 685.195840][ T6563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.465931][ T6924] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 685.605926][ T6924] usb 3-1: device descriptor read/64, error -71 [ 685.925705][ T6924] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 686.340461][T13886] loop3: detected capacity change from 0 to 64 [ 686.352220][ T6924] usb 3-1: device descriptor read/64, error -71 [ 686.491434][ T6924] usb usb3-port1: attempt power cycle [ 686.654975][T13889] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 686.798368][T13894] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1679'. [ 686.895927][ T6924] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 686.986316][ T6924] usb 3-1: device descriptor read/8, error -71 [ 687.328283][ T6924] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 687.401875][ T6924] usb 3-1: device descriptor read/8, error -71 [ 687.484873][T13908] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 687.494331][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 688.348906][T13917] loop2: detected capacity change from 0 to 128 [ 688.416566][T13919] fuse: Unknown parameter 'user_i00000000000000000000' [ 688.446269][T13917] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 689.200545][T13929] loop9: detected capacity change from 0 to 2048 [ 689.263369][T13929] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 689.366040][ T6924] usb usb3-port1: unable to enumerate USB device [ 689.392558][T13929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.865825][ T6924] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 691.038212][ T6924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.074378][ T6924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.105152][ T6924] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 691.117802][ T6924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 691.310077][ T6924] usb 3-1: SerialNumber: syz [ 692.064636][ T6924] usb 3-1: 0:2 : does not exist [ 692.125807][ T6924] usb 3-1: USB disconnect, device number 9 [ 692.140400][T13967] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 692.200959][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1696'. [ 692.485228][T13983] fuse: Unknown parameter 'user_i00000000000000000000' [ 698.020130][T14038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 698.029162][T14038] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1708'. [ 699.460755][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 699.917775][T14055] ubi0: attaching mtd0 [ 699.924316][T14055] ubi0: scanning is finished [ 700.020202][T14044] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 700.028747][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1710'. [ 700.190241][T14055] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 701.761417][T14074] loop7: detected capacity change from 0 to 32768 [ 701.850135][T14074] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 701.859079][T14074] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 701.907920][T14074] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 701.919939][T10619] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 701.949724][T10619] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 703.088989][T10619] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1139ms [ 703.535867][T10619] gfs2: fsid=syz:syz.0: jid=0: Done [ 703.576312][T14074] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 703.719731][T14074] gfs2: fsid=syz:syz.0: found 1 quota changes [ 704.155266][T14098] loop6: detected capacity change from 0 to 524287999 [ 704.349297][T14102] binder: 14099:14102 ioctl c0306201 0 returned -14 [ 704.399792][T14102] binder: 14099:14102 ioctl c0306201 200000000240 returned -11 [ 704.801470][T14113] fuse: Unknown parameter 'grou00000000000000000000' [ 707.819244][T11804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 707.852079][T11804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 707.861825][T14137] loop3: detected capacity change from 0 to 512 [ 707.868841][T11804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 707.876777][T11804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 707.907852][T11804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 707.976526][T14137] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 708.011076][T14139] lo speed is unknown, defaulting to 1000 [ 708.239548][T14137] EXT4-fs (loop3): 1 truncate cleaned up [ 708.311189][T14148] loop9: detected capacity change from 0 to 512 [ 