last executing test programs: 2m17.183349068s ago: executing program 2 (id=766): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xfc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0xa, 0x7, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfa", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8) 2m15.176899898s ago: executing program 2 (id=767): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) readv(r0, &(0x7f00000016c0)=[{0x0}], 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x54}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_setaffinity(r3, 0xffffffffffffff70, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r7, 0x540b, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2, 0x10008804, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2bb, 0x1, 0x0, 0x30f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe836, 0x1042, 0x1, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0f3, 0x40000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x46, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0x3) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 2m12.69063492s ago: executing program 2 (id=780): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004900010028bd7000ffdbdf250a800000", @ANYRES32=r0, @ANYBLOB="080000000800020005000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(r4, 0x7fff) timer_create(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 2m10.145975445s ago: executing program 2 (id=771): socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x69fb, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r6, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(r6, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) syz_fuse_handle_req(r6, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r7, 0x40086602, &(0x7f0000002740)={0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000100)={0x0, 0x0, r10}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 2m5.203015259s ago: executing program 2 (id=781): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r6, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r9, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r8, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r4, 0x4, 0x2000) shutdown(r4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000", @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2m2.739105821s ago: executing program 2 (id=784): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00004000000000000000"], 0x0, 0x42}, 0x28) r3 = socket$inet6(0xa, 0x80003, 0x6) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e0001012cbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="100000001404"], 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x400, 0x72e, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x3, 0x7}}, 0xe8) mknodat$loop(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6000, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) 1m47.205039932s ago: executing program 32 (id=784): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00004000000000000000"], 0x0, 0x42}, 0x28) r3 = socket$inet6(0xa, 0x80003, 0x6) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e0001012cbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="100000001404"], 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x400, 0x72e, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x3, 0x7}}, 0xe8) mknodat$loop(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6000, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) 58.267702723s ago: executing program 0 (id=852): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r3, 0x0, 0x42) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x884) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 55.921892102s ago: executing program 0 (id=855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x3}}}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x15) write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f75080039000500", 0x27) 52.41446241s ago: executing program 0 (id=865): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900180000000035090100000000009500000000000000b70200f509020001000000dbaaf8fff1000000bf8200000000000007080000f8ffffdfbfa4e1000000000007090000f0ffffffc70200001226080000001822", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x1, 0x1, {0x1000, 0x8, 0x3, 0x7, 0x7}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40081d4}, 0x8840) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 50.426845771s ago: executing program 0 (id=861): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r7) sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf2505000000080001007e"], 0x1c}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r5, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r10, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) r11 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r12 = fcntl$dupfd(r11, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r12}) 48.596093257s ago: executing program 0 (id=863): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000400), 0x4) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x6, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x0, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0x7, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x220100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10004, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x71, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000002200)={0x14}, 0x14) 44.395851152s ago: executing program 0 (id=869): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="12000000", 0x4, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={0x0, 0x0, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 28.959015761s ago: executing program 33 (id=869): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="12000000", 0x4, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={0x0, 0x0, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21.029689701s ago: executing program 3 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) sched_setparam(r0, &(0x7f0000000000)=0x401) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=@newae={0x164, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in6=@loopback, 0x4d2, 0xa, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-384-generic\x00'}, 0x0, 0x180}}, @tfcpad={0x8, 0x16, 0x8}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@empty, 0x4e24, 0x6, 0x4e22, 0x7, 0x2, 0x80, 0x80, 0x32}, {0x9, 0x9, 0x8, 0x3, 0x3c, 0x6, 0x8e, 0x2}, {0x1, 0xe3d2, 0x8, 0xfff}, 0x961, 0x0, 0x1, 0x0, 0x2, 0x2}}, @lifetime_val={0x24, 0x9, {0x1, 0x9, 0x9, 0x5a2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ftruncate(r4, 0x2007ffc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_clone(0x91902000, &(0x7f0000000300)="2a3ea9481b6c115f4a66e5969cd1cf956faf99ab7f966e079c83b28c2f08925572172bdac88510de2b4ad2db5fced5408af82269045d43e43ef3e51f100b797ed7f96e69ffc9e994586f1797b751443af718a6fcf7dc0965967650286a33ddcd42390405", 0x64, &(0x7f0000000380), &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r6, 0x0) 19.87643404s ago: executing program 3 (id=893): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x400, &(0x7f0000000180)={@align=0x8000, {0x10, 0x5, 0x80, 0xd57}}, 0x8000, &(0x7f00000001c0), 0x0}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[]) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0xbb1, 0x4, 0x3, 0xa9}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2d, 0x8, 0x0, 0x178}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82cd, 0x20, 0x1, 0x24c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd81e, 0x80, 0x1, 0x393}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb84f, 0x20, 0x2, 0x39}}], 0x4, &(0x7f0000001c40)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0x6ee, 0x0, &(0x7f0000000c40)=@buf_max_buf="0fcbd4691e382a6f4e26b2b1f65abb204fc599e99a964c003fee0a51219a777cdf1afe16d8ddee3a863232ce9a71950385faa41332e7500ebe504e0e5d9e30550bd8d4138ad7a9b786fa229e1e6f4eab125deb3a8221b8aa265413fce9bd8a2a3df5b320644c1195bdcea5ab6e301296cc48844b2e5d087b29be48db48884eefce2b8290e8b32080d1213c0107650a7712f431d5713fa81be051903b56725809e339a1fb61e3f473478b10ad62b0c86fbd9018f14dbaa72ee084a9af64b3586802348e6f6508b5721dfb6b51081925ae1221ca055a8ce5d7abd410201baf9498dfe60ff3829b36a509424677f0540fa658e90909d7f1e49bce44638e84d42cea1bd9065b6135af952bd25ec04e74c0cbcc428da14cfdda4692a895d03a2f54baaf3aa9dd7259253a80a7af6bbbaa3547b806c5dc3fd9161f6309ebf97ec432a8bd3bfd2172397ada0cf401e1cb195d36d1f8841a197065a65b18f4995074de91f7e17b149dda4e0929b9180a5264d48827c821c9980aab24e53c2d7e05a1c3fc9efdc130108ab6c2834e614e48edc742b8924171820dd20b6e16c6bdc255634da771663a516817baf6dff42c7c47ee0b85648146c95f2d5ba2383f66b2a1509879626b6375bdeb2b48712416b4bfc62af169f521b3208a5800bf38c898b5687fc3abc1100b42b3e2ec46854975c332d905dd858fbb2a477beab609baaf1eacff1b1d8db130d773b53b52a891ca15b3e95a07b957fc162d7ede8ddd87a2c67af7ed2bb255211822759bbd2630e706accf2be87e83fe2bac64bb90d31d0bf4af9b71ce400d8560e8b09820e994c8c573496a4e9d8ad4f0ab1cb67796b5cc99e66d01a561a35243dfb3cd0ecaebf40c952e5791cb15abe9da8ef8330b39a5c9e1b4a325dff9a686453257170ac8ef9aa449f74211f31860987513d15cbeed7943d21a8da5cc492bc4590691b4e42d110075aa92ace85c09133e0e09dbddea06722b003984e592daf5eb2a47e3ae97c4381ce1feae99c17d3814ea904c6c9f03af955574f9ddd4d4a05c7a3dc03f2ea32c7b74f4803350b45d94337c81dcbbcdcd1612a7d8e772af9d8e06fb636c6b788d698f340fdb6bd7065439e4020c45237db61de8771e60b1884a7a4adee5a0c7758c19b7310ce106efcd4aacdd42e07c9f8cb63adb011e34d1b5a70207c4721a9a07847bd818ff6afbb7f4fbae6e68f5b08e2371a9fec08486d6ee1538e4298d65b3af8f46ada02d8a725b62df041a48c64469016e3d6fd0235b36a79ec6e3da1199bb69021ed3bda6a93c4211898c22436284f564842c923ba56a15b327d84aaf14ca9fa7bf3caed12071fb2b05590ca2f85726a74ac3aa133cf726142e42be8f99f322021cf03effda2758c5e94f5ac1d61aa22ebe247840bc634bde955a6746672797e67beba7df0f7240fb839591f0d3ecdb2fd29c676e537327a9fd24a9d8537a93eda146a00a3fc74561150dbb1106ccfa98849857034ec55dfbb7cb0c4d6f1f120a2b3feb09890ab213779b09463838dbc73d4f95e8db13cff553051255a5693bc9962b66b0bc6bb0bcb7e21e1ab625122d08f0731f370a9d8c79831cde0a96dcc8a614ed026463cc9ddaaba48452df62e468c6c3a3252f8193c70bc618f12ce7856c681b35dfeb0ac5aaba93758368fc76887fbb6d3ec926d7d94e006baeb022803874d7aff21c00ca80c1beb8b1ba2c42fa031c619f2e3ce61f11ee3afa89223b52339d380c700360b9f7237232bfd31ba9a3357057f23220b583f4a3b9192b96461ebded538ebf0acb0f9d3961f4cc632fa7af00e6a02725299496079b6699c48bdbafa57d5d4f04930396d4d98cfe79807c3c8b3586aaf3f9da46d8f2057a945902d06ceddf12ca9bba7ba1a3e319efdeffdf4784c6caf2411ac884bb2db90e17f2ac291b5895acb020d328684c41233c45c8f4b6b7cf1d282f6f88a9ea34ed99dff6c7581b0caad19c00d2fbf30dfb28579d387daf41b23da220309d0a106fc66eb691edd20dc37443aa52ce2c