last executing test programs: 17m55.841301977s ago: executing program 32 (id=64): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18f6fffffeffffff000000000000001811030000001c46e3c50e1743866269b3a78e35ba5563a49740e54bbc97053a2ad2019d25f1cbeb273e25a22004c6d47ff29699648b4e38e5db1b2109094ad8c912f35868c75ce1a169ce9227d8160d00d000b3097f7d675ff225080b80338c846884d2c4533e83a19e01777b89d28093607733275f8fe0", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22}, 0xfffffffffffffe31) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40002, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0xfffffffffffffcf5, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$kcm(0x29, 0x2, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) ptrace(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000340)={'sit0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r9, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000100), &(0x7f0000000f00)}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) 16m33.573027457s ago: executing program 33 (id=312): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, 0xffffffffffffffff, 0x34da2000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000680001"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) 15m54.679478809s ago: executing program 34 (id=377): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='./dev/nullb1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='zonefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)="123400"/383, 0x17f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00\x00\x00\b'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x5b0, r3}, 0x38) 14m48.144360133s ago: executing program 35 (id=495): r0 = syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) socket$netlink(0x10, 0x3, 0x14) 14m44.767754093s ago: executing program 36 (id=548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000170100000200000000000000000000001800"], 0x30}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa0, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xb3a}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x50}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) socket$inet6_sctp(0xa, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='ccgx-ucsi 0x08\n\x00', 0xf) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000", 0x42}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 14m40.305562389s ago: executing program 37 (id=556): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x3c7, 0x0, r0}, 0x0, &(0x7f0000001080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket(0x1e, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r4, 0x0) read(r4, &(0x7f0000000340)=""/251, 0xfb) 14m37.817091248s ago: executing program 38 (id=561): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 14m16.340948358s ago: executing program 39 (id=574): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 13m37.654791064s ago: executing program 40 (id=719): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a0c446, &(0x7f0000000200)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") r0 = open(0x0, 0x4000, 0xd7) finit_module(r0, 0x0, 0x1) 13m35.877040437s ago: executing program 41 (id=727): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 13m33.391831026s ago: executing program 42 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0xc053, r1, 0xaccd5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, @mcast1, @empty, 0x0, 0x0, 0x16, 0x9}}) 13m29.720748322s ago: executing program 43 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020}, 0x2020) 13m12.815554605s ago: executing program 44 (id=747): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 13m10.885872303s ago: executing program 45 (id=753): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000040, &(0x7f00000003c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x63, 0x34, 0x32, 0x30, 0x32, 0x62, 0x63], 0x2d, [0x35, 0x65, 0x64, 0x32], 0x2d, [0x39, 0x39, 0x9, 0x32], 0x2d, [0x36, 0x62, 0x64, 0x30], 0x2d, [0x65, 0x39, 0x36, 0x38, 0x37, 0x32, 0x66, 0x35]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@appraise_type}, {@seclabel}, {@measure}, {@measure}, {@obj_user}]}, 0x1, 0x5b9, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x7726a299a32e2b0e, 0x100) sync_file_range(r0, 0x889, 0xe, 0x6) 13m8.364038261s ago: executing program 46 (id=761): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) signalfd(r2, 0x0, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x803) futex(&(0x7f0000000040)=0x1, 0xa, 0x1, 0x0, 0x0, 0x2) 13m3.944565637s ago: executing program 47 (id=767): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x50080, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 11m51.355485448s ago: executing program 48 (id=921): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x48050) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}, {{&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000600)="d2", 0x1}], 0x2, &(0x7f0000000880)=[{0x60, 0x108, 0x8001, "76df380dfdeaed7643154fab5a42cbd3ecf06828bdd912759944e6bc285b73eda646deb4f8a583c72539bfa7771633e0f574dfb3e651c1f6f23b6f072b532d45287c2c70afa9e4564ff5d7"}, {0x58, 0x119, 0x8, "5982289191039650269cd023c94ca23bada667e4fa9aa57d2c038875024f88f9671f28b961d136b3c53369aff288574a33422b44f0b767f40ea31c20e5c909bbb041873f1b"}, {0x18, 0x10d, 0x1, "730ced70c4"}, {0xd8, 0x102, 0x8001, "c927bda7753c61d4473942090e0508b28c5784b1031a768023ecdddd1888dd18dde75b5181ffaf7785d395c337c5435a09c522600f3c107e56ab4a5b3a9bfbe0477ace52fdb51938eb13252649b82b8ed7b724a3fb5b3d5ae1850042a4c0becdeadee9ddb1cb018b41d1a06a04fd9c800e9688d75ec04581a42041e2ca67e9034ee960ff5c2a5cf4b7e8307156e9df36bee0fd96755e3a5062dec1dbbf121055a9da2f6efb78c1eb53c550746a469f61b70bcbcaa8cd164f398a9b67cec1965195e4059c01a3de7a"}, {0xb0, 0x0, 0x4, "e2a7b557a8bb7b819d9d0c8a8edd2d923a7bee188ae9b4bccf613e2bd6d72e312c9ee11bb2c689e9c252120b723f74358ce6273f49be22813df558284b722cab18081f49313ff5d45cb9c82667ed5b1ef1193b6bd37c0f22585da8a498ff6d135f87d0be930a132109ee590f3764fabc042065b62a235e6bde9cf40da9341d5befae884d3d41a8694865c7fda0040ff9825fb9c1b4cdc68b3ffc"}, {0xf0, 0x10e, 0x900, "5189ccbf5ca1d944452058912aa9ebb741472bf6b9f60c0045953f5872a5e65ec6734b8020ae611641bedc3a23099186c64217ced8a9ff8699be29dbc93d4394d8432e7832435815fafcf287f2044103f57f684f5f73445d76cfa3ac1317d7be70027abcb39b2cc4dd7809ead30884eee4f8ae0d4cb66ee42c236a3d2aaafde4a4eeb00033b6702f5956c3bea1776bd9625a0d8c9eb5461fe5db198780ccbd76c1abf74044e122b292556579d956fcf7725e834e411f709a308762e2d1a360e11f2b433e27b1604840f5537b5543b6460fec7d3d665e8244516b803960fa5ddc"}, {0xc0, 0x88, 0xfb7, "ea22857aeb72576bcfb02c5c94ab85792f41d8b9a368578487e8e423ed631f42ba9feab3e64c0485a0fbe30a678068cd3a2741638ca26592b5d6537b14e73c0d8bddd172eb9a95384b3c39ce6662d8956164730cc784bb8f9777e964839cdba7cbc8856678ae3275cec467ac82d350483885e624366233b749779247d7ce00d7700b8ea7a173d0a692d1eba5da0e7f490e58e7cda5d36d205c0b17bf5c9166b6eb9650aaf4631a46d317273b25216c8b"}], 0x408}}, {{&(0x7f0000000cc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000d40)="3f8f48d89df67ade52a878a9b97f5e0ca877473fb1031e74e222ae1c2a175ad6a43a7dd2bc0b4a4eaee6f04cab50fb110010fc1d8755f7837434ded6c4b20bbcd5a613bd04f69f0f88e61ff85e86ad422997733be9f3ae6ac2708a4bcd853abb516193d8504c3250c5", 0x69}, {&(0x7f0000000e40)="7daba8978b32021db74d8b872bdcd8d7a9d7565fd0225670f570271e484648b429c298a82dfbf84031034eefbf37da2de2e63e2a34ac03e06c9a3d5edd448ff883d29365d374361f7a2a554cec5869f1435884eebc79aa149c76de25e65aee6ded93ad307f89512ecb7b3e5028c15d66c74b4affc977941cd49f88fa3b04960156622048e8e17cd52d3acc601cd54aaf45ce", 0x92}, {&(0x7f0000000f00)="5bacd04771ad12bc304304ace1ddd63f4bdb23e7cd66a348b67379f7f55f220861a3f55f015b37beabcf321e71086de13821755354cfb5bfd10016c4d10fc33ccc828f40bd9d8759dfbc4178790b5aaa92ec4ea1e5ad9f03448f09482872c5df266c7fe6e6420be26422069494f77ef64bf6b2dff387ff046ac625d9557aa86ffb3e90c458c15b2dbeaec37c84e6d6a8de7b3d3e9b44953ea55260748653fe5f189148ea25676836924e016808", 0xad}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="5c88fa58c731c17be971f921216172d622ea94c1718633cacd353f6bd0eee982fcb65308f736c5a85b92297fa5393062641c04e645b4110dbf359034f159538e75beab0abf49b9b2ff71c9cb3bbf9538777503b22a4a20ee66532f671ada8e0355681e97340cf576ed7689f959a0f9dccb13a9cdc79077076f90b6ed95", 0x7d}], 0x5}}, {{&(0x7f0000002080)=@x25, 0x80, &(0x7f0000003400)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="1cb3f4e96f5bcca003f0dbb57e61f7e80a5db8fa8882d9f05009272f5a003352600fe7af8e64b879b0a7a17c438d129e3f791ef93fc9a2517fff7c4c04f83a29792eebde5358f58cb6be545628cb0533808d8c0fb958565f982ece9c3d273963764d743c1a4c72e1da173f93450a291ac2cdd7b9fc69744d4a4d692ab7f35533e27125f3957645eb5f05354789a6df04709a25947865153d6ce1f2f721d372237423a7059ba9518f4c0b0e62cd156e8ecee900e863207ceb15ad6524154cee4e83b8d735cd8df344b596f53348c70397e8c94991268e60824270b539cbefcb22", 0xe0}, {&(0x7f0000003200)}, {&(0x7f0000003300)="792bf334103f89c557d6b88ae4cf04", 0xf}], 0x4, &(0x7f0000003440)=[{0xf0, 0x29, 0x7fffffff, "ff34042b00f0ba209043bbb4a0c44441dd45466437816e9b43cc3f10fedd8d9248528f89beea50e6ca868474245d0c00148bae084d9d59b66c2a8cf296c9001fd245db97b3d6b9b58d3efa7a50cf7c4b2182d861c9245f89c5ecb240e4ef44deab73404edd8b6802b7be43a1934bfbadf56d62e56edaacf47f7c4435a937b2d3a793e76661ee843c1fed16bcbdd623abe3297a654639ee4ffacc8039638609133fc78b934d507146039c18eb23c356a7d0f00f28d88f1015add8d907079638094d90968ec8252627e5b34e6a272cafc72e58a73aa345d116d0f3453e023311"}, {0x60, 0x100, 0x5, "1fffd09368c1f92ab7ebc02c44450c27416813f448501dab7cbd421c63e1e9a9f49a9ea1c67700e6abf1dcd10d56ab2c5042914a73e6a3977702fefc77d3d9b603a3d0b7d2499494face34a4bfd3463a"}, {0x90, 0x1fc, 0xc000000, "dd974caffe6004a780fe67b7686bf78cf9ab6bc35588a042654c80a218014fb97ad0c0784140839a784cd6e07cf949661a90ce716b34a62b42d1e8233c1bd29a7911e019e50af1d92aa62a9115b624b5c5e79aba864f9bc2181d1c30653f215f251b3ba1956079cdf19d70fc071e771f8c3ce7fef9613fa104a173dc2591"}, {0x10, 0x108, 0x10001}], 0x1f0}}, {{&(0x7f0000003680)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @private=0xa010102}, 0x1, 0x1, 0x4, 0x4}}, 0x80, 0x0}}], 0x5, 0x20040891) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x1ff}]}) r7 = socket(0x2b, 0x1, 0x0) getpeername$packet(r7, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 11m47.950318189s ago: executing program 49 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000580)={0x7, 0x6000, 0x9, 0x9}) 11m43.127187483s ago: executing program 50 (id=939): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="11", 0x1}, {&(0x7f0000000600)="f0f5e4fec2fca9b539389edd465f65ef9e48944c599bc99dee114b521e0809e2ffcbd02ca41e14175f5b57eb3564e4e6bbed1301920fab9d3b02b0999f2899e4ab0354276ef4fee6e7fd2a8a07de2257572442b05df3a3f5ea03c484796d6e449b568e0039d296d837b487", 0x6b}], 0x2) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x5, 0xa4fb, 0x7d3, 0x8000000000000001, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='oom_score_adj < -0', 0x12) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) 11m39.070470709s ago: executing program 51 (id=945): add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mq_open(&(0x7f0000000640)='nl8\xf2\x18\xdb\xd5.\x8c\xf0\x02\x8c\xe3\xd1\xfdf\xd6\xe8\xd3*\x8f\x16Zb}\x01TY\xa3]\x8e$B\xb5f\xa4IY\x01\xa7n\v.\xfc\x8e\xf8_\xf2\xd9\xf7\xa34\x9cj=\xc23\x97\xb7\xd3%\xd8\xe3\xe0[My\x8e\nE\xb3\x92\xcf\xde\xc9\xcb\xde=\xd0\xaeY\xd6]\xb2\xe0G\xd3\xc6e\vF\xd5\xcb\x87\xbb\x9d\xf3=\xb3\xec\xcf\x8d!\x1d?\x15\xc3\x97\xe2\xae\xbe\x97\xf0\x9a\xa5i\xba\xa4`\x12IG\xfe\xbc4sB\x9c\xe3\xcc@n\xd1t\x18\x86\xf2>\xa9\xf7\xea~h\xe93\xbd\xa2\x1a+\xfc\x14\x19\xec\xb9\v\xab\xed)\x1f\x88\x84\xbc\xed\x05\xa84\xd2K\x04~\x1b\x86]\x90\xd5A5\xbb>\xf6\x02\x9d\xd1w\xb19\x113\x8f\xbf\x1b\xfdK\b\xf2\xde\xdcb\x99\xf0\xc0\x0f\xd3\xbc$\xb9\xd0\xa28T\x0f\x95\xf3#\xc2x\x1b4\x1b\xe7\x83\xd8\x93\n\xc9%{\xdee\xae\x0f\x13\xc5\xce\a\xac\xd3\x87=\\\xe1{V\xfb;\x95\x10I\x9d=\xca\xf8N|\xcb\x8d\xdcp\xa2\xec\x00', 0x80, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000500)=[{0x1, '\x00', @st={0x4, [{0x1, @svalue=0x2}, {0x1, @svalue=0x5}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x3}]}, 0x3}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)=ANY=[@ANYBLOB="1201500200000020c016e17540000102035003090300040203010005092104003c01221a090905810300020401750000000000000000"], 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x9, 0xfff, 0x2, 0x0, [{0x1, 0x10, 0x8, '\x00', 0x9}, {0x6, 0x6, 0x3, '\x00', 0x58}, {0x97, 0x1, 0x3, '\x00', 0x7}, {0x5, 0x1, 0x0, '\x00', 0x8c}, {0x80, 0x3, 0x81, '\x00', 0x1}, {0xcd, 0x7, 0x4, '\x00', 0x3}, {0x18, 0xd, 0x7, '\x00', 0x50}, {0x6, 0x1, 0x8, '\x00', 0x3}, {0x10, 0x8, 0x5, '\x00', 0x90}, {0xc8, 0x4, 0x5, '\x00', 0xd3}, {0x69, 0x1, 0x7, '\x00', 0x40}, {0x80, 0x3b, 0x6}, {0x80, 0x10, 0x1}, {0x4, 0xf, 0x8, '\x00', 0x5}, {0x9, 0x6d, 0x6, '\x00', 0x5}, {0x0, 0x0, 0x1, '\x00', 0x4}, {0x5, 0x0, 0x66, '\x00', 0x9}, {0x0, 0xd, 0xb, '\x00', 0x4}, {0x8, 0xb3, 0x1, '\x00', 0x8}, {0x5, 0x80, 0x4, '\x00', 0xc0}, {0x6, 0x59, 0x6, '\x00', 0x74}, {0x6, 0x81, 0x55, '\x00', 0x7}, {0x5, 0x8, 0xc, '\x00', 0x9}, {0xf, 0xd, 0xff, '\x00', 0x16}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x3a5800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x5, 0x4, 0x42, 0x5ff2, 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x8000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x109480, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f00000003c0)=ANY=[@ANYBLOB="d50b0000060000002c0100001800000000000000000000008935dc86f3117f666580f4ae512336119aa5a852b6c1d7e05f649b1cc6464fe1f773cfa2baae0196b6fd91420f656057cae743a2b54d110c5c57ad0b34f4b3ebd84ef586f5dcbf81d753920a69cd074326fa9e11cfe5475a8ea912bbe036858a9244f0e91bf1077987de8c998d91aa7b0c95bf9b8a4722da0d448a73a46debec15289179e34945486452bec44e81d7aa08d60785215e055fa6bce35280bbc31fac0cadef5b6f22a161f681a78e8da4b922b36f5143545cd8e8674c3aa236e5a8e673bdde60db728920"]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000001540)=""/4107, 0x100b}], 0x1166) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) 11m10.277510282s ago: executing program 2 (id=1012): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) 11m9.89777844s ago: executing program 2 (id=1015): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, 0x0, 0x0, 0x739, 0xade) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 11m9.241957036s ago: executing program 2 (id=1018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 11m8.23328879s ago: executing program 52 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0771dd8daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd68543e120d6b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf02dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e800000000"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x2e00) 11m6.400647133s ago: executing program 53 (id=1028): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") epoll_create(0x9) socket$inet_tcp(0x2, 0x1, 0x0) 11m6.268385187s ago: executing program 2 (id=1031): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r1, &(0x7f0000000140)='0', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 11m6.070274801s ago: executing program 2 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) 11m5.776872238s ago: executing program 0 (id=1033): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 11m5.606141232s ago: executing program 0 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000030000"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) 11m5.430807606s ago: executing program 0 (id=1035): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)="16", 0x1}], 0x1, 0xd) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) ioctl$FIONREAD(r3, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m5.314389609s ago: executing program 2 (id=1036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42000) unshare(0x8040480) ppoll(&(0x7f0000000040)=[{r1, 0x8204}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 11m4.832699791s ago: executing program 54 (id=1036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42000) unshare(0x8040480) ppoll(&(0x7f0000000040)=[{r1, 0x8204}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 11m4.790526782s ago: executing program 0 (id=1038): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r1, &(0x7f0000000140)='0', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 11m4.581630486s ago: executing program 0 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x3938700}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0, 0x31}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) 11m3.542349751s ago: executing program 0 (id=1040): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) poll(0x0, 0x0, 0x9) 11m3.109138761s ago: executing program 55 (id=1040): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) poll(0x0, 0x0, 0x9) 10m48.461749218s ago: executing program 6 (id=1021): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) accept$unix(r4, &(0x7f00000001c0), &(0x7f0000000280)=0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") epoll_create(0x9) socket$inet_tcp(0x2, 0x1, 0x0) 10m48.003260339s ago: executing program 6 (id=1042): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r0, 0xa, 0x12) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r2, 0x0) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) 10m46.947942414s ago: executing program 6 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007006e6174"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 10m46.681840741s ago: executing program 6 (id=1044): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r1, &(0x7f0000000140)='0', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 10m46.457772296s ago: executing program 6 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x3938700}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0, 