708.326944][T14137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.411722][T14149] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 708.476842][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1720'. [ 708.838834][T14148] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.1732: bad orphan inode 13 [ 708.968414][T14137] syz.3.1731 (pid 14137) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 709.005868][T14148] ext4_test_bit(bit=12, block=4) = 1 [ 709.065821][T14148] is_bad_inode(inode)=0 [ 709.070017][T14148] NEXT_ORPHAN(inode)=0 [ 709.074090][T14148] max_ino=32 [ 709.126465][T14137] EXT4-fs (loop3): shut down requested (2) [ 709.205793][T14148] i_nlink=1 [ 709.210690][T14148] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.225493][T11804] Bluetooth: hci5: command tx timeout [ 710.872193][T14139] chnl_net:caif_netlink_parms(): no params data found [ 710.992192][T14166] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 711.113323][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1733'. [ 711.239733][T11801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.384779][T12717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.295742][ T5854] Bluetooth: hci5: command tx timeout [ 712.313755][T14191] binder: BINDER_SET_CONTEXT_MGR already set [ 712.373320][T14191] binder: 14190:14191 ioctl 4018620d 200000000040 returned -16 [ 712.441360][T14191] binder: 14190:14191 ioctl c0306201 200000000240 returned -11 [ 712.465689][ T5928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 712.566320][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.578340][T14198] fuse: Unknown parameter 'grou00000000000000000000' [ 712.585768][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.604103][T14139] bridge_slave_0: entered allmulticast mode [ 712.622828][T14139] bridge_slave_0: entered promiscuous mode [ 712.629301][ T5928] usb 4-1: device descriptor read/64, error -71 [ 712.653811][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.689736][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.727910][T14139] bridge_slave_1: entered allmulticast mode [ 712.748481][T14139] bridge_slave_1: entered promiscuous mode [ 712.865997][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 713.045939][ T5928] usb 4-1: device descriptor read/64, error -71 [ 713.180301][ T5928] usb usb4-port1: attempt power cycle [ 713.534281][T14139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.555803][ T5928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 713.575876][T11804] Bluetooth: hci4: command 0x0405 tx timeout [ 713.625130][T14139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.647792][ T5928] usb 4-1: device descriptor read/8, error -71 [ 713.776813][T14220] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 713.794479][T14220] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1738'. [ 713.889174][ T5928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 714.046887][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1740'. [ 714.056038][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1740'. [ 714.419719][T11804] Bluetooth: hci5: command tx timeout [ 714.455096][ T5928] usb 4-1: device descriptor read/8, error -71 [ 714.519827][T14139] team0: Port device team_slave_0 added [ 714.581542][T14139] team0: Port device team_slave_1 added [ 714.587820][ T5928] usb usb4-port1: unable to enumerate USB device [ 715.137999][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1741'. [ 715.147145][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 715.600603][T14232] loop7: detected capacity change from 0 to 1024 [ 715.718695][T14139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.731481][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.783038][T14139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.826807][T14139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.834034][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.871496][T14139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.455950][T11804] Bluetooth: hci5: command tx timeout [ 716.534049][T14232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.823499][T14245] loop2: detected capacity change from 0 to 512 [ 716.942018][T14245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.990430][T14139] hsr_slave_0: entered promiscuous mode [ 717.001802][T14139] hsr_slave_1: entered promiscuous mode [ 717.009090][T14139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.017244][T14139] Cannot create hsr debugfs directory [ 717.039467][T14245] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.456675][T14257] EXT4-fs (loop2): shut down requested (1) [ 717.882399][T11971] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.938184][ T6563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.097312][T14265] fuse: Unknown parameter 'grou00000000000000000000' [ 719.380085][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1751'. [ 719.389351][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 719.872793][T14287] loop6: detected capacity change from 0 to 524287999 [ 720.656248][T14302] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1754'. [ 720.665645][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1754'. [ 721.272921][T14306] loop3: detected capacity change from 0 to 1764 [ 721.333590][T14306] iso9660: Unknown parameter 'dw)mode' [ 723.799337][T14323] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 723.823867][T14331] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1758'. [ 723.833124][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1758'. [ 723.843105][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'. [ 724.221862][ T31] INFO: task kworker/0:8:6004 blocked for more than 143 seconds. [ 724.244061][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 724.265916][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.464130][ T31] task:kworker/0:8 state:D stack:20696 pid:6004 tgid:6004 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 724.476633][ T31] Workqueue: events_power_efficient hub_init_func2 [ 724.483184][ T31] Call Trace: [ 724.486527][ T31] [ 724.489462][ T31] __schedule+0x16f5/0x4d00 [ 724.493990][ T31] ? schedule+0x165/0x360 [ 724.498410][ T31] ? preempt_schedule+0xae/0xc0 [ 724.503277][ T31] ? __pfx___schedule+0x10/0x10 [ 724.551323][ T31] ? preempt_schedule+0xae/0xc0 [ 724.556368][ T31] ? schedule+0x91/0x360 [ 724.561191][ T31] schedule+0x165/0x360 [ 724.565375][ T31] schedule_preempt_disabled+0x13/0x30 [ 724.576275][ T31] __mutex_lock+0x724/0xe80 [ 724.580810][ T31] ? __mutex_lock+0x51b/0xe80 [ 724.585493][ T31] ? hub_activate+0xb7/0x1ea0 [ 724.741848][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 724.772487][ T31] ? do_raw_spin_lock+0x121/0x290 [ 724.804847][ T31] ? __lock_acquire+0xab9/0xd20 [ 724.863648][ T31] hub_activate+0xb7/0x1ea0 [ 724.878086][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 724.889320][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 724.897766][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 724.906719][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 724.916890][ T31] process_scheduled_works+0xae1/0x17b0 [ 724.927092][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 724.942881][ T31] worker_thread+0x8a0/0xda0 [ 724.970429][ T31] kthread+0x70e/0x8a0 [ 724.991972][ T31] ? __pfx_worker_thread+0x10/0x10 [ 725.005847][ T31] ? __pfx_kthread+0x10/0x10 [ 725.024118][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.037411][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.055037][ T31] ? __pfx_kthread+0x10/0x10 [ 725.060081][ T31] ret_from_fork+0x3fc/0x770 [ 725.064787][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 725.075813][ T31] ? __switch_to_asm+0x39/0x70 [ 725.080698][ T31] ? __switch_to_asm+0x33/0x70 [ 725.090938][ T31] ? __pfx_kthread+0x10/0x10 [ 725.095968][ T31] ret_from_fork_asm+0x1a/0x30 [ 725.100897][ T31] [ 725.104067][ T31] INFO: task kworker/0:2:10445 blocked for more than 143 seconds. [ 725.117674][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 725.124966][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.150928][ T31] task:kworker/0:2 state:D stack:21960 pid:10445 tgid:10445 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 725.195699][ T31] Workqueue: usb_hub_wq hub_event [ 725.205843][ T31] Call Trace: [ 725.215149][ T31] [ 725.222616][ T31] __schedule+0x16f5/0x4d00 [ 725.241206][ T31] ? schedule+0x165/0x360 [ 725.256269][ T31] ? __pfx___schedule+0x10/0x10 [ 725.269004][ T31] ? preempt_schedule_common+0x83/0xd0 [ 725.280165][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 725.293853][ T31] ? schedule+0x91/0x360 [ 725.305653][ T31] schedule+0x165/0x360 [ 725.317721][ T31] schedule_timeout+0x9a/0x270 [ 725.332254][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 725.350840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.364145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.384642][ T31] ? wait_for_completion+0x267/0x5d0 [ 725.406042][ T31] wait_for_completion+0x2bf/0x5d0 [ 725.419599][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 725.434334][ T31] ? __flush_work+0xd2/0xbc0 [ 