07e8a4a139d1dce1f3ce37c5549bfaff401476f37a73623a77943fcffe8e8e1f5a2040bcfaae9e0854e5f30d2672684100dae3288d8ebc020d400068d833a3fbf85fab2357f86fb30ec9449309bc2e9bc1f2ef6649deac9903bbacd7c75728ae7dafc3d95a62576842e7e216beb104009c8ba0dd79d072e2cb2c7f35368f5ec10ee38735efec9da4727d4751922fc8fb8f1b69be7c17b38d4c9443539c1cf3953338b9d1428ccf39bda8240201e2c83bca95da86dfeebac5c24e88d30a9b71965c8bab7f60009c430192d05af926a3fb3ae369dc5008bbfc19e42be3407654a482b985f1e3458db617c376ddea70f20dfd393a1460274230c2b84d47e9596878d14ebe5b5692a4bdc760c9869950bc0af69e130a51f53c8d9eaab156df0ac00c2d4804e912b17dffc6f1175bad09256be800352ebf5f116aa52f9098927951ca2569a0a6cbb3be3e96d44cc780ca5f8a8065c8c65836e47979b983d7098c242a124971abd487a7d271dd0aac4275074a2eb6249b884c7e5832c2a9a1cf706b3043978fbc3f18feaec8eb3d6e6f311881fd6117246efb5ca0052b756ac4c5ef9c1738be9e2fd30ae6ad011837f755351e2c7a5776bf951b8f4389b7c13c62d7949ffa3c8a86c58fe2eaebe21fdba6020a5ae7675b24de5eeb489496662fd3b3a175ba60a668858f66ef12bf71bc337cce39dcbb565dd0249f80b27ef17f8e540bfddc38195be4ed0d2304d215cba4862187e9406b8472ea3a6978819daf019cfd2d32e3dcfe08ad0cabc6da20de89f5f5fac628fbb06bcd8aa9988e182ea9fd33661158d3673d0e531ce3d1b1c830836239ecd75638b885cc020a18f71a4ff66772240602973518d747b17ed873038c643e883cec1e36c11f66b0ac093bd195626a6f731e492654d33d26d0d01337b16c0a26bf1c4bfc1b0cefc95316a1122c11e0a8846f1dddaf6b694abf7e26f261b08e069e077ddc6d0ea15ad9df8e1f04b3ceef54b1d816fe5d7626a07673406273203fd8b65af9a75b0e6a2019ae3a6710eee11d5647c283d0698fe62996f8ce42bcde79ddbd1c13dbfa33655b8eafc9af07f2adfde32c09e248a4b57fd347c91ea0d762170816a9b05bacd8ddb13c3ae3ad3369a16b21b5eccc39d37bc352fdd6e1970f34e5ba04c6f1d6aa1b97322d78af80b70b413d22e44e1f76798820b7fa6ca025b8faaa6dd00b692aba0a31a955b0f8482de9dc754d2dcc91b147d65aed05862e58f8d4c3b782f8075de33310b9ac43714f9d9c3588107e0c5a12613c7d63a09e327e5a91fa02cebf63496402d7d5abcd8ad0093ab1e03c91d4e0019dad76a96fdda601572824ed21c90b4a1c73faffb1728f24afdeebab071c5596693369f38addfe576f311f20c76fe7df71a60aaffc17cf59a870464cd88f4ac7bb657105058c52a36288fcdef9abef8594e67a7a7da8b1c702c0dd126a5db1c3cef52a5e696c93febc4d6cff66f1e2abdc6919dd62e9dd98f8949b3ecbb383b34694ca148e8d80ca0dfe8163a0024e76f47291423e78ba7420f4d8b048664e130167546ad615dc65dda297cc10f508dc2cb4d7a4ba819de8b890d4de7ff55e9053313ff163cda0d317dec5af6941b3e3d4881fe9632d61a5e06e7d5d19e5e6d9290b80d43e22bb6b26df219f963a030f94a28ebb7305708caeadded47f8794cdc73bc3ad02054256d53dbcf933ab24d66810d17dab0713bed99ed9a3c695cc97ae5bfb37ebd0a95143168f98b543edeaf9d4a3dc12d303532bad58f0f0dba7984c7bcdcacc4713ea6597399a6279a277d89b0df675236a010fccd2bb5c1f9e503622ec1982fa841ed6a41bb7f2f97cb6769de47e104183915b32730c75d932441efda8f193bde284f307febb577aedebc43576e86bd550039a768d688d37fa1db9b1500a1ffc94cd501b273e0cd61617c3085a0168b942e64825474c4ce43cd2fbcd8c3abcc3974798143cadbc303199730164a892ceee56c0e418992a2d94b0bab6202f1e48e7656cd2442878b1181451d88b38df7f5fdd4f75ff97191e5bba0a0043b4746eafdd5dba16088e89b93d2277330cdbebe2b8a303094dab7a827ec46e9700d6a4dcd6765c97e100aac9dd515b9e6d87896cdfd954949bf2c7a42a685d75410f902e944d2e7b17543940a97022279a549c514e9b46d3cb6f437b40244f457dd31b24c12a33baf484686abbc430219d8c111e34fdc15023d3478fe6e9e0906e5b0e98f2c37b533b7c5cb9a3eb29ada40863168bf53a54d74ba241a850353b7c75bd79b38b975487137cbd8e03332cceb2d0c3978e2e2e929bbd99e50dee67c36efbb8fe33b525ad3e2e90193b14aaee24995b90dc3352086040e4782e3e15f2361299fc544147b99b79a488224bf85ea7d8bc085a44828d8fc6c5197ba543624dbce53d80e742108c21fb876fe2a5fd351256676e319896feed1a0d6f626997d97bbff99769b2738e5e5e5607e358fa2d3749bc44f3b9b0c6e783f2e8d12fdd8f42f493befaf42ad