0x31}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) 10m45.162143097s ago: executing program 6 (id=1047): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) accept$unix(r4, &(0x7f00000001c0), &(0x7f0000000280)=0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") epoll_create(0x9) socket$inet_tcp(0x2, 0x1, 0x0) 10m44.422432424s ago: executing program 56 (id=1047): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) accept$unix(r4, &(0x7f00000001c0), &(0x7f0000000280)=0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") epoll_create(0x9) socket$inet_tcp(0x2, 0x1, 0x0) 9m42.99714104s ago: executing program 3 (id=1307): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000016d000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) bind$llc(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m42.1495333s ago: executing program 3 (id=1310): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 9m41.924234326s ago: executing program 3 (id=1311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) clock_settime(0x3, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 9m41.426166397s ago: executing program 3 (id=1316): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x242, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "c17769048b0000fd0c000000000000000000000000000000000200", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000140), 0x0, 0x81000) syz_genetlink_get_family_id$team(&(0x7f0000000200), r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) r5 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4, r6, 0x0, 0xff, 0x0}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={0x0, 0x2c8}, 0x1, 0x0, 0x0, 0x4010}, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket(0xa, 0x3, 0xff) 9m39.382082886s ago: executing program 3 (id=1322): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write$nbd(r0, &(0x7f0000000100)=ANY=[], 0x10) 9m38.848907169s ago: executing program 3 (id=1327): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 9m38.290946442s ago: executing program 57 (id=1327): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 8m2.921524422s ago: executing program 4 (id=1837): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000009c0)={0x24, @none={0x0, 0xffff}}, 0x14) 8m2.610221169s ago: executing program 4 (id=1840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) r3 = dup3(r1, r2, 0x0) write$P9_RREADDIR(r3, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x280, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x6) 8m2.008957364s ago: executing program 4 (id=1842): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40002, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) ptrace(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000100), &(0x7f0000000f00)}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) 8m1.617875553s ago: executing program 4 (id=1845): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0/..\x00') 8m1.398386838s ago: executing program 4 (id=1848): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x1244, &(0x7f0000000b40)="$eJzs3E9rXFUYB+DXSZq0SfNHrdUK0oPd6GZIsnCjIEFSkA4obSO0gnBrJjrkOhNyh8AUaXQl7vwKbsWlrgRxp5u4EPwG7rJx6UK9krlpzWgk1sSOhufZ5JBzfof33Hu5cIY5s/PCR++srRb11awbtYdejNp6xOgvKVLU4q734tnnv/7mqWs3bl5ZbDSWrqZ0efH6/HMppemLX77+7qdPf9WdfO2z6S/GY3v2jZ0fF37YPr99YefX62+3itQqUrvTTVm61el0s1t5M620irV6Sq/mzaxopla7aG4M9K/mnfX1XsraK1MT6xvNokhZu5fWmr3U7aTuRi9lb2WtdqrX62lqIjiK5U9+KssyoixPxViUZVmeiYmoxdmYiumYidl4OB6JR+NcPBbn4/F4Ii70R0WMDbt0AAAAAAAAAAAAAAAAAAAAOEEOOv8/OXj+//Oze2P3n//vuzjEwgEAAAAAAAAAAAAAAAAAAOAEuXbj5pXFRmPpakqnI/IPNpc3l6u/Vf/iarQij2bMxUz8HP3T/5WqPRaNpbnUNxvv51t7+a3N5ZHB/Hz/5wT+lL/8cmNpvsqnwfx4TOzPL8RMnDs4v/CH/KV+/nQ8c2lfvh4z8d2b0Yk8VmI3+3v+znxKL73SuJf/drta+8oQ7wsAAAAcp3q658D9e73+V/1V/rDPB3b313MH7u9H48nR4a6diKJ3ey3L8+bGP22c2ZvoqPPcvltR9Z+tiLjfeY6ljGNs1Hbr+T4ijmnCD+9UV+hvp8YOG3zq0Hkmh3DpPp6MOEJ8ZOBB+k88Cf/HxmFvjpF/5X3Eg7V308eHXQcAAAAAAAAAAAD350F8nXDYawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3duBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD//0N+vqI=") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2000004e, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x13, 0xffffffffffffffff}]) 8m0.963970938s ago: executing program 4 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8m0.141794288s ago: executing program 58 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m6.705583224s ago: executing program 8 (id=4008): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x101440) ioctl$int_in(r0, 0x5452, &(0x7f000000a0c0)=0x9) 1m6.4852295s ago: executing program 8 (id=4009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x402600, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 1m6.07961231s ago: executing program 8 (id=4010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 1m5.262703069s ago: executing program 8 (id=4016): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800000, &(0x7f0000000500)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@nodecompose}, {@type={'type', 0x3d, "e481e91c"}}, {@barrier}, {@gid}, {@type={'type', 0x3d, "590389e5"}}]}, 0x1, 0x5e5, &(0x7f0000000680)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, &(0x7f0000000140)) 1m4.616708605s ago: executing program 8 (id=4021): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) unshare(0x62020400) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0xff) shutdown(r3, 0x1) connect$inet6(r3, &(0x7f0000000080)={0xa, 0xfffe, 0x3, @mcast1, 0x6}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x400) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000000)={0x77359400}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/120, 0x78) 1m4.074995478s ago: executing program 8 (id=4022): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008010000000000000000a40018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@broadcast, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "6f582209b9fa0e2b"}}}}, 0x0) 1m3.464300483s ago: executing program 59 (id=4022): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008010000000000000000a40018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@broadcast, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "6f582209b9fa0e2b"}}}}, 0x0) 24.616432074s ago: executing program 7 (id=4155): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x4008700c, 0x0) 19.079862778s ago: executing program 7 (id=4184): mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}]}, 0x148}}, 0x20000000) 17.511319516s ago: executing program 7 (id=4185): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) fadvise64(0xffffffffffffffff, 0x6, 0x2, 0x448616ece558bd97) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @local}, &(0x7f0000000480)=0xc) 16.423903732s ago: executing program 7 (id=4192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x4008700c, 0x0) 10.583792204s ago: executing program 5 (id=4219): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x504, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r4, 0x139}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68fd5d7c3d516dce08adf9b56f1b52064b280f676428a27963412330fc44e27ce9c2df2983484651bd673f03533ed19a3db8e5fc84e845c9e00983a4d68ea9d8b26929221090000001fb0b7328f894e8ed9043e9a0c7dfd80562b202c", 0x0) 9.313596854s ago: executing program 5 (id=4222): syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) 9.104903779s ago: executing program 7 (id=4223): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 7.208494136s ago: executing program 9 (id=4226): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 6.958395731s ago: executing program 9 (id=4228): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_getevents(r1, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) futex$unlock_wake_list64(&(0x7f0000000080)=0x10, 0x201, 0x10000, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x4, 0xb) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0xeffd, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 6.226123599s ago: executing program 5 (id=4231): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x4008700c, 0x0) 5.914229817s ago: executing program 9 (id=4232): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x9, 0x4, 0xa, 0x2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r1, 0x8440}], 0x1, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r0, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x1) 5.334311641s ago: executing program 7 (id=4234): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 4.388011564s ago: executing program 9 (id=4235): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setopts(0x4200, r3, 0xf32, 0x7c8099cd3b23fb8) 3.651738651s ago: executing program 5 (id=4237): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000280)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvrDd2Ni3BTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7a6/XL10njb1pP59o9nmeeWae+T2/2Zl9saIN8IW1MJn6gxRZmHxlvd3e2pxtbm3O3u3Wk4wl2UjqSWpJiv+2Wq0Pk+tJsTNM0Vfu8/7y/GsffbL1cadVr5Zy+9pR+/WpttvoW73RXTeRZKQqH8Ge8W488njFTuTXk1ypSjh1Z5K09vjZ35/e6enROGjvsycSI/B4FZ3XzX3Gk3PVhd5+H9B95a2dbHSDGxtwu/53EAAAAPCkGeQz8Je3s5314vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxu7v/9fVEutW59I0f39/9FqXar6cHnxeJs/eFxxAAAAAAAAAMAJenE721nP+W67VZR/83+pbFwsH5/KW1nNUlZyNetZzFrWspLpJOM9A42uL66trUwPsOfMgXvOfEqgY1XZ+GzmDQAAAAAAAACfM7/Kwu7f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBgUyUinSHG/Z/V4avUkZ5OMtldsJP/s1p9kD047AAAAADgBY8l21nO+224VuZjkufI7gLN5K/eyluWspZml3Cy/F+h86q9tbc42tzZn77aX/eN+/z/HCqMcMZ3vHg4+8uVyi0ZuZblcczU38kaauZlauWfb5Sqe7qh9cd1vx1R8rzJgZDersj3z96pyn3ePNdnDHPPLlPEyI2d2MjJVxdbOxjPdM3PwGTrm2ek/0nRqO8Fe7DvS6N7JPFTOz1Vlez6/Oyznp6I/EzM9z77njs558vW//OmnU1V9eKY0mJGqbJWPjf2ZmO3JxPODZOJ2896d27dWJ5+0TOwzVWbi0k57IT/KTzKZibyalSzn51nMWpYykR+WtcXq5Bc9l/whmbq+p/Xqp0UyWj1DOyfreDG9VO57Psv5cd7IzSzl5fLfTKbz7cxlLvM9Z/jS0We4vOprh1z1rS8dGPyVb1SVRpLfV+VwaOf1mZ689t5zx8u+3jW7WbowQJaOeW+sf7WqtI/x66ocDv2ZmO7JxLNHZ+IP5W1ltXnvzsrtxTcHO9yF96pK+zr6bTIxPDeS9vPlQvtkla29z45237MH9k2XfRd3+mr7+i7t9HWu1I1Dr9TR6j3c/pFmyr7nD+ybLfsu9/Qd9H4LgKF37pvnRhv/bvyj8UHjN43bjVfO/mDsO2MvjObMX898tz418rXaC8Wf80F+ufv5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHirb79zZ7HZXFrpq7RarXcP6RqwUq+O8JC7P0IlE/96qn3kA7q6P2d2gvF85enk5OY+rJX/tVqtak1xyDZ//NvQJKpVGYrUnVLl9O5JwMm4tnb3zWurb7/zreW7i68vvb50b35ubn5qfu7l2Wu3lptLU53H044SeBx2X/RPOxIAAAAAAAAAAABgUCfx3wlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk21hMvUHKTI9dXWq3d7anG22l259d8t6klqS4hdJ8WFyPZ0l4z3DFYcd5/3l+dc++mTr492x6t3ta0ftN5iNaslEkpFOef+zGu9GVR6pOGoKxc4M2wm70k0cnLb/BwAA//+o5gZ+") lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x6, 0x6, 0xfffffffe, 0x1, 0x9, 0x7}) llistxattr(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=""/157, 0x9d) 3.131090344s ago: executing program 1 (id=4238): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 3.038484266s ago: executing program 9 (id=4239): syz_usb_connect(0x5, 0x2f, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0xf1, 0x45, 0x90, 0x40, 0x458, 0x700c, 0x914b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x2, 0x7, 0x8, 0xd0, 0xf8, "", [{{0x9, 0x4, 0x28, 0xb6, 0x0, 0x8, 0x4, 0x0, 0x9, [@generic={0x2, 0x22}]}}, {{0x9, 0x4, 0x2f, 0x8, 0x0, 0x2d, 0xa4, 0x48, 0x3}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000a00)=@lang_id={0x4}}]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xcf9a) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x1c) 2.742560304s ago: executing program 1 (id=4240): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc31, &(0x7f0000001ec0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.569183208s ago: executing program 5 (id=4241): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.348388503s ago: executing program 1 (id=4242): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 1.63845019s ago: executing program 1 (id=4243): syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f0000000080)='./file2\x00', 0x800040, &(0x7f00000004c0)=ANY=[], 0x1, 0x5db, &(0x7f0000000ac0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}, {0x0, [0x51, 0x0, 0x2e]}}, &(0x7f0000000140)=""/51, 0x35, 0x33, 0x0, 0x10}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) memfd_create(0x0, 0xb) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r4 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000400)}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 572.657286ms ago: executing program 1 (id=4244): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./control\x00', 0x3008003, &(0x7f0000000340)=ANY=[], 0x16, 0x20e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) 399.17058ms ago: executing program 5 (id=4245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x4008700c, 0x0) 346.472622ms ago: executing program 9 (id=4246): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 0s ago: executing program 1 (id=4247): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setopts(0x4200, r3, 0xf32, 0x7c8099cd3b23fb8) kernel console output (not intermixed with test programs): ridge_slave_0: entered promiscuous mode [ 1009.600589][T21332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.607997][T21332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.628295][T21332] bridge_slave_1: entered allmulticast mode [ 1009.658165][T21332] bridge_slave_1: entered promiscuous mode [ 1009.970343][T21409] loop9: detected capacity change from 0 to 1024 [ 1009.978631][T21332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.003334][T21332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.049742][T21409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.071150][T21409] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.137063][T21411] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1010.168700][T21409] EXT4-fs error (device loop9): ext4_free_blocks:6694: comm syz.9.3601: Freeing blocks not in datazone - block = 0, count = 16 [ 1010.315794][T21332] team0: Port device team_slave_0 added [ 1010.388784][T21332] team0: Port device team_slave_1 added [ 1010.480844][T21332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.487862][T21332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.532983][T21332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.549769][T21332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.569794][T21332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.612870][T21332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.744597][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1010.969134][T21332] hsr_slave_0: entered promiscuous mode [ 1011.015754][T21332] hsr_slave_1: entered promiscuous mode [ 1011.040555][T21332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.056617][T21332] Cannot create hsr debugfs directory [ 1011.120428][T17034] Bluetooth: hci2: command tx timeout [ 1011.204054][T21440] binder: 21438:21440 ioctl c0306201 200000000080 returned -14 [ 1011.257421][T21440] binder: 21438:21440 ioctl c0306201 2000000003c0 returned -14 [ 1011.621052][ T6268] hsr_slave_0: left promiscuous mode [ 1011.640454][ T6268] hsr_slave_1: left promiscuous mode [ 1011.732751][ T6268] bond1 (unregistering): Released all slaves [ 1012.087213][ T6268] bond0 (unregistering): Released all slaves [ 1012.680474][ T55] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1012.883917][ T55] usb 6-1: not running at top speed; connect to a high speed hub [ 1012.901706][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1012.926143][ T55] usb 6-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 1012.935554][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.188294][ T55] usb 6-1: USB disconnect, device number 8 [ 1013.200707][T17034] Bluetooth: hci2: command tx timeout [ 1013.554538][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3613'. [ 1014.396490][T21493] xt_socket: unknown flags 0x4c [ 1014.401594][ T6142] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1014.613013][ T6142] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.644714][ T6142] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.673213][T21500] loop8: detected capacity change from 0 to 128 [ 1014.693385][ T6142] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1014.710298][ T6142] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1014.730760][ T6142] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.763070][T21332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1014.782960][ T6142] usb 10-1: config 0 descriptor?? [ 1014.811391][T21500] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1014.856641][T21332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1014.876498][T21500] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.891706][T21332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1014.942163][T21332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1016.912986][T17034] Bluetooth: hci2: command tx timeout [ 1017.574612][ T6142] usbhid 10-1:0.0: can't add hid device: -71 [ 1017.595843][ T6142] usbhid: probe of 10-1:0.0 failed with error -71 [ 1017.620532][ T6142] usb 10-1: USB disconnect, device number 7 [ 1017.697868][T21513] netlink: 'syz.5.3625': attribute type 1 has an invalid length. [ 1017.708255][T20419] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1017.934770][T21332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.044255][T21332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.079514][T21324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.086741][T21324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.137995][T21528] loop5: detected capacity change from 0 to 512 [ 1018.160487][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.167826][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.261335][T21528] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1018.602307][T21539] loop9: detected capacity