725.447874][ T31] ? __flush_work+0xd2/0xbc0 [ 725.463738][ T31] __flush_work+0x9b9/0xbc0 [ 725.478906][ T31] ? __flush_work+0xd2/0xbc0 [ 725.500794][ T31] ? __pfx___flush_work+0x10/0x10 [ 725.512501][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 725.525821][ T31] ? __queue_work+0xc56/0xfb0 [ 725.540799][ T31] ? flush_delayed_work+0x11d/0x190 [ 725.569173][ T31] flush_delayed_work+0x13e/0x190 [ 725.589388][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 725.615442][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.625276][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 725.643424][ T31] hub_quiesce+0x1f0/0x330 [ 725.656950][ T31] hub_disconnect+0xc8/0x470 [ 725.672943][ T31] usb_unbind_interface+0x26b/0x910 [ 725.690839][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 725.710132][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 725.730083][ T31] bus_remove_device+0x34d/0x410 [ 725.746566][ T31] device_del+0x511/0x8e0 [ 725.762481][ T31] ? kfree+0x18e/0x440 [ 725.776217][ T31] ? __pfx_device_del+0x10/0x10 [ 725.803077][ T31] ? kobject_put+0x446/0x480 [ 725.808043][ T31] usb_disable_device+0x3e9/0x8a0 [ 725.818717][ T31] usb_disconnect+0x330/0x950 [ 725.829073][ T31] hub_event+0x1cdb/0x4a00 [ 725.838039][ T31] ? do_raw_spin_lock+0x121/0x290 [ 725.848814][ T31] ? register_lock_class+0x51/0x320 [ 725.860767][ T31] ? __pfx_hub_event+0x10/0x10 [ 725.871217][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.885730][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.894889][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.907596][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.920067][ T31] process_scheduled_works+0xae1/0x17b0 [ 725.938007][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.953501][ T31] worker_thread+0x8a0/0xda0 [ 725.968262][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 725.987734][ T31] ? __kthread_parkme+0x7b/0x200 [ 726.007677][ T31] kthread+0x70e/0x8a0 [ 726.011817][ T31] ? __pfx_worker_thread+0x10/0x10 [ 726.031546][ T31] ? __pfx_kthread+0x10/0x10 [ 726.045800][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 726.051141][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.080118][ T31] ? __pfx_kthread+0x10/0x10 [ 726.084760][ T31] ret_from_fork+0x3fc/0x770 [ 726.089723][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 726.105680][ T31] ? __switch_to_asm+0x39/0x70 [ 726.111134][ T31] ? __switch_to_asm+0x33/0x70 [ 726.120218][ T31] ? __pfx_kthread+0x10/0x10 [ 726.124854][ T31] ret_from_fork_asm+0x1a/0x30 [ 726.144916][ T31] [ 726.160069][ T31] [ 726.160069][ T31] Showing all locks held in the system: [ 726.186767][ T31] 2 locks held by kworker/u8:1/13: [ 726.191912][ T31] #0: ffff888145eff148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 726.217501][ T31] #1: ffffc90000127bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 726.273392][ T31] 1 lock held by khungtaskd/31: [ 726.322647][ T31] #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 726.364317][ T31] 1 lock held by dhcpcd/5498: [ 726.384349][ T31] #0: ffffffff8f516c88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x198/0x740 [ 726.412383][ T31] 2 locks held by getty/5596: [ 726.428666][ T31] #0: ffff8880341430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 726.452858][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 726.479638][ T31] 3 locks held by kworker/0:8/6004: [ 726.490456][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 726.517808][ T31] #1: ffffc9000538fbc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 726.554778][ T31] #2: ffff888028f89198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 726.573458][ T31] 3 locks held by kworker/u8:10/6151: [ 726.593151][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 726.630898][ T31] #1: ffffc9000554fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 726.657912][ T31] #2: ffffffff8f516c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 726.682343][ T31] 5 locks held by kworker/0:2/10445: [ 726.702394][ T31] #0: ffff888022280d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 726.727925][ T31] #1: ffffc9001c217bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 726.765539][ T31] #2: ffff88802842c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 726.793785][ T31] #3: ffff888028f89198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 726.819017][ T31] #4: ffff8880282b3160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 726.841297][ T31] 1 lock held by syz.6.1691/13936: [ 726.852194][ T31] #0: ffff88802842c198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 726.871391][ T31] 8 locks held by syz-executor/14139: [ 726.882236][ T31] #0: ffff88807456e428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 726.901224][ T31] #1: ffff888074269c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 726.931010][ T31] #2: ffff888143b51968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 726.946230][ T31] #3: ffffffff8edafb28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 726.960341][ T31] #4: ffff888075ca30e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 726.972844][ T31] #5: ffff888075ca4250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 726.987499][ T31] #6: ffffffff8f516c88 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x103/0x6a0 [ 726.998874][ T31] #7: ffffffff8e1419f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 727.012223][ T31] 1 lock held by syz.9.1738/14223: [ 727.020642][ T31] 2 locks held by syz.2.1759/14334: [ 727.033397][ T31] [ 727.045047][ T31] ============================================= [ 727.045047][ T31] [ 727.061054][ T31] NMI backtrace for cpu 0 [ 727.061090][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 727.061111][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.061122][ T31] Call Trace: [ 727.061129][ T31] [ 727.061137][ T31] dump_stack_lvl+0x189/0x250 [ 727.061163][ T31] ? __wake_up_klogd+0xd9/0x110 [ 727.061183][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.061207][ T31] ? __pfx__printk+0x10/0x10 [ 727.061238][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 727.061263][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 727.061282][ T31] ? _printk+0xcf/0x120 [ 727.061303][ T31] ? __pfx__printk+0x10/0x10 [ 727.061323][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 727.061345][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 727.061378][ T31] watchdog+0xfee/0x1030 [ 727.061400][ T31] ? watchdog+0x1de/0x1030 [ 727.061427][ T31] kthread+0x70e/0x8a0 [ 727.061448][ T31] ? __pfx_watchdog+0x10/0x10 [ 727.061464][ T31] ? __pfx_kthread+0x10/0x10 [ 727.061482][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.061505][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.061527][ T31] ? __pfx_kthread+0x10/0x10 [ 727.061544][ T31] ret_from_fork+0x3fc/0x770 [ 727.061567][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 727.061594][ T31] ? __switch_to_asm+0x39/0x70 [ 727.061609][ T31] ? __switch_to_asm+0x33/0x70 [ 727.061632][ T31] ? __pfx_kthread+0x10/0x10 [ 727.061650][ T31] ret_from_fork_asm+0x1a/0x30 [ 727.061682][ T31] [ 727.061688][ T31] Sending NMI from CPU 0 to CPUs 1: [ 727.221432][ C1] NMI backtrace for cpu 1 [ 727.221449][ C1] CPU: 1 UID: 0 PID: 14223 Comm: syz.9.1738 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 727.221467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.221490][ C1] RIP: 0010:unwind_next_frame+0xb1b/0x2390 [ 727.221517][ C1] Code: 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 bd 48 b1 00 48 89 9c 24 88 00 00 00 <49> 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c [ 727.221530][ C1] RSP: 0018:ffffc90018516d78 EFLAGS: 00000246 [ 727.221544][ C1] RAX: dffffc0000000000 RBX: ffffc90018516e58 RCX: ffffffff8fbc7948 [ 727.221556][ C1] RDX: ffffffff903bbffa RSI: 0000000000000002 RDI: ffffffff8be31ca0 [ 727.221567][ C1] RBP: 1ffff920030a2dca R08: 0000000000000001 R09: ffffffff81728c65 [ 727.221577][ C1] R10: ffffc90018516e98 R11: ffffffff81ac6300 R12: ffffc900185177e0 [ 727.221588][ C1] R13: 1ffff920030a2dcb R14: ffffc90018516e48 R15: ffffc90018510000 [ 727.221600][ C1] FS: 0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 727.221612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.221622][ C1] CR2: 0000555f13697950 CR3: 0000000073dd6000 CR4: 00000000003526f0 [ 727.221636][ C1] Call Trace: [ 727.221642][ C1] [ 727.221652][ C1] ? unwind_next_frame+0xa5/0x2390 [ 727.221671][ C1] ? shmem_evict_inode+0x272/0xa70 [ 727.221689][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 727.221703][ C1] arch_stack_walk+0x11c/0x150 [ 727.221725][ C1] ? shmem_evict_inode+0x272/0xa70 [ 727.221741][ C1] stack_trace_save+0x9c/0xe0 [ 727.221754][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 727.221772][ C1] save_stack+0xf5/0x1f0 [ 727.221793][ C1] ? __pfx_save_stack+0x10/0x10 [ 727.221811][ C1] ? free_unref_folios+0xd77/0x1570 [ 727.221825][ C1] ? folios_put_refs+0x559/0x640 [ 727.221841][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 727.221857][ C1] ? shmem_evict_inode+0x272/0xa70 [ 727.221876][ C1] ? page_ext_put+0x97/0xc0 [ 