6f6d738ccf619e8467f1cdc422b02fa9fe80607e534cf2aa096f3268b573f0776931ae350f5ccf184e6dafe5f04d7818951001916bf680d6e3563624a8c590566c13289ba8cbca2425f61c49f1b6c431623f5051fb8f379ec1c4d7b222fd5b651ee191a445e2cb09fdfbf88805e52b1a7b2cdf4b0ef4caec837ef9a3baae5208b18731082f16c7704f18c1331a6c19a877073af16e3063eab071d4f98dbefa9824e2ba8ada42781c886163473e2aad5f195965d3a7356175a3ca60d2481838e63a5de8922d6a7ab1b8fa22e63c7348ef5c9f3f754fb1c61c1cd5aee7babdf55c630878d0ed30afb65c8d17fdeb002dca0230e180c27137642149db68f891c3162dffcd5cb74090f5cef204408bd920d4931b0e23910aa8e57f55d7996593491845826297f1940aa15834f962a95a5ea81f812de52e7f6a29560bd505af7e5d82c522f5175b52def96da143cb7de284ccd0aeb9ae62fcdcb3371f4aff21b32c07c56cd6627465348163d6ae8c1f6fa44f9cc2e3d698adb00cbc3a0eabc3a52d71a116d9125d28dd9c0e76bec5b8bcdb8681bfe5cf01360c8869de4508e84e13ef740145ed8c3880ea1c292138aecb23a4cc4f77cdee8209c3f4139a2cbc869be51af249a90664108e81ed3353b52141f4bfd8aeb77899915a6d48ed5e3887572bd85e22e0cfeea41fa1d5d3622cdb43f95aba8b5cc24c6400effc426c125699e5644ac30640486ba4fff1df7fa1116abf827f8787a0fd657cb422da12b4acd1e2e45b820c4de0ee0a0ad5dcbab2fef327f9e66958ce8b01926d57de600dc083449df4f19c1aae223dadf1d014413a7acbfb0451823a492bc328b6ed337ab09ff42a443b890ff18134b4f4e36daf416d1a9835eb29af671f3df0964f64001fd70d814b07e33367b5fe7a5c200ef93bcdc291a2b84518ddffb0e234ab579b591337a9aa4b8e9adb5a328e761846bfbc7f862ec463316cc3d752aef3db5425fa3032865df3cdb0a98bf7bffc9b9001d7911701ea3d58add150a40d7b80fdf20739f37bf0e0ddce4019d0733e7bf7ca522fde33034f911123d9648186cf5121177368ec153565af3a58ec7243337086bfa5b33eca1e6a4ba1ce1f7f50c41797e9f7a51d6b01b4e22baf2e76e7090685fd9c3e8213d0c1be140cfadfb9cd8778a85b662062c746996e416e1f8545b9602b8a85757f75c41d52025387795ac8b60440a8bbc85118c"}}, &(0x7f0000001cc0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000900)={&(0x7f00000002c0)=0x79, 0x2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], &(0x7f00000008c0)}) 15.807720072s ago: executing program 3 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='proc\x00', 0x1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r4}, &(0x7f0000001780)=0x4, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) 14.811391177s ago: executing program 4 (id=896): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r8 = dup2(r5, r0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x4c}, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 12.552315004s ago: executing program 4 (id=898): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000002540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000680)=@filename='./file0\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0x4008700c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040054) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x401c8d1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x8a}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000c40)={0x1, 0x0, [{0x8f}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$watch_queue(&(0x7f0000000140), 0x80) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) sendmmsg(r4, &(0x7f0000003740)=[{{&(0x7f0000000000)=@generic={0xf, "77a7f0b96ce573cec7dec6164fd645ca3fe9ac4eae9b5fab1e1401050102dd36914c54fbb4e8b53384415932a8f5fc2e80729baf8ac2fe77feabd073acc8036cc9e530bc4d45564aabe4843d830fd66c3207b90526ab791bc480f092e6a25157efd1782b582cf4cef7f72cde328938fa32ecabadded54433c6b1f13b4f1e"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="5c97994dc3ce805c6684b14ea8f86d14f95ba8b301a63e8510c30797c328f9eaffd37967035f262a6e4811e53db9adf911738e689638c1dc02d254a549faaaa017f494e24bc066a0d5a5