change from 0 to 1024 [ 1018.616121][T21539] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1018.634908][T21539] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 2: comm syz.9.3629: lblock 2 mapped to illegal pblock 2 (length 1) [ 1018.697395][T21539] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1018.705775][T21539] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 48: comm syz.9.3629: lblock 0 mapped to illegal pblock 48 (length 1) [ 1018.727694][T21539] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1018.736794][T21539] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.3629: Failed to acquire dquot type 0 [ 1018.751022][T21539] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1018.761814][T21539] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3629: mark_inode_dirty error [ 1018.774606][T21539] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1018.785296][T21539] EXT4-fs (loop9): 1 orphan inode deleted [ 1018.793326][T21539] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.807476][T21324] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1018.873303][T21324] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1018.884999][T21324] EXT4-fs error (device loop9): ext4_release_dquot:6989: comm kworker/u4:12: Failed to release dquot type 0 [ 1019.092763][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.181085][T14528] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1019.209340][T14528] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1019.239491][T14528] EXT4-fs error (device loop9): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1019.388868][T21563] loop9: detected capacity change from 0 to 512 [ 1019.412085][T21563] ext4: Bad value for 'data' [ 1019.538444][T21567] netlink: 'syz.8.3635': attribute type 1 has an invalid length. [ 1019.758774][T21569] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.768244][T21569] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.778656][T21569] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.880589][T21569] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1020.033261][T21569] bond1: (slave geneve2): making interface the new active one [ 1020.177834][T21569] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1020.404501][T21332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.197042][T21332] veth0_vlan: entered promiscuous mode [ 1021.212386][T21332] veth1_vlan: entered promiscuous mode [ 1021.345521][T21599] loop8: detected capacity change from 0 to 1024 [ 1021.389351][T21599] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1021.508748][T21599] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 2: comm syz.8.3640: lblock 2 mapped to illegal pblock 2 (length 1) [ 1021.528343][T21599] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1021.536646][T21599] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 48: comm syz.8.3640: lblock 0 mapped to illegal pblock 48 (length 1) [ 1021.734938][T21599] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1021.744457][T21599] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.3640: Failed to acquire dquot type 0 [ 1021.757792][T21599] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1021.769660][T21599] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3640: mark_inode_dirty error [ 1021.782408][T21599] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1021.793157][T21599] EXT4-fs (loop8): 1 orphan inode deleted [ 1021.807152][T21599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.480609][ T1111] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1022.485162][T21332] veth0_macvtap: entered promiscuous mode [ 1022.566255][ T1111] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1022.620178][ T1111] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 1022.644203][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.663026][T20419] EXT4-fs error (device loop8): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1022.681708][T21618] loop5: detected capacity change from 0 to 512 [ 1022.689565][T21618] ext4: Bad value for 'data' [ 1022.749589][T20419] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1022.764952][T20419] EXT4-fs error (device loop8): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1022.841960][T21332] veth1_macvtap: entered promiscuous mode [ 1023.003593][T21332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.254680][T21332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.555352][T21332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.625571][T21332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.670428][T21332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.706175][T21332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.840022][T21625] syzkaller0: entered promiscuous mode [ 1023.855775][T21625] syzkaller0: entered allmulticast mode [ 1023.932946][T11787] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1023.979929][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.004988][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.041418][ T6142] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1024.079666][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.098084][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.140495][T11787] usb 10-1: Using ep0 maxpacket: 32 [ 1024.150506][T11787] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1024.158815][T11787] usb 10-1: config 0 has no interface number 0 [ 1024.187416][T11787] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1024.208924][T11787] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1024.228856][T11787] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1024.255475][ T6142] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1024.255887][T11787] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.275549][T21639] loop8: detected capacity change from 0 to 512 [ 1024.293657][T11787] usb 10-1: Product: syz [ 1024.296126][ T6142] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1024.298023][T11787] usb 10-1: Manufacturer: syz [ 1024.328380][T21639] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1024.338456][ T6142] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1024.360681][T21639] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1024.370443][ T6142] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1024.380646][T11787] usb 10-1: SerialNumber: syz [ 1024.389435][T11787] usb 10-1: config 0 descriptor?? [ 1024.402722][ T6142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.419351][T21627] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1024.441355][T21639] EXT4-fs (loop8): 1 truncate cleaned up [ 1024.448477][T21631] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1024.472286][T21639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.299659][T21646] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[21332] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[21646] [ 1027.316637][T17034] Bluetooth: hci3: Reading Intel version command failed (-110) [ 1027.759200][ T6145] usb 6-1: USB disconnect, device number 9 [ 1028.073768][T11787] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1028.093610][T11787] ipheth: probe of 10-1:0.196 failed with error -71 [ 1028.109069][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.114530][T11787] usb 10-1: USB disconnect, device number 8 [ 1028.718401][T21665] cgroup: noprefix used incorrectly [ 1028.758774][T21667] loop7: detected capacity change from 0 to 512 [ 1028.776356][T21667] ext4: Bad value for 'data' [ 1028.807365][T21668] loop8: detected capacity change from 0 to 1024 [ 1028.840433][T11787] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1028.911748][T21668] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1029.068881][T21668] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 2: comm syz.8.3651: lblock 2 mapped to illegal pblock 2 (length 1) [ 1029.083787][T11787] usb 10-1: Using ep0 maxpacket: 8 [ 1029.095958][T11787] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.113343][T21668] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1029.121845][T21668] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 48: comm syz.8.3651: lblock 0 mapped to illegal pblock 48 (length 1) [ 1029.139706][T21668] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1029.148839][T21668] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.3651: Failed to acquire dquot type 0 [ 1029.175078][T21668] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1029.202185][T21668] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3651: mark_inode_dirty error [ 1029.214470][T21668] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1029.225062][T21668] EXT4-fs (loop8): 1 orphan inode deleted [ 1029.240132][T21668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.608715][T11787] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.716681][T21324] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1029.830190][T11787] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1029.875488][T21324] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1029.885317][T11787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.922514][T21324] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:12: Failed to release dquot type 0 [ 1030.057929][T11787] usbtmc 10-1:16.0: bulk endpoints not found [ 1030.071479][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.112958][T20419] EXT4-fs error (device loop8): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1030.216181][T20419] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1030.310217][T20419] EXT4-fs error (device loop8): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1030.321743][ T55] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1030.532007][ T55] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1030.550159][ T55] usb 6-1: config 1 has no interface number 0 [ 1030.558178][T21681] loop8: detected capacity change from 0 to 1024 [ 1030.565253][ T55] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1030.592553][ T55] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1030.625012][ T55] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1030.639309][ T55] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 1030.656969][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.667168][T21681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.706361][T21681] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.710543][ T55] usb 6-1: Product: syz [ 1030.778063][ T55] usb 6-1: Manufacturer: syz [ 1030.810306][ T55] usb 6-1: SerialNumber: syz [ 1031.064984][ T6262] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 6) [ 1031.102018][T21665] loop5: detected capacity change from 0 to 8 [ 1031.153071][ T6262] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1031.197576][ T55] usb 6-1: 1:0 : does not exist [ 1031.200173][ T6262] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1031.200173][ T6262] [ 1031.223132][ T55] usb 6-1: BAAD GENERIC IO: no channels? [ 1031.245202][ T6262] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 1031.299870][ T6262] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1031.328726][ T55] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1031.349995][ T6262] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1031.349995][ T6262] [ 1031.366817][ T55] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1031.377584][ T55] snd_usb_pod 6-1:1.1: set_interface failed [ 1031.386494][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1031.395411][ T55] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1031.395645][ T55] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1031.418199][ T55] usb 6-1: USB disconnect, device number 10 [ 1031.504885][T11294] udevd[11294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.987913][ T55] usb 10-1: USB disconnect, device number 9 [ 1032.069927][T21713] loop7: detected capacity change from 0 to 512 [ 1032.118220][T21713] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1032.125986][T21715] loop5: detected capacity change from 0 to 1024 [ 1032.150544][T21713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1032.203811][T21713] EXT4-fs (loop7): 1 truncate cleaned up [ 1032.237117][T21713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.251929][T21715] hfsplus: invalid length 32517 has been corrected to 255 [ 1032.398680][T21724] loop9: detected capacity change from 0 to 2048 [ 1032.485809][T21724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.126144][ T9758] hfsplus: b-tree write err: -5, ino 2 [ 1033.148568][T21733] loop8: detected capacity change from 0 to 512 [ 1033.176596][ T9758] hfsplus: b-tree write err: -5, ino 4 [ 1033.237176][T21733] ext4: Bad value for 'data' [ 1034.296234][T21724] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm syz.9.3662: Invalid inode table block 0 in block_group 0 [ 1034.335505][T21724] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: block 1803188595: comm syz.9.3662: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 1034.393689][T21738] loop5: detected capacity change from 0 to 256 [ 1034.477720][T21738] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1034.527372][T21724] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1034.554159][T21724] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1034.554159][T21724] [ 1034.566065][T21724] EXT4-fs error (device loop9) in ext4_setattr:5683: Corrupt filesystem [ 1034.584920][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.817135][T21324] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 1034.888865][T21324] EXT4-fs error (device loop9): ext4_ind_map_blocks:604: inode #15: comm kworker/u4:12: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 1034.959622][T21324] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 1035.000346][T21324] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1035.000346][T21324] [ 1035.020284][T21324] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 1035.065650][T21753] netlink: 'syz.8.3669': attribute type 4 has an invalid length. [ 1035.096946][T21324] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 1035.135208][T14528] EXT4-fs (loop9): Inode 15 (ffff888076eb8a00): i_reserved_data_blocks (1) not cleared! [ 1035.184662][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.236957][T21757] loop7: detected capacity change from 0 to 128 [ 1035.619111][T21767] loop8: detected capacity change from 0 to 512 [ 1035.679691][T21767] ext4: Bad value for 'data' [ 1035.724580][T21771] bridge_slave_0: left allmulticast mode [ 1035.774354][T21771] bridge_slave_0: left promiscuous mode [ 1035.800952][T21771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.856498][T21771] bridge_slave_1: left allmulticast mode [ 1035.962818][T21771] bridge_slave_1: left promiscuous mode [ 1035.968669][T21771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.816080][T21784] loop9: detected capacity change from 0 to 1024 [ 1037.007073][T21784] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1037.049749][T21784] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 2: comm syz.9.3676: lblock 2 mapped to illegal pblock 2 (length 1) [ 1037.065217][T21784] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1037.073708][T21784] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 48: comm syz.9.3676: lblock 0 mapped to illegal pblock 48 (length 1) [ 1037.091170][T21784] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1037.100406][T21784] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.3676: Failed to acquire dquot type 0 [ 1037.131168][T21784] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1037.141431][T21784] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3676: mark_inode_dirty error [ 1037.158234][T21784] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1037.169286][T21784] EXT4-fs (loop9): 1 orphan inode deleted [ 1037.180510][T21784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.194010][ T49] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1037.343280][ T49] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1037.373136][T21771] bond0: (slave bond_slave_0): Releasing backup interface [ 1037.516140][ T49] EXT4-fs error (device loop9): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 1037.678339][T21771] bond0: (slave bond_slave_1): Releasing backup interface [ 1037.716787][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.774639][T14528] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1037.937339][T14528] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1037.970839][T21771] team0: Port device team_slave_0 removed [ 1037.984882][T14528] EXT4-fs error (device loop9): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1038.082983][T21771] team0: Port device team_slave_1 removed [ 1038.779938][T21771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.886542][T21771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.933079][T21771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.977314][T21771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.343927][T21776] netlink: 'syz.7.3674': attribute type 10 has an invalid length. [ 1040.005673][T21776] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1040.517471][T21846] loop5: detected capacity change from 0 to 128 [ 1040.582991][T21846] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1040.641810][ T5813] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1040.872133][ T5813] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.915447][ T5813] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1040.944762][ T5813] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.982075][ T5813] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1041.009165][ T5813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1041.061183][ T5813] usb 9-1: Product: syz [ 1041.065514][ T5813] usb 9-1: Manufacturer: syz [ 1041.109876][T21837] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1041.139012][ T5813] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 1042.051355][T21865] loop7: detected capacity change from 0 to 512 [ 1042.093501][T21865] ext4: Bad value for 'data' [ 1042.419298][T21866] bond0: (slave bridge0): Releasing backup interface [ 1043.050531][ T5813] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1043.073429][ T5813] usb 9-1: USB disconnect, device number 15 [ 1043.088566][ T5813] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1043.120876][ T5813] garmin_gps 9-1:1.0: device disconnected [ 1043.219465][T21866] bond1: (slave geneve2): Releasing active interface [ 1043.276168][T21874] loop7: detected capacity change from 0 to 512 [ 1043.300751][T21874] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1043.453496][T21874] EXT4-fs (loop7): 1 truncate cleaned up [ 1043.487398][T21874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.534979][T21866] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1043.558743][T21866] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1043.811099][T21866] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1044.192286][T21866] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1044.290183][T21868] netlink: 'syz.5.3694': attribute type 10 has an invalid length. [ 1044.326720][T21868] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1044.538670][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.945099][T21903] loop8: detected capacity change from 0 to 1024 [ 1045.005887][T21903] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 1045.510331][T11585] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1045.763406][T11585] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.784059][T11585] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1045.830824][T11585] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.882223][T11585] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1045.902074][T11585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1045.933155][T11585] usb 6-1: Product: syz [ 1045.937486][T11585] usb 6-1: Manufacturer: syz [ 1045.966304][T21913] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1045.996942][T11585] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1046.036594][T11585] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1046.253341][ T55] usb 6-1: USB disconnect, device number 11 [ 1046.289897][T21928] loop7: detected capacity change from 0 to 512 [ 1046.315662][ T55] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1046.353521][T21928] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1046.370718][ T55] garmin_gps 6-1:1.0: device disconnected [ 1046.387502][T21928] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1046.438716][T21931] loop8: detected capacity change from 0 to 512 [ 1046.484169][T21928] EXT4-fs (loop7): 1 truncate cleaned up [ 1046.495316][T21928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.618126][T21931] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1046.683010][T21931] FAT-fs (loop8): Filesystem has been set read-only [ 1046.999046][T21940] loop5: detected capacity change from 0 to 512 [ 1047.226495][T21940] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1047.372418][T21940] EXT4-fs (loop5): 1 truncate cleaned up [ 1047.430011][T21940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.474121][T21947] loop8: detected capacity change from 0 to 512 [ 1047.615164][T21947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.724892][T21947] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.894084][T21947] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.3708: corrupted xattr block 33: invalid ea_ino [ 1048.018111][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.060834][T21956] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.3708: corrupted xattr block 33: invalid ea_ino [ 1048.310411][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.814849][T21961] loop9: detected capacity change from 0 to 1024 [ 1048.821603][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.838455][T21961] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1048.889012][T21961] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 2: comm syz.9.3710: lblock 2 mapped to illegal pblock 2 (length 1) [ 1048.911213][T21961] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1048.919370][T21961] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 48: comm syz.9.3710: lblock 0 mapped to illegal pblock 48 (length 1) [ 1048.937414][T21961] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1048.946305][T21961] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.3710: Failed to acquire dquot type 0 [ 1048.970368][T21961] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1048.981126][T21961] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3710: mark_inode_dirty error [ 1048.993984][T21961] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1049.004894][T21961] EXT4-fs (loop9): 1 orphan inode deleted [ 1049.021152][ T1145] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1049.047944][T21961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.089609][ T1145] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1049.136843][ T1145] EXT4-fs error (device loop9): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 1049.209096][T21972] netlink: 'syz.8.3712': attribute type 1 has an invalid length. [ 1049.324489][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.391132][T14528] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1049.405444][T21972] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3712'. [ 1049.428832][T14528] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1049.445886][T14528] EXT4-fs error (device loop9): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1049.620185][ T55] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1049.657963][T21985] loop7: detected capacity change from 0 to 512 [ 1049.720574][T21985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.746227][T21983] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1049.758475][T21985] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.823726][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 1049.846738][ T55] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1049.855556][ T55] usb 6-1: config 1 has no interface number 0 [ 1049.867374][ T55] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1049.908422][ T55] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1049.940285][ T55] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1049.958387][ T55] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1049.968728][ T55] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1049.978593][ T55] usb 6-1: Product: syz [ 1049.985858][ T55] usb 6-1: Manufacturer: syz [ 1049.997690][ T55] usb 6-1: SerialNumber: syz [ 1050.012534][T21976] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1050.012723][T21976] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1050.208473][T21999] Bluetooth: MGMT ver 1.22 [ 1050.373537][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.437227][T21976] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1050.437389][T21976] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1050.439688][T22004] loop8: detected capacity change from 0 to 512 [ 1050.501138][T22004] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1050.654456][T22004] EXT4-fs (loop8): 1 truncate cleaned up [ 1050.656300][T22004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.985915][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.056900][ T55] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1051.178027][ T55] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:97:95:3d:f3:6e [ 1051.333413][ T55] usb 6-1: USB disconnect, device number 12 [ 1051.367573][ T55] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1051.502717][ T55] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1051.530271][ T55] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1051.565394][ T55] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1052.083440][T22037] dummy_hcd dummy_hcd.0: remove, state 4 [ 1052.089862][T22037] usb usb1: USB disconnect, device number 1 [ 1052.190445][T22039] netlink: 'syz.9.3724': attribute type 1 has an invalid length. [ 1052.218658][T22037] dummy_hcd dummy_hcd.0: stopped [ 1052.229808][T22037] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1052.390403][T22038] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3724'. [ 1052.423348][T22046] loop8: detected capacity change from 0 to 16 [ 1052.506477][T22046] erofs: (device loop8): mounted with root inode @ nid 36. [ 1052.557290][T22046] erofs: (device loop8): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1052.616303][T22052] loop5: detected capacity change from 0 to 512 [ 1052.635019][T22046] bio_check_eod: 41 callbacks suppressed [ 1052.635038][T22046] syz.8.3727: attempt to access beyond end of device [ 1052.635038][T22046] loop8: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1052.684769][T22052] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1052.728176][T22052] EXT4-fs (loop5): 1 truncate cleaned up [ 1052.735562][T22052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.931264][T22046] erofs: (device loop8): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1052.948333][T22046] syz.8.3727: attempt to access beyond end of device [ 1052.948333][T22046] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1053.060762][T22046] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 1053.131198][ T28] audit: type=1800 audit(1787595624.686:43): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3727" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1053.798292][T22091] loop8: detected capacity change from 0 to 128 [ 1054.413233][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.419595][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.860919][T22116] netlink: 'syz.7.3738': attribute type 1 has an invalid length. [ 1054.978867][T22118] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1055.056558][T22116] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1055.079800][T22116] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1055.104909][T22116] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1055.129910][T22116] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1055.151759][T22116] bond1: (slave geneve2): making interface the new active one [ 1055.163422][T22116] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1055.590874][T22052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1055.732990][T22136] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3741'. [ 1055.787685][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.662304][T22164] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3748'. [ 1057.718869][T22178] loop8: detected capacity change from 0 to 512 [ 1057.810697][T22178] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1058.006349][T22178] EXT4-fs (loop8): 1 truncate cleaned up [ 1058.057757][T22178] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.418600][T22194] xt_socket: unknown flags 0x4c [ 1059.384328][T22208] loop7: detected capacity change from 0 to 128 [ 1059.431236][T22208] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1059.492836][T22208] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.512106][T22208] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.3758: No space for directory leaf checksum. Please run e2fsck -D. [ 1059.528749][T22208] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.3758: checksumming directory block 0 [ 1059.667201][T21332] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1060.653408][T22178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.863179][T22230] loop9: detected capacity change from 0 to 128 [ 1060.891814][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.949187][T22230] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1061.072114][T22230] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.395571][T14528] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1061.408607][T22247] loop7: detected capacity change from 0 to 1024 [ 1061.443704][T22247] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 1061.522753][T22247] EXT4-fs (loop7): group descriptors corrupted! [ 1062.370116][T22273] loop7: detected capacity change from 0 to 512 [ 1062.439978][T22273] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1062.588380][T22273] EXT4-fs (loop7): 1 truncate cleaned up [ 1062.611749][T22273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.932390][T22279] loop5: detected capacity change from 0 to 1024 [ 1063.192087][T22279] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1063.288492][T22279] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.3771: lblock 2 mapped to illegal pblock 2 (length 1) [ 1063.303264][T22279] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1063.311647][T22279] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.3771: lblock 0 mapped to illegal pblock 48 (length 1) [ 1063.326686][T22279] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1063.335653][T22279] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.3771: Failed to acquire dquot type 0 [ 1063.351348][T22279] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1063.364347][T22279] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3771: mark_inode_dirty error [ 1063.376429][T22279] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1063.386998][T22279] EXT4-fs (loop5): 1 orphan inode deleted [ 1063.397765][T22279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.539859][ T9758] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1063.603260][ T9758] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1063.626180][ T9758] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 1063.667462][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.677845][T19999] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1063.693787][T19999] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1063.725407][T19999] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1063.904748][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.745567][T22320] xt_socket: unknown flags 0x4c [ 1065.613501][T22327] loop8: detected capacity change from 0 to 512 [ 1065.662412][T22327] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1065.714054][T22327] EXT4-fs (loop8): 1 truncate cleaned up [ 1065.738266][T22327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.905246][T22332] syzkaller0: entered promiscuous mode [ 1065.911988][T22332] syzkaller0: entered allmulticast mode [ 1066.223354][T22349] loop5: detected capacity change from 0 to 128 [ 1066.241791][T22349] EXT4-fs: Ignoring removed nobh option [ 1066.296207][T22349] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1066.347395][T22349] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.468496][ T28] audit: type=1800 audit(1787595638.016:44): pid=22349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3786" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1066.712352][T19999] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1066.736003][T22364] loop9: detected capacity change from 0 to 128 [ 1068.587016][T22327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1068.685467][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.564934][T22400] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1070.805156][T22409] loop5: detected capacity change from 0 to 1024 [ 1071.756378][ T5856] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1071.820334][ T5857] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1071.953137][ T5856] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.973947][ T5856] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1071.997021][ T5856] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1072.026441][ T5856] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1072.039263][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1072.058403][ T5856] usb 9-1: Product: syz [ 1072.058808][ T5857] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.081403][ T5856] usb 9-1: Manufacturer: syz [ 1072.087468][ T5857] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.105654][T22413] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1072.113203][ T5857] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1072.127125][ T5856] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 1072.141210][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.165731][ T5856] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1072.359429][T11788] usb 9-1: USB disconnect, device number 16 [ 1072.408616][T11788] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1072.431533][T11788] garmin_gps 9-1:1.0: device disconnected [ 1072.495696][T22437] loop9: detected capacity change from 0 to 2048 [ 1072.555478][T22437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.568849][T22437] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.624813][T22437] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3805: bg 0: block 345: padding at end of block bitmap is not set [ 1072.642425][T22437] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 1 with error 117 [ 1072.657750][T22437] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1072.657750][T22437] [ 1072.755617][ T5857] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0 [ 1072.786039][ T5857] input input8: Absolute device without dev->absinfo, refusing to register [ 1072.818763][ T5857] wacom: probe of 0003:056A:033B.0001 failed with error -22 [ 1072.857774][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.876298][ T5857] usb 8-1: USB disconnect, device number 13 [ 1073.035865][T22445] fido_id[22445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1073.238154][T22457] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3808'. [ 1076.124489][T22505] bond0: (slave bridge0): Releasing backup interface [ 1076.961529][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1077.353072][T22505] bond1: (slave geneve2): Releasing active interface [ 1077.366105][T22505] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.376039][T22505] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.393234][T22505] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.484541][T22505] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.531338][T22509] netlink: 'syz.8.3821': attribute type 10 has an invalid length. [ 1077.605366][T22509] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1078.191903][T11585] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1078.415537][T11585] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1078.451023][T11585] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1078.496909][T11585] usb 8-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1078.530248][T11585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.594828][T11585] usb 8-1: Product: syz [ 1078.599146][T11585] usb 8-1: Manufacturer: syz [ 1078.628519][T11585] usb 8-1: SerialNumber: syz [ 1079.019354][T11585] usb 8-1: USB disconnect, device number 14 [ 1079.833594][T22575] input: syz0 as /devices/virtual/input/input10 [ 1080.827321][T22584] PM: suspend entry (deep) [ 1081.124895][T22584] Filesystems sync: 0.283 seconds [ 1081.246960][T22593] bond0: (slave bridge0): Releasing backup interface [ 1081.334693][T22593] bond1: (slave geneve2): Releasing active interface [ 1081.348931][T22593] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1081.366798][T22593] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1081.392388][T22593] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1081.412468][T22593] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1081.442378][T22594] netlink: 'syz.7.3837': attribute type 10 has an invalid length. [ 1081.477911][T22594] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1081.625568][T22584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1081.653575][T22584] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1081.678015][T22584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1081.740156][T22584] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1081.779139][T22584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1081.809885][T22584] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1081.864520][T22584] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1081.931842][T22584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1081.967766][T22584] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1081.999339][T22584] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1082.054383][T22584] Freezing user space processes [ 1082.120652][T22584] Freezing user space processes failed after 0.020 seconds (80 tasks refusing to freeze, wq_busy=0): [ 1082.150374][T22584] task:syz.5.3819 state:R running task stack:22856 pid:22498 ppid:19999 flags:0x00004006 [ 1082.162472][T22584] Call Trace: [ 1082.165818][T22584] [ 1082.168813][T22584] ? verify_lock_unused+0x140/0x140 [ 1082.174563][T22584] ? verify_lock_unused+0x140/0x140 [ 1082.180904][T22584] ? mark_lock+0x94/0x320 [ 1082.185310][T22584] ? asan.module_dtor+0x20/0x20 [ 1082.191079][T22584] ? preempt_schedule+0xc0/0xd0 [ 1082.196015][T22584] ? preempt_schedule_common+0x82/0xc0 [ 1082.201642][T22584] ? __lock_acquire+0x7d80/0x7d80 [ 1082.206735][T22584] ? pfn_valid+0xcd/0x420 [ 1082.211217][T22584] ? preempt_schedule_thunk+0x1a/0x30 [ 1082.216688][T22584] ? _raw_spin_unlock+0x3a/0x40 [ 1082.221731][T22584] ? unmap_page_range+0x2577/0x32f0 [ 1082.227063][T22584] ? copy_page_range+0x3700/0x3700 [ 1082.232308][T22584] ? unmap_vmas+0x286/0x3f0 [ 1082.236887][T22584] ? unmap_page_range+0x32f0/0x32f0 [ 1082.242242][T22584] ? __lock_acquire+0x7d80/0x7d80 [ 1082.247361][T22584] ? exit_mmap+0x238/0xb90 [ 1082.251911][T22584] ? exit_mm_release+0x1a/0x30 [ 1082.256753][T22584] ? vm_brk+0x30/0x30 [ 1082.260862][T22584] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1082.266589][T22584] ? uprobe_clear_state+0x278/0x290 [ 1082.271935][T22584] ? __mmput+0x118/0x3a0 [ 1082.276236][T22584] ? exit_mm+0x23f/0x340 [ 1082.281343][T22584] ? sysctl_delayacct+0x220/0x220 [ 1082.286459][T22584] ? do_exit+0x2530/0x2530 [ 1082.291178][T22584] ? tty_audit_exit+0x14d/0x1f0 [ 1082.296136][T22584] ? do_exit+0x909/0x2530 [ 1082.300554][T22584] ? nfs_stat_to_errno+0x170/0x170 [ 1082.305740][T22584] ? put_task_struct+0xc0/0xc0 [ 1082.310660][T22584] ? lock_chain_count+0x20/0x20 [ 1082.315576][T22584] ? do_group_exit+0x22d/0x2f0 [ 1082.320637][T22584] ? lockdep_hardirqs_on+0x98/0x150 [ 1082.326049][T22584] ? get_signal+0x12a6/0x1390 [ 1082.330860][T22584] ? arch_do_signal_or_restart+0xc2/0x7b0 [ 1082.336671][T22584] ? get_sigframe_size+0x20/0x20 [ 1082.341736][T22584] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1082.347786][T22584] ? exit_to_user_mode_loop+0x3b/0x110 [ 1082.353362][T22584] ? exit_to_user_mode_loop+0x70/0x110 [ 1082.358896][T22584] ? exit_to_user_mode_prepare+0xee/0x180 [ 1082.364718][T22584] ? irqentry_exit_to_user_mode+0x9/0x30 [ 1082.370506][T22584] ? exc_page_fault+0x8c/0x100 [ 1082.375417][T22584] ? asm_exc_page_fault+0x26/0x30 [ 1082.380672][T22584] [ 1082.384488][T22584] task:syz.9.3827 state:R running task stack:23400 pid:22559 ppid:14528 flags:0x00004006 [ 1082.395523][T22584] Call Trace: [ 1082.398848][T22584] [ 1082.401895][T22584] __schedule+0x15ae/0x4660 [ 1082.406489][T22584] ? asan.module_dtor+0x20/0x20 [ 1082.411448][T22584] ? mark_lock+0x94/0x320 [ 1082.415835][T22584] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1082.421977][T22584] ? preempt_schedule_irq+0xb4/0x150 [ 1082.427336][T22584] preempt_schedule_irq+0xbf/0x150 [ 1082.432585][T22584] ? preempt_schedule_notrace+0x110/0x110 [ 1082.438426][T22584] ? do_raw_spin_trylock+0xb2/0x190 [ 1082.443759][T22584] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1082.449626][T22584] irqentry_exit+0x67/0x70 [ 1082.454148][T22584] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1082.460244][T22584] RIP: 0010:release_pages+0x2f4/0x2300 [ 1082.465766][T22584] Code: c5 50 4c 89 ef e8 cc 14 de 08 e9 ba 01 00 00 e8 32 46 cc ff e9 4e 02 00 00 49 8d 5e 34 48 89 df be 04 00 00 00 e8 5c c5 24 00 <48> 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 [ 1082.486409][T22584] RSP: 0018:ffffc9000368f340 EFLAGS: 00000256 [ 1082.492759][T22584] RAX: ffffffff81bb2c01 RBX: ffffea0001e6fff4 RCX: ffffffff81bb2c54 [ 1082.500858][T22584] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0001e6fff4 [ 1082.508867][T22584] RBP: ffffc9000368f460 R08: ffffea0001e6fff7 R09: 1ffffd40003cdffe [ 1082.516908][T22584] R10: dffffc0000000000 R11: fffff940003cdfff R12: 0000000000000440 [ 1082.524992][T22584] R13: 0000000000000000 R14: ffffea0001e6ffc0 R15: 0200000000000000 [ 1082.533099][T22584] ? release_pages+0x2a1/0x2300 [ 1082.538007][T22584] ? release_pages+0x2f4/0x2300 [ 1082.542975][T22584] ? __lock_acquire+0x7d80/0x7d80 [ 1082.548047][T22584] ? lru_cache_disable+0x30/0x30 [ 1082.553102][T22584] tlb_flush_mmu+0x379/0x510 [ 1082.557764][T22584] unmap_page_range+0x2929/0x32f0 [ 1082.563513][T22584] ? copy_page_range+0x3700/0x3700 [ 1082.568705][T22584] unmap_vmas+0x286/0x3f0 [ 1082.573399][T22584] ? unmap_page_range+0x32f0/0x32f0 [ 1082.578685][T22584] ? __lock_acquire+0x7d80/0x7d80 [ 1082.583864][T22584] exit_mmap+0x238/0xb90 [ 1082.588925][T22584] ? exit_mm_release+0x1a/0x30 [ 1082.593994][T22584] ? vm_brk+0x30/0x30 [ 1082.598034][T22584] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1082.603833][T22584] ? uprobe_clear_state+0x278/0x290 [ 1082.609078][T22584] __mmput+0x118/0x3a0 [ 1082.613243][T22584] exit_mm+0x23f/0x340 [ 1082.617371][T22584] ? sysctl_delayacct+0x220/0x220 [ 1082.622496][T22584] ? do_exit+0x2530/0x2530 [ 1082.626974][T22584] ? tty_audit_exit+0x14d/0x1f0 [ 1082.631918][T22584] do_exit+0x909/0x2530 [ 1082.636155][T22584] ? nfs_stat_to_errno+0x170/0x170 [ 1082.641430][T22584] ? put_task_struct+0xc0/0xc0 [ 1082.646269][T22584] ? lock_chain_count+0x20/0x20 [ 1082.651228][T22584] do_group_exit+0x22d/0x2f0 [ 1082.655867][T22584] ? lockdep_hardirqs_on+0x98/0x150 [ 1082.661179][T22584] get_signal+0x12a6/0x1390 [ 1082.665842][T22584] arch_do_signal_or_restart+0xc2/0x7b0 [ 1082.671543][T22584] ? get_sigframe_size+0x20/0x20 [ 1082.676544][T22584] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1082.682645][T22584] ? exit_to_user_mode_loop+0x3b/0x110 [ 1082.688173][T22584] exit_to_user_mode_loop+0x70/0x110 [ 1082.694248][T22584] exit_to_user_mode_prepare+0xee/0x180 [ 1082.699844][T22584] irqentry_exit_to_user_mode+0x9/0x30 [ 1082.705584][T22584] exc_page_fault+0x8c/0x100 [ 1082.710297][T22584] asm_exc_page_fault+0x26/0x30 [ 1082.715220][T22584] RIP: 0033:0x7f3e6c99e0e1 [ 1082.719679][T22584] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1082.725983][T22584] RAX: 0000000000000000 RBX: 00007f3e6cc26090 RCX: 00007f3e6c99e0d9 [ 1082.734031][T22584] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1082.742198][T22584] RBP: 00007f3e6ca35024 R08: 0000000000000000 R09: 0000000000000000 [ 1082.750279][T22584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.758317][T22584] R13: 00007f3e6cc26128 R14: 00007f3e6cc26090 R15: 00007ffc8eff9948 [ 1082.766416][T22584] [ 1082.773542][T22584] OOM killer enabled. [ 1082.777604][T22584] Restarting tasks ... done. [ 1082.868896][T22584] random: crng reseeded on system resumption [ 1082.901514][T22584] PM: suspend exit [ 1083.360615][T17034] Bluetooth: hci1: command 0x0406 tx timeout [ 1083.680205][T17034] Bluetooth: hci4: command 0x0406 tx timeout [ 1083.910446][T17034] Bluetooth: hci0: command 0x0c1a tx timeout [ 1084.127441][T17034] Bluetooth: hci2: command 0x0c1a tx timeout [ 1084.756561][ T28] audit: type=1800 audit(1787595656.306:45): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3839" name="pnp_string" dev="configfs" ino=76614 res=0 errno=0 [ 1084.947732][T22635] loop8: detected capacity change from 0 to 16 [ 1085.000631][T22635] erofs: (device loop8): mounted with root inode @ nid 36. [ 1085.426882][T22644] loop7: detected capacity change from 0 to 512 [ 1085.440994][T17034] Bluetooth: hci1: command 0x0406 tx timeout [ 1085.517823][T22644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.617159][T22644] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.640139][T13638] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1085.762060][T17034] Bluetooth: hci4: command 0x0406 tx timeout [ 1085.920321][T17034] Bluetooth: hci0: command 0x0c1a tx timeout [ 1085.945052][T13638] usb 6-1: not running at top speed; connect to a high speed hub [ 1085.972866][T13638] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.008241][T13638] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1086.037801][T13638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.113914][T13638] usb 6-1: Found UVC 1.00 device (046d:0825) [ 1086.157125][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.162037][T17034] Bluetooth: hci2: command 0x0c1a tx timeout [ 1086.347990][T22664] syzkaller0: entered promiscuous mode [ 1086.365398][T22664] syzkaller0: entered allmulticast mode [ 1086.372464][T22666] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 1086.733671][T13638] uvcvideo 6-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 1086.765828][T22674] loop7: detected capacity change from 0 to 1024 [ 1086.770826][T13638] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1086.801975][T22674] EXT4-fs: Ignoring removed mblk_io_submit option [ 1086.803126][T13638] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 1086.808575][T22674] EXT4-fs: Ignoring removed orlov option [ 1086.881617][T13638] usb 6-1: USB disconnect, device number 13 [ 1086.963242][T22674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.454349][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.726289][T22709] loop7: detected capacity change from 0 to 16 [ 1087.797440][T22709] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 1088.010200][T17034] Bluetooth: hci0: command 0x0c1a tx timeout [ 1088.149457][T22716] binder: 22715:22716 ioctl c018620c 2000000001c0 returned -1 [ 1088.242387][T17034] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.049698][T22738] loop5: detected capacity change from 0 to 512 [ 1089.091317][T22738] EXT4-fs: inline encryption not supported [ 1089.186056][T22738] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 1089.229286][T22738] System zones: 0-2, 18-18, 34-35 [ 1089.243001][T22743] loop9: detected capacity change from 0 to 8 [ 1089.276042][T22738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.340478][T22738] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.353285][T22743] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1089.410822][T22743] SQUASHFS error: Failed to read block 0x91: -5 [ 1089.417308][T22743] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1089.460404][T22743] SQUASHFS error: Unable to read inode 0x11f [ 1089.547122][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.542294][T22778] netlink: 'syz.7.3877': attribute type 11 has an invalid length. [ 1090.705156][T22782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1090.778722][T22778] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 1090.802376][T22778] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 1090.981084][T22787] loop5: detected capacity change from 0 to 1024 [ 1092.082343][T22806] loop7: detected capacity change from 0 to 2048 [ 1092.132928][T22806] EXT4-fs: inline encryption not supported [ 1092.353640][T22806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.429892][T22806] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.689739][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.303920][T22857] loop7: detected capacity change from 0 to 256 [ 1094.492102][T22857] FAT-fs (loop7): Directory bread(block 64) failed [ 1094.518042][T22857] FAT-fs (loop7): Directory bread(block 65) failed [ 1094.528129][T22857] FAT-fs (loop7): Directory bread(block 66) failed [ 1094.541398][T22857] FAT-fs (loop7): Directory bread(block 67) failed [ 1094.553526][T22857] FAT-fs (loop7): Directory bread(block 68) failed [ 1094.561538][T22857] FAT-fs (loop7): Directory bread(block 69) failed [ 1094.600219][T22857] FAT-fs (loop7): Directory bread(block 70) failed [ 1094.628883][T22857] FAT-fs (loop7): Directory bread(block 71) failed [ 1094.657401][T22857] FAT-fs (loop7): Directory bread(block 72) failed [ 1094.665604][T22857] FAT-fs (loop7): Directory bread(block 73) failed [ 1095.035104][T22872] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3895'. [ 1095.465481][T22889] bond0: (slave bridge0): Releasing backup interface [ 1095.554002][T22893] netlink: 'syz.5.3900': attribute type 10 has an invalid length. [ 1095.569721][T22893] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1095.640615][ T6145] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1095.843371][ T6145] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.856377][ T6145] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1095.880424][ T6145] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.912167][ T6145] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1095.922445][ T6145] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1095.940124][ T6145] usb 10-1: Product: syz [ 1095.944429][ T6145] usb 10-1: Manufacturer: syz [ 1095.987383][T22883] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1096.006389][ T6145] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 1096.053151][ T6145] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1096.266820][ T5857] usb 10-1: USB disconnect, device number 10 [ 1096.286554][ T5857] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1096.319153][ T5857] garmin_gps 10-1:1.0: device disconnected [ 1096.400319][T17034] Bluetooth: hci2: command 0x0c1a tx timeout [ 1097.171970][T22940] netlink: 'syz.5.3911': attribute type 1 has an invalid length. [ 1097.370586][T22944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1097.397320][T22944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1097.672443][T22955] netlink: 'syz.8.3913': attribute type 10 has an invalid length. [ 1098.352976][ T6146] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1098.550708][T22991] netlink: 'syz.7.3922': attribute type 1 has an invalid length. [ 1098.581454][ T6146] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.606225][ T6146] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1098.630467][ T6146] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.664585][ T6146] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1098.675162][ T6146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1098.683688][ T6146] usb 6-1: Product: syz [ 1098.687971][ T6146] usb 6-1: Manufacturer: syz [ 1098.706138][T22972] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1098.723774][T22996] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3922'. [ 1098.736512][ T6146] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1098.749522][ T6146] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1098.777456][T22996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1098.793393][T22998] loop9: detected capacity change from 0 to 1024 [ 1099.019038][ T6146] usb 6-1: USB disconnect, device number 14 [ 1099.028070][T22998] syz.9.3924: attempt to access beyond end of device [ 