727.221898][ C1] __reset_page_owner+0x71/0x1f0 [ 727.221918][ C1] free_unref_folios+0xd77/0x1570 [ 727.221940][ C1] folios_put_refs+0x559/0x640 [ 727.221961][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 727.221978][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 727.221999][ C1] shmem_undo_range+0x49e/0x14b0 [ 727.222023][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 727.222051][ C1] ? kernel_text_address+0xa5/0xe0 [ 727.222068][ C1] ? __kernel_text_address+0xd/0x40 [ 727.222099][ C1] ? kasan_save_stack+0x4d/0x60 [ 727.222116][ C1] ? kasan_save_stack+0x3e/0x60 [ 727.222133][ C1] ? call_rcu+0x157/0x9c0 [ 727.222152][ C1] shmem_evict_inode+0x272/0xa70 [ 727.222169][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 727.222186][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 727.222200][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 727.222221][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 727.222237][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 727.222251][ C1] evict+0x501/0x9c0 [ 727.222272][ C1] ? __pfx_evict+0x10/0x10 [ 727.222289][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 727.222304][ C1] ? _raw_spin_unlock+0x28/0x50 [ 727.222322][ C1] ? iput+0x6d8/0x9d0 [ 727.222345][ C1] __dentry_kill+0x209/0x660 [ 727.222360][ C1] ? dput+0x37/0x2b0 [ 727.222374][ C1] dput+0x19f/0x2b0 [ 727.222388][ C1] __fput+0x68e/0xa70 [ 727.222412][ C1] task_work_run+0x1d1/0x260 [ 727.222428][ C1] ? __pfx_task_work_run+0x10/0x10 [ 727.222448][ C1] do_exit+0x6b5/0x2300 [ 727.222468][ C1] ? __pfx_do_exit+0x10/0x10 [ 727.222489][ C1] do_group_exit+0x21c/0x2d0 [ 727.222503][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.222525][ C1] get_signal+0x1286/0x1340 [ 727.222551][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 727.222572][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 727.222587][ C1] ? force_sig_fault+0xdc/0x130 [ 727.222609][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 727.222628][ C1] exit_to_user_mode_loop+0x75/0x110 [ 727.222645][ C1] do_syscall_64+0x2bd/0x3b0 [ 727.222659][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.222677][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.222692][ C1] ? clear_bhb_loop+0x60/0xb0 [ 727.222708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.222722][ C1] RIP: 0033:0x7efee01c11e5 [ 727.222740][ C1] Code: Unable to access opcode bytes at 0x7efee01c11bb. [ 727.222748][ C1] RSP: 002b:00007efee0f2ef80 EFLAGS: 00000393 ORIG_RAX: 00000000000000db [ 727.222763][ C1] RAX: ffffffffffffffda RBX: 00007efee03b6160 RCX: 00007efee01c11e5 [ 727.222773][ C1] RDX: 00007efee0f2efc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.222784][ C1] RBP: 00007efee0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 727.222793][ C1] R10: 0000000000000000 R11: 0000000000000393 R12: 0000000000000000 [ 727.222802][ C1] R13: 0000000000000000 R14: 00007efee03b6160 R15: 00007ffe74515e38 [ 727.222820][ C1] [ 727.703114][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.711658][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 727.718527][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 727.729797][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.739845][ T31] Call Trace: [ 727.743117][ T31] [ 727.746035][ T31] dump_stack_lvl+0x99/0x250 [ 727.750621][ T31] ? __asan_memcpy+0x40/0x70 [ 727.755200][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.760389][ T31] ? __pfx__printk+0x10/0x10 [ 727.764977][ T31] panic+0x2db/0x790 [ 727.768864][ T31] ? __pfx_panic+0x10/0x10 [ 727.773268][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 727.779075][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 727.784434][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 727.790583][ T31] watchdog+0x102d/0x1030 [ 727.794904][ T31] ? watchdog+0x1de/0x1030 [ 727.799311][ T31] kthread+0x70e/0x8a0 [ 727.803367][ T31] ? __pfx_watchdog+0x10/0x10 [ 727.808050][ T31] ? __pfx_kthread+0x10/0x10 [ 727.812626][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.817828][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.823016][ T31] ? __pfx_kthread+0x10/0x10 [ 727.827589][ T31] ret_from_fork+0x3fc/0x770 [ 727.832169][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 727.837282][ T31] ? __switch_to_asm+0x39/0x70 [ 727.842037][ T31] ? __switch_to_asm+0x33/0x70 [ 727.846783][ T31] ? __pfx_kthread+0x10/0x10 [ 727.851359][ T31] ret_from_fork_asm+0x1a/0x30 [ 727.856134][ T31] [ 727.859418][ T31] Kernel Offset: disabled [ 727.863724][ T31] Rebooting in 86400 seconds..