1099.028070][T22998] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.063280][ T6146] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1099.098668][T22998] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.108416][ T6146] garmin_gps 6-1:1.0: device disconnected [ 1099.149402][T22997] syz.9.3924: attempt to access beyond end of device [ 1099.149402][T22997] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.185561][T22997] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.223552][T22998] syz.9.3924: attempt to access beyond end of device [ 1099.223552][T22998] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.240245][T22998] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.254026][T22997] syz.9.3924: attempt to access beyond end of device [ 1099.254026][T22997] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.276277][T22997] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.292020][T23008] syz.9.3924: attempt to access beyond end of device [ 1099.292020][T23008] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.307709][T23008] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.316372][T23008] syz.9.3924: attempt to access beyond end of device [ 1099.316372][T23008] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.329935][T23008] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.338215][T23008] syz.9.3924: attempt to access beyond end of device [ 1099.338215][T23008] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.353908][T23008] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.401236][T22997] syz.9.3924: attempt to access beyond end of device [ 1099.401236][T22997] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.460287][T22997] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.479994][T22997] syz.9.3924: attempt to access beyond end of device [ 1099.479994][T22997] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.527585][T22997] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.561330][T23008] syz.9.3924: attempt to access beyond end of device [ 1099.561330][T23008] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1099.610205][T23008] Buffer I/O error on dev loop9, logical block 2889, async page read [ 1099.706307][T23009] hfsplus: request for non-existent node 1280 in B*Tree [ 1099.782591][T23009] hfsplus: request for non-existent node 1280 in B*Tree [ 1099.834049][T23020] loop8: detected capacity change from 0 to 736 [ 1100.295374][T23033] netlink: 'syz.7.3933': attribute type 1 has an invalid length. [ 1100.400754][T23033] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3933'. [ 1100.454447][T23033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1100.820698][T23056] loop5: detected capacity change from 0 to 2048 [ 1100.866637][T23056] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1100.889991][T23056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1101.050379][ T6146] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1101.267816][ T6146] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.283755][T23063] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1101.383240][ T6146] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1101.639713][ T6146] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.698995][T23066] loop8: detected capacity change from 0 to 128 [ 1101.729635][ T6146] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1101.780391][ T6146] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1101.788448][ T6146] usb 8-1: Product: syz [ 1101.871158][ T6146] usb 8-1: Manufacturer: syz [ 1101.920420][T23066] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1101.940607][T23052] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1101.970968][T23066] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.974296][ T6146] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 1101.996180][ T6146] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1102.168171][T20419] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1102.265195][ T5857] usb 8-1: USB disconnect, device number 15 [ 1102.294537][ T5857] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1102.304656][ T5857] garmin_gps 8-1:1.0: device disconnected [ 1102.568333][T23086] netlink: 'syz.9.3944': attribute type 1 has an invalid length. [ 1102.675553][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3944'. [ 1102.712766][T23090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1103.644069][T23131] netlink: 'syz.5.3954': attribute type 1 has an invalid length. [ 1103.670502][ T5813] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1103.725228][T23134] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3954'. [ 1103.766051][T23134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1103.870145][ T5813] usb 8-1: Using ep0 maxpacket: 16 [ 1103.882287][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.908571][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.942376][ T5813] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1103.982573][ T5813] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1104.025543][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.061958][ T5813] usb 8-1: config 0 descriptor?? [ 1104.089827][T23142] loop5: detected capacity change from 0 to 512 [ 1104.133763][T23142] ext4: Bad value for 'data' [ 1104.310859][T11788] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1104.604566][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1104.619771][T11788] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.719111][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1104.793162][T11788] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1104.920672][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1104.938209][T11788] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.955949][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.004876][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.040571][T11788] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1105.050129][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.057395][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.090082][T11788] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1105.148470][T11788] usb 10-1: Product: syz [ 1105.153497][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.173517][T11788] usb 10-1: Manufacturer: syz [ 1105.202510][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.209793][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.235583][T23140] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1105.261762][T11788] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 1105.274760][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.294960][T11788] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1105.303300][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.328598][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.386511][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.414805][ T5813] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 1105.479055][ T5813] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input12 [ 1105.532840][T11585] usb 10-1: USB disconnect, device number 11 [ 1105.552758][T11585] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1105.601184][T11585] garmin_gps 10-1:1.0: device disconnected [ 1105.676964][ T5813] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1105.760411][ T5813] usb 8-1: USB disconnect, device number 16 [ 1105.916821][T23169] fido_id[23169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1106.061883][T23175] netlink: 'syz.7.3964': attribute type 1 has an invalid length. [ 1106.272055][T23181] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3964'. [ 1106.317938][T23181] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1106.651658][T23196] loop7: detected capacity change from 0 to 512 [ 1106.659681][T23196] ext4: Bad value for 'data' [ 1107.667955][T23203] xt_socket: unknown flags 0x4c [ 1108.329122][T23227] netlink: 'syz.7.3976': attribute type 1 has an invalid length. [ 1108.459210][T23232] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3976'. [ 1108.469281][ T5813] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1108.516395][T23232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1108.539852][T23227] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3976'. [ 1108.558944][T23236] loop8: detected capacity change from 0 to 2048 [ 1108.652319][T23236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.715251][ T5813] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.731600][ T5813] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1108.741741][ T5813] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.757136][ T5813] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1108.766535][ T5813] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1108.797033][ T5813] usb 10-1: Product: syz [ 1108.814588][T23236] EXT4-fs (loop8): shut down requested (2) [ 1108.820629][ T5813] usb 10-1: Manufacturer: syz [ 1108.851232][T23222] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1108.863303][ T5813] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 1108.888963][ T5813] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1108.993420][T20419] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.159535][ T5813] usb 10-1: USB disconnect, device number 12 [ 1109.205523][ T5813] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1109.240355][ T5813] garmin_gps 10-1:1.0: device disconnected [ 1109.535569][T23264] xt_socket: unknown flags 0x4c [ 1110.087300][T23276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1110.124434][T23278] netlink: 'syz.9.3988': attribute type 1 has an invalid length. [ 1110.346567][T23280] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3988'. [ 1110.411124][T23280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1110.465962][T23285] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3988'. [ 1110.490191][ T6145] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1110.692759][ T6145] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.722469][ T6145] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1110.735869][ T6145] usb 6-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 1110.753330][ T6145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.782787][ T6145] usb 6-1: Product: syz [ 1110.787070][ T6145] usb 6-1: Manufacturer: syz [ 1110.818413][ T6145] usb 6-1: SerialNumber: syz [ 1110.830185][T13551] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1111.030927][T13551] usb 8-1: Using ep0 maxpacket: 16 [ 1111.043741][T13551] usb 8-1: config 0 has no interfaces? [ 1111.064218][T13551] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1111.077638][T13551] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.086172][T13551] usb 8-1: Product: syz [ 1111.089837][T23307] netlink: 'syz.8.3995': attribute type 10 has an invalid length. [ 1111.090543][T13551] usb 8-1: Manufacturer: syz [ 1111.090563][T13551] usb 8-1: SerialNumber: syz [ 1111.111191][T13551] r8152-cfgselector 8-1: config 0 descriptor?? [ 1111.289709][ T6145] usb 6-1: USB disconnect, device number 15 [ 1111.335382][T11294] udevd[11294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.370372][T23293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.393233][T23293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.417812][T13551] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1111.454931][T13551] r8152-cfgselector 8-1: USB disconnect, device number 17 [ 1111.627903][T23317] loop9: detected capacity change from 0 to 1024 [ 1111.668445][T23317] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.693303][T23317] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.983503][T23330] xt_socket: unknown flags 0x4c [ 1112.040656][ T6146] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1112.147137][T23334] netlink: 'syz.5.4001': attribute type 1 has an invalid length. [ 1112.220189][T23340] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1112.244894][ T6146] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.258843][ T6146] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1112.264214][T23340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1112.279985][ T6146] usb 10-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1112.309082][T23342] loop8: detected capacity change from 0 to 8 [ 1112.318823][ T6146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.327353][ T6146] usb 10-1: Product: syz [ 1112.331999][ T6146] usb 10-1: Manufacturer: syz [ 1112.336744][ T6146] usb 10-1: SerialNumber: syz [ 1112.364578][T23334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1112.622852][ T6146] usb 10-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1112.925936][ T6146] usb 10-1: USB disconnect, device number 13 [ 1113.135118][T23363] loop7: detected capacity change from 0 to 1024 [ 1113.254073][T23363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.339792][T11330] udevd[11330]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.382257][T23368] xt_socket: unknown flags 0x4c [ 1113.603410][T23377] loop8: detected capacity change from 0 to 128 [ 1113.730697][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1113.745064][T23377] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1113.792756][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.834352][T23377] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1113.883692][T23377] ext2 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.978006][T23384] netlink: 'syz.7.4013': attribute type 1 has an invalid length. [ 1114.191922][T23392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4013'. [ 1114.226078][T23392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1114.274867][T23395] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4013'. [ 1114.288608][T20419] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1114.532924][T23405] loop8: detected capacity change from 0 to 1024 [ 1114.606126][T23410] xt_socket: unknown flags 0x4c [ 1114.634189][T23405] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1114.751195][T23405] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1114.918136][T23412] loop7: detected capacity change from 0 to 4096 [ 1114.942777][T23412] EXT4-fs: Ignoring removed orlov option [ 1114.981495][T23412] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1115.021923][T23412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.402262][T23412] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1115.581780][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.606463][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.802739][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.857089][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.864473][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.999635][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.302940][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.337227][T23449] loop5: detected capacity change from 0 to 512 [ 1117.416931][T23449] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.492220][T23449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1117.557720][T23449] EXT4-fs (loop5): 1 truncate cleaned up [ 1117.615946][T23449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.764753][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1117.775697][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1117.814050][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1117.824898][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1117.832787][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1117.851410][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1117.963100][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.218805][T17034] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1118.906007][T23456] chnl_net:caif_netlink_parms(): no params data found [ 1119.535983][T23456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.555429][T23456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.586805][T23456] bridge_slave_0: entered allmulticast mode [ 1119.611146][T23456] bridge_slave_0: entered promiscuous mode [ 1119.710592][T23456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.743493][T23456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.770946][T23456] bridge_slave_1: entered allmulticast mode [ 1119.788436][T23456] bridge_slave_1: entered promiscuous mode [ 1119.823493][ T55] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1119.891607][ T12] hsr_slave_0: left promiscuous mode [ 1119.912256][ T12] hsr_slave_1: left promiscuous mode [ 1119.920402][T17034] Bluetooth: hci0: command tx timeout [ 1120.027439][ T55] usb 6-1: not running at top speed; connect to a high speed hub [ 1120.061426][ T12] veth1_macvtap: left promiscuous mode [ 1120.067369][ T12] veth0_macvtap: left promiscuous mode [ 1120.074856][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.113730][ T55] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1120.123200][ T12] veth1_vlan: left promiscuous mode [ 1120.128485][ T12] veth0_vlan: left promiscuous mode [ 1120.150159][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.206322][ T55] usb 6-1: Found UVC 1.00 device (046d:0825) [ 1120.519083][ T12] bond2 (unregistering): Released all slaves [ 1120.617863][ T55] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1120.663899][ T55] uvcvideo 6-1:1.1: No frame descriptor found for the default format. [ 1120.677062][ T12] bond1 (unregistering): Released all slaves [ 1120.692987][ T55] uvcvideo 6-1:1.1: Failed to initialize the device (-22). [ 1120.933829][T11786] usb 6-1: USB disconnect, device number 16 [ 1121.073780][ T6146] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1121.271609][ T28] audit: type=1800 audit(1787595692.816:46): pid=23522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4039" name="pnp_string" dev="configfs" ino=81996 res=0 errno=0 [ 1121.303709][ T6146] usb 8-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1121.320474][ T6146] usb 8-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1121.334574][ T6146] usb 8-1: Product: syz [ 1121.359932][ T6146] usb 8-1: config 0 descriptor?? [ 1121.396262][ T6146] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1121.428413][ T6146] usb 8-1: Detected FT232H [ 1121.626119][ T6146] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1122.002677][T17034] Bluetooth: hci0: command tx timeout [ 1122.089837][ T6146] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1122.338721][ T5857] usb 8-1: USB disconnect, device number 18 [ 1122.398012][ T5857] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1122.410972][ T5857] ftdi_sio 8-1:0.0: device disconnected [ 1122.954049][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1122.965502][ T12] bond0 (unregistering): Released all slaves [ 1123.100208][ T6145] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1123.139938][T23456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.158498][T23456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.256596][T23456] team0: Port device team_slave_0 added [ 1123.277395][T23456] team0: Port device team_slave_1 added [ 1123.320383][T11786] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1123.352146][ T6145] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.368596][ T6145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.378892][T23456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.386108][ T6145] usb 6-1: Product: syz [ 1123.404335][ T6145] usb 6-1: Manufacturer: syz [ 1123.408989][ T6145] usb 6-1: SerialNumber: syz [ 1123.409701][T23456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.491172][T23456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.531834][T23456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.539040][T23456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.571371][T11786] usb 8-1: Using ep0 maxpacket: 8 [ 1123.578972][T11786] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1123.591243][T11786] usb 8-1: config 179 has no interface number 0 [ 1123.597657][T11786] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1123.610898][T11786] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1123.622592][T11786] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1123.635651][T11786] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1123.647160][T23456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.660276][T11786] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1123.684610][T11786] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1123.710110][T11786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.755388][T23542] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1123.782826][T23456] hsr_slave_0: entered promiscuous mode [ 1123.828059][T23456] hsr_slave_1: entered promiscuous mode [ 1123.839201][T23456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.864595][T23456] Cannot create hsr debugfs directory [ 1124.080704][T17034] Bluetooth: hci0: command tx timeout [ 1124.118005][T11786] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input13 [ 1124.268089][ T55] usb 8-1: USB disconnect, device number 19 [ 1124.268283][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1124.282446][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1124.323791][ T55] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1124.497072][ T6145] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1124.518428][ T6145] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1124.532411][ T6145] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1124.715001][ T6145] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 1124.819384][ T6145] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1124.890842][ T6145] usb 6-1: USB disconnect, device number 17 [ 1124.901306][ T6145] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1125.415194][T23574] loop5: detected capacity change from 0 to 256 [ 1125.648161][ T28] audit: type=1800 audit(1787595697.196:47): pid=23577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4048" name="pnp_string" dev="configfs" ino=82148 res=0 errno=0 [ 1125.805832][T23456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1125.827249][T23456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1125.879489][T23456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1125.931288][T23456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1126.087294][T23456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.149718][T23456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.163982][T17034] Bluetooth: hci0: command tx timeout [ 1126.246159][T21324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.253400][T21324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.301452][T21324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.308672][T21324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.488638][T23456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1126.594407][T23598] syz.5.4053 invoked oom-killer: gfp_mask=0x482cc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_NOMEMALLOC), order=2, oom_score_adj=1000 [ 1126.640671][T23598] CPU: 1 PID: 23598 Comm: syz.5.4053 Not tainted syzkaller #0 [ 1126.648310][T23598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1126.658406][T23598] Call Trace: [ 1126.661723][T23598] [ 1126.664700][T23598] dump_stack_lvl+0x18c/0x250 [ 1126.669441][T23598] ? show_regs_print_info+0x20/0x20 [ 1126.674693][T23598] ? load_image+0x420/0x420 [ 1126.679282][T23598] ? ___ratelimit+0x478/0x610 [ 1126.684071][T23598] ? radix_tree_cpu_dead+0x160/0x160 [ 1126.689421][T23598] dump_header+0xd8/0x820 [ 1126.693811][T23598] oom_kill_process+0x390/0x580 [ 1126.698758][T23598] out_of_memory+0xe0e/0x1200 [ 1126.703498][T23598] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1126.709180][T23598] ? mutex_lock_nested+0x20/0x20 [ 1126.714177][T23598] ? unregister_oom_notifier+0x20/0x20 [ 1126.719712][T23598] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1126.725315][T23598] ? try_charge_memcg+0xc91/0x17c0 [ 1126.730488][T23598] ? drain_local_stock+0x630/0x630 [ 1126.735675][T23598] ? do_raw_spin_unlock+0x121/0x230 [ 1126.740934][T23598] try_charge_memcg+0xca1/0x17c0 [ 1126.746018][T23598] ? folio_flags+0x120/0x120 [ 1126.750659][T23598] ? percpu_ref_tryget+0x15/0x180 [ 1126.755735][T23598] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1126.761521][T23598] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1126.767530][T23598] ? percpu_ref_tryget+0x15/0x180 [ 1126.772584][T23598] ? percpu_ref_tryget+0x15/0x180 [ 1126.777633][T23598] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1126.783379][T23598] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1126.789124][T23598] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1126.794963][T23598] obj_cgroup_charge+0x36e/0x630 [ 1126.799928][T23598] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1126.805854][T23598] ? obj_cgroup_charge+0xed/0x630 [ 1126.810904][T23598] ? mod_objcg_mlstate+0x320/0x320 [ 1126.816041][T23598] ? percpu_ref_tryget+0x15/0x180 [ 1126.821096][T23598] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1126.827030][T23598] slab_pre_alloc_hook+0x2e2/0x300 [ 1126.832184][T23598] ? __alloc_skb+0x138/0x2c0 [ 1126.836860][T23598] ? __alloc_skb+0x138/0x2c0 [ 1126.841478][T23598] __kmem_cache_alloc_node+0x53/0x250 [ 1126.846899][T23598] ? __alloc_skb+0x138/0x2c0 [ 1126.851520][T23598] __kmalloc_node_track_caller+0xa4/0x230 [ 1126.857268][T23598] ? rcu_is_watching+0x15/0xb0 [ 1126.862063][T23598] ? __alloc_skb+0x138/0x2c0 [ 1126.866678][T23598] kmalloc_reserve+0x116/0x240 [ 1126.871467][T23598] __alloc_skb+0x138/0x2c0 [ 1126.875905][T23598] alloc_skb_with_frags+0xcd/0x7a0 [ 1126.881082][T23598] sock_alloc_send_pskb+0x883/0x9a0 [ 1126.886401][T23598] ? sock_kzfree_s+0x50/0x50 [ 1126.891034][T23598] ? __lock_acquire+0x7d80/0x7d80 [ 1126.896096][T23598] ? sock_def_readable+0xad/0x420 [ 1126.901148][T23598] ? sock_def_readable+0xad/0x420 [ 1126.906188][T23598] ? sock_def_readable+0x2ac/0x420 [ 1126.911328][T23598] unix_stream_sendmsg+0x48b/0xbf0 [ 1126.916567][T23598] ? unix_show_fdinfo+0x280/0x280 [ 1126.921616][T23598] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1126.928091][T23598] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1126.933669][T23598] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1126.938982][T23598] ? security_socket_sendmsg+0x80/0xa0 [ 1126.944479][T23598] ? unix_show_fdinfo+0x280/0x280 [ 1126.949531][T23598] ____sys_sendmsg+0x61b/0x980 [ 1126.954338][T23598] ? __asan_memset+0x22/0x40 [ 1126.958960][T23598] ? __sys_sendmsg_sock+0x30/0x30 [ 1126.964005][T23598] ? __import_iovec+0x5f2/0x850 [ 1126.968930][T23598] ? import_iovec+0x73/0xa0 [ 1126.973467][T23598] ___sys_sendmsg+0x2a6/0x360 [ 1126.978172][T23598] ? __sys_sendmsg+0x2b0/0x2b0 [ 1126.982998][T23598] __se_sys_sendmsg+0x1d0/0x2c0 [ 1126.987880][T23598] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.992858][T23598] ? lockdep_hardirqs_on+0x98/0x150 [ 1126.998087][T23598] do_syscall_64+0x55/0xb0 [ 1127.002541][T23598] ? clear_bhb_loop+0x40/0x90 [ 1127.007245][T23598] ? clear_bhb_loop+0x40/0x90 [ 1127.011951][T23598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.017878][T23598] RIP: 0033:0x7f928a99e0d9 [ 1127.022313][T23598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.041951][T23598] RSP: 002b:00007f928b861028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.050389][T23598] RAX: ffffffffffffffda RBX: 00007f928ac25fa0 RCX: 00007f928a99e0d9 [ 1127.058373][T23598] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000008 [ 1127.066375][T23598] RBP: 00007f928aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 1127.074379][T23598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.082367][T23598] R13: 00007f928ac26038 R14: 00007f928ac25fa0 R15: 00007fff0e0b7078 [ 1127.090378][T23598] [ 1127.150939][T23598] memory: usage 92kB, limit 96kB, failcnt 40 [ 1127.156996][T23598] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1127.206041][T23598] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 1127.280101][T23598] Memory cgroup stats for /syz5/test: [ 1127.280816][T23598] cache 0 [ 1127.289227][T23598] rss 0 [ 1127.386081][T23598] rss_huge 0 [ 1127.389355][T23598] shmem 0 [ 1127.408835][T23598] mapped_file 0 [ 1127.416312][T23598] dirty 0 [ 1127.426528][T23614] loop9: detected capacity change from 0 to 512 [ 1127.434178][T23598] writeback 0 [ 1127.437520][T23598] workingset_refault_anon 0 [ 1127.461132][T23598] workingset_refault_file 0 [ 1127.467805][T23598] swap 4096 [ 1127.482590][T23614] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1127.489454][T23614] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1127.503894][T23598] pgpgin 1 [ 1127.506974][T23598] pgpgout 1 [ 1127.511752][T23598] pgfault 23 [ 1127.515612][T23598] pgmajfault 0 [ 1127.533151][T23614] EXT4-fs (loop9): 1 truncate cleaned up [ 1127.547469][T23598] inactive_anon 0 [ 1127.554218][T23598] active_anon 0 [ 1127.570299][T23614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.571358][T23598] inactive_file 0 [ 1127.617866][T23598] active_file 0 [ 1127.628069][T23598] unevictable 0 [ 1127.639851][T23456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.720163][T23598] hierarchical_memory_limit 98304 [ 1127.731542][T23598] hierarchical_memsw_limit 9223372036854771712 [ 1127.750085][T23598] total_cache 0 [ 1127.753611][T23598] total_rss 0 [ 1127.756933][T23598] total_rss_huge 0 [ 1127.770285][T23598] total_shmem 0 [ 1127.778922][T23598] total_mapped_file 0 [ 1127.788936][T23598] total_dirty 0 [ 1127.798899][T23598] total_writeback 0 [ 1127.839439][T23598] total_workingset_refault_anon 0 [ 1127.893383][T23598] total_workingset_refault_file 0 [ 1127.899065][T23598] total_swap 4096 [ 1127.902858][T23598] total_pgpgin 1 [ 1127.906439][T23598] total_pgpgout 1 [ 1127.910143][T23598] total_pgfault 23 [ 1127.913896][T23598] total_pgmajfault 0 [ 1127.917820][T23598] total_inactive_anon 0 [ 1127.922061][T23598] total_active_anon 0 [ 1127.939797][T23598] total_inactive_file 0 [ 1127.944114][T23598] total_active_file 0 [ 1127.948148][T23598] total_unevictable 0 [ 1127.952728][T23598] anon_cost 0 [ 1127.956060][T23598] file_cost 0 [ 1127.959395][T23598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.4053,pid=23597,uid=0 [ 1128.016863][T23598] Memory cgroup out of memory: Killed process 23598 (syz.5.4053) total-vm:102376kB, anon-rss:1372kB, file-rss:23092kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1128.387056][T23456] veth0_vlan: entered promiscuous mode [ 1128.575699][T23630] netlink: 'syz.5.4058': attribute type 4 has an invalid length. [ 1128.674115][T23456] veth1_vlan: entered promiscuous mode [ 1128.896404][T23456] veth0_macvtap: entered promiscuous mode [ 1129.002398][T23456] veth1_macvtap: entered promiscuous mode [ 1129.136241][T23456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.825450][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.841897][ T28] audit: type=1800 audit(1787595701.396:48): pid=23637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4059" name="pnp_string" dev="configfs" ino=82457 res=0 errno=0 [ 1130.066468][T23649] loop9: detected capacity change from 0 to 1024 [ 1130.472098][T23653] UDC core: g1: couldn't find an available UDC or it's busy [ 1130.563951][T23655] loop5: detected capacity change from 0 to 8192 [ 1131.917816][T23667] loop5: detected capacity change from 0 to 512 [ 1131.955022][T23667] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1131.985189][T23667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1132.038723][T23667] EXT4-fs (loop5): 1 truncate cleaned up [ 1132.051566][T23667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.642454][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.439442][T23639] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.448912][T23639] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.457886][T23639] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.467013][T23639] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.615605][T23456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.725249][T23456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.739669][T23456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.751515][T23456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.766709][T23456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.267940][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.298222][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.369238][T23708] loop5: detected capacity change from 0 to 512 [ 1135.389330][T23708] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1135.411416][T23708] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1135.459260][T23708] EXT4-fs (loop5): 1 truncate cleaned up [ 1135.489542][T23708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.507831][ T6268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.535379][ T6268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.052120][T23718] Bluetooth: MGMT ver 1.22 [ 1136.098073][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.146932][T23720] loop1: detected capacity change from 0 to 136 [ 1136.156776][T23720] Attempt to read inode for relocated directory [ 1136.510845][T23734] netlink: 'syz.1.4082': attribute type 10 has an invalid length. [ 1136.550085][T23734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.558063][T23734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.651059][T13638] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1136.670250][T23734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.677556][T23734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.685192][T23734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.692412][T23734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.754361][T23740] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4083'. [ 1136.806044][T23734] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1136.862048][T13638] usb 10-1: Using ep0 maxpacket: 32 [ 1136.909023][T13638] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1136.922808][T13638] usb 10-1: config 0 has no interface number 0 [ 1136.937844][T13638] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1136.951898][T13638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.961117][T13638] usb 10-1: Product: syz [ 1136.967229][T13638] usb 10-1: Manufacturer: syz [ 1136.974564][T13638] usb 10-1: SerialNumber: syz [ 1137.005103][T13638] usb 10-1: config 0 descriptor?? [ 1137.025302][T13638] smsc95xx v2.0.0 [ 1137.094802][T23748] xt_socket: unknown flags 0x4c [ 1137.461718][T13638] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1137.508292][T13638] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1137.595819][T23753] loop1: detected capacity change from 0 to 512 [ 1137.614447][T23753] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1137.626077][T23753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1137.659967][T23753] EXT4-fs (loop1): 1 truncate cleaned up [ 1137.678054][T23753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.942918][T13638] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1137.965738][T13638] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 1137.991488][ T5856] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1138.060369][T13638] usb 10-1: USB disconnect, device number 14 [ 1138.137367][T23456] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.302077][ T5856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.325629][ T5856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.349449][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1138.373793][ T5856] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1138.398075][ T5856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.405272][T23757] loop1: detected capacity change from 0 to 1024 [ 1138.431531][ T5856] usb 8-1: config 0 descriptor?? [ 1138.434690][T23757] ext4: Bad value for 'sb' [ 1138.871131][ T5856] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1138.948277][ T5856] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1139.288052][T23773] usb 8-1: USB disconnect, device number 20 [ 1139.625058][T23765] fido_id[23765]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:047F:FFFF.0003/report_descriptor': No such device [ 1139.980086][T23774] hub 8-0:1.0: USB hub found [ 1139.986297][T23774] hub 8-0:1.0: 1 port detected [ 1140.225837][T23776] loop9: detected capacity change from 0 to 1024 [ 1140.391070][T23778] loop5: detected capacity change from 0 to 2048 [ 1140.480862][T23778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.514757][T23778] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.591605][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.836491][T23789] loop5: detected capacity change from 0 to 512 [ 1140.884656][T23789] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1140.912945][T23789] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1140.973552][T23789] EXT4-fs (loop5): 1 truncate cleaned up [ 1141.004678][T23789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.020183][ T5856] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1141.553716][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.730902][ T5856] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.815453][T23809] xt_socket: unknown flags 0x4c [ 1142.239291][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.260111][ T5856] usb 10-1: Product: syz [ 1142.264512][ T5856] usb 10-1: Manufacturer: syz [ 1142.269354][ T5856] usb 10-1: SerialNumber: syz [ 1142.683736][T23822] loop7: detected capacity change from 0 to 2048 [ 1142.718322][T23822] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1142.748463][T23822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1142.832299][ T28] audit: type=1800 audit(1787595714.386:49): pid=23822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4105" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 1143.397738][ T5856] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1143.406331][ T5856] cdc_ncm 10-1:1.0: setting rx_max = 16384 [ 1143.610300][ T5856] cdc_ncm 10-1:1.0: setting tx_max = 16384 [ 1143.643493][ T5856] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1143.689673][ T5856] usb 10-1: USB disconnect, device number 15 [ 1143.720458][ T5856] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 1143.832866][T23852] loop7: detected capacity change from 0 to 512 [ 1143.864909][T23852] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1143.889474][T23852] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1143.929071][T23852] EXT4-fs (loop7): 1 truncate cleaned up [ 1143.941000][T23852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.003752][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.406964][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1144.431073][T23867] binder: 23865:23867 ioctl c0306201 200000000080 returned -14 [ 1144.458966][T23867] binder: 23865:23867 ioctl c0306201 2000000003c0 returned -14 [ 1144.499655][T23867] binder_alloc: 23865: binder_alloc_buf, no vma [ 1144.585038][T23873] xt_socket: unknown flags 0x4c [ 1145.620241][ T5809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1145.731754][T23894] netlink: 'syz.7.4118': attribute type 1 has an invalid length. [ 1145.834087][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.844636][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.845101][T23898] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4118'. [ 1145.858412][ T5809] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1145.880225][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1145.888269][ T5809] usb 2-1: SerialNumber: syz [ 1145.957896][T23898] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1145.975501][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4118'. [ 1146.118451][ T5809] usb 2-1: 0:2 : does not exist [ 1146.182544][ T5809] usb 2-1: USB disconnect, device number 6 [ 1146.226008][T23908] loop7: detected capacity change from 0 to 512 [ 1146.273616][T11294] udevd[11294]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.301390][T23908] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1146.309331][T23908] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1146.381008][T23908] EXT4-fs (loop7): 1 truncate cleaned up [ 1146.389154][T23908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.491689][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.787031][T23925] loop1: detected capacity change from 0 to 512 [ 1146.813401][T23925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1146.825757][T23927] loop5: detected capacity change from 0 to 1024 [ 1146.870509][T23927] hfsplus: catalog record size mismatch (type 1, got 62, expected 88) [ 1146.889745][T23923] loop9: detected capacity change from 0 to 2048 [ 1146.910365][T13638] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1146.933460][T23923] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1146.945545][T23925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.046054][T23923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1147.050786][T23925] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.196739][T13638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.228892][T13638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.251898][T13638] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.272139][T13638] usb 8-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1147.282903][T13638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.287043][T23934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.326338][T13638] usb 8-1: config 0 descriptor?? [ 1147.412382][T23935] loop5: detected capacity change from 0 to 512 [ 1147.513547][T23935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.574997][T23935] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.759031][T23948] netlink: 'syz.1.4128': attribute type 1 has an invalid length. [ 1147.775236][T13638] thrustmaster 0003:044F:B324.0004: unbalanced collection at end of report description [ 1147.792910][T23948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1147.811598][T13638] thrustmaster 0003:044F:B324.0004: parse failed [ 1147.822437][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1147.841478][T13638] thrustmaster: probe of 0003:044F:B324.0004 failed with error -22 [ 1147.898821][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.973941][T13638] usb 8-1: USB disconnect, device number 21 [ 1148.102688][T23953] loop9: detected capacity change from 0 to 512 [ 1148.145396][T23953] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1148.194176][T23953] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1148.250822][T23953] EXT4-fs (loop9): 1 truncate cleaned up [ 1148.258081][T23953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.389171][T14528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.067373][T23995] loop7: detected capacity change from 0 to 512 [ 1150.137058][T23995] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1150.190367][T23995] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1150.219100][T23995] EXT4-fs (loop7): 1 truncate cleaned up [ 1150.236787][T23995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.342442][T24003] loop9: detected capacity change from 0 to 512 [ 1150.360631][T24003] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1151.435477][T24013] loop9: detected capacity change from 0 to 1024 [ 1153.198708][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.968056][T24059] loop7: detected capacity change from 0 to 512 [ 1154.988113][T24059] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1155.030153][T24059] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1155.067001][T24059] EXT4-fs (loop7): 1 truncate cleaned up [ 1155.075072][T24059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.338083][T24064] netlink: 'syz.5.4154': attribute type 10 has an invalid length. [ 1160.412551][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.175547][T24230] loop7: detected capacity change from 0 to 512 [ 1163.210537][T24230] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1163.221766][T24230] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1163.264541][T24230] EXT4-fs (loop7): 1 truncate cleaned up [ 1163.292299][T24230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1164.767079][T24274] bond0: (slave bridge0): Releasing backup interface [ 1164.864238][T24274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.871864][T24274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.903088][T24274] bridge_slave_0: left allmulticast mode [ 1164.908816][T24274] bridge_slave_0: left promiscuous mode [ 1164.967110][T24274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.989366][T24274] bridge_slave_1: left allmulticast mode [ 1165.026910][T24274] bridge_slave_1: left promiscuous mode [ 1165.039398][T24274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.063562][T24274] bond0: (slave bond_slave_0): Releasing backup interface [ 1165.161019][T24274] bond0: (slave bond_slave_1): Releasing backup interface [ 1165.262349][T24274] team0: Port device team_slave_0 removed [ 1165.294618][T24274] team0: Port device team_slave_1 removed [ 1165.314131][T24274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.333890][T24274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.345014][T24274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.357507][T24274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.824105][T24329] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1166.840230][T24329] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1168.838380][T24361] loop9: detected capacity change from 0 to 256 [ 1169.097009][T24366] loop5: detected capacity change from 0 to 512 [ 1169.122593][T24366] ext4: Bad value for 'data' [ 1169.173984][T11906] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1170.428441][T21332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.479894][T24394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 1173.380234][T24406] loop5: detected capacity change from 0 to 512 [ 1173.403174][T24406] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1173.420181][T24406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1173.452094][T24406] EXT4-fs (loop5): 1 truncate cleaned up [ 1173.478904][T24406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.282153][T24413] batadv_slave_1: entered allmulticast mode [ 1176.062388][T19999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.670881][T24432] loop5: detected capacity change from 0 to 1024 [ 1176.989307][ T6146] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1177.202268][ T6146] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1177.227357][ T6146] usb 10-1: config 7 has an invalid interface number: 40 but max is 1 [ 1177.240092][ T6146] usb 10-1: config 7 has an invalid interface number: 47 but max is 1 [ 1177.248298][ T6146] usb 10-1: config 7 has no interface number 0 [ 1177.286982][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.293758][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.305778][ T6146] usb 10-1: config 7 has no interface number 1 [ 1177.329325][ T6146] usb 10-1: config 7 interface 40 has no altsetting 0 [ 1177.370062][ T6146] usb 10-1: config 7 interface 47 has no altsetting 0 [ 1177.420205][ T6146] usb 10-1: New USB device found, idVendor=0458, idProduct=700c, bcdDevice=91.4b [ 1177.438466][ T6146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.456938][ T6146] usb 10-1: Product: syz [ 1177.467044][ T6146] usb 10-1: Manufacturer: syz [ 1177.500079][ T6146] usb 10-1: SerialNumber: syz [ 1177.751903][ T6146] usb-storage 10-1:7.40: USB Mass Storage device detected [ 1177.920161][ T6146] usb 10-1: USB disconnect, device number 16 [ 1179.427939][T24460] loop5: detected capacity change from 0 to 512 [ 1179.499769][T24459] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1179.511737][T24459] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1179.520188][T24459] CPU: 1 PID: 24459 Comm: syz.9.4246 Not tainted syzkaller #0 [ 1179.527772][T24459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1179.537858][T24459] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1179.543931][T24459] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f b5 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 26 b5 23 fb 41 be 78 12 00 00 4d [ 1179.563575][T24459] RSP: 0018:ffffc9000e64f7e0 EFLAGS: 00010246 [ 1179.569685][T24459] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1179.577691][T24459] RDX: ffff88805ef59e00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1179.585699][T24459] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1179.593703][T24459] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1179.601710][T24459] R13: ffff88802bede530 R14: ffff888147ed5280 R15: 0000000000000000 [ 1179.609726][T24459] FS: 00007f3e6abf66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1179.618702][T24459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.625321][T24459] CR2: 0000001b30320ff8 CR3: 000000004ea54000 CR4: 00000000003506e0 [ 1179.633332][T24459] Call Trace: [ 1179.636642][T24459] [ 1179.639609][T24459] ? dummy_wakeup+0x270/0x270 [ 1179.644342][T24459] usb_gadget_set_selfpowered+0x6e/0x230 [ 1179.650030][T24459] composite_dev_prepare+0x2fa/0x320 [ 1179.655376][T24459] configfs_composite_bind+0xa1/0x13f0 [ 1179.660899][T24459] ? kernfs_put+0x309/0x360 [ 1179.665483][T24459] ? webusb_landingPage_store+0x1c0/0x1c0 [ 1179.671295][T24459] gadget_bind_driver+0x2b3/0x770 [ 1179.676374][T24459] ? gadget_match_driver+0x130/0x130 [ 1179.681716][T24459] really_probe+0x247/0xae0 [ 1179.686292][T24459] ? pm_runtime_barrier+0x14b/0x1c0 [ 1179.691545][T24459] __driver_probe_device+0x1f5/0x390 [ 1179.696882][T24459] driver_probe_device+0x4f/0x420 [ 1179.701955][T24459] __driver_attach+0x444/0x6d0 [ 1179.706780][T24459] bus_for_each_dev+0x235/0x2b0 [ 1179.711680][T24459] ? driver_attach+0x50/0x50 [ 1179.716312][T24459] ? bus_remove_file+0x140/0x140 [ 1179.721305][T24459] ? do_raw_spin_unlock+0x121/0x230 [ 1179.726550][T24459] bus_add_driver+0x340/0x630 [ 1179.731283][T24459] driver_register+0x23a/0x310 [ 1179.736086][T24459] usb_gadget_register_driver_owner+0xf9/0x270 [ 1179.742289][T24459] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 1179.747964][T24459] configfs_write_iter+0x312/0x400 [ 1179.753118][T24459] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 1179.758712][T24459] vfs_write+0x474/0x9a0 [ 1179.763006][T24459] ? file_end_write+0x250/0x250 [ 1179.767910][T24459] ? __fget_files+0x3fc/0x460 [ 1179.772637][T24459] ? __fdget_pos+0x2a3/0x330 [ 1179.777280][T24459] ? ksys_write+0x74/0x260 [ 1179.781780][T24459] ksys_write+0x151/0x260 [ 1179.786157][T24459] ? __ia32_sys_read+0x90/0x90 [ 1179.790974][T24459] ? lockdep_hardirqs_on+0x98/0x150 [ 1179.796545][T24459] do_syscall_64+0x55/0xb0 [ 1179.801005][T24459] ? clear_bhb_loop+0x40/0x90 [ 1179.805716][T24459] ? clear_bhb_loop+0x40/0x90 [ 1179.810442][T24459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.816397][T24459] RIP: 0033:0x7f3e6c99e0d9 [ 1179.820852][T24459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.840626][T24459] RSP: 002b:00007f3e6abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1179.849083][T24459] RAX: ffffffffffffffda RBX: 00007f3e6cc25fa0 RCX: 00007f3e6c99e0d9 [ 1179.857105][T24459] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000003 [ 1179.865121][T24459] RBP: 00007f3e6ca35024 R08: 0000000000000000 R09: 0000000000000000 [ 1179.873125][T24459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.881130][T24459] R13: 00007f3e6cc26038 R14: 00007f3e6cc25fa0 R15: 00007ffc8eff9948 [ 1179.889173][T24459] [ 1179.892551][T24459] Modules linked in: [ 1179.943440][T24459] ---[ end trace 0000000000000000 ]--- [ 1179.949032][T24459] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1179.955311][T24459] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f b5 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 26 b5 23 fb 41 be 78 12 00 00 4d [ 1180.236653][T24460] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1180.243619][T24460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1180.360325][T24460] EXT4-fs (loop5): 1 truncate cleaned up [ 1180.369933][T24460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.401796][T24459] RSP: 0018:ffffc9000e64f7e0 EFLAGS: 00010246 [ 1180.447043][T24459] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1180.499099][T24459] RDX: ffff88805ef59e00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1180.644032][T24459] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1180.652273][T24459] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1180.660575][T24459] R13: ffff88802bede530 R14: ffff888147ed5280 R15: 0000000000000000 [ 1180.668740][T24459] FS: 00007f3e6abf66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1180.677848][T24459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1180.684584][T24459] CR2: 00007fc59ee27dac CR3: 000000004ea54000 CR4: 00000000003506e0 [ 1180.693141][T24459] Kernel panic - not syncing: Fatal exception [ 1180.699820][T24459] Kernel Offset: disabled [ 1180.704155][T24459] Rebooting in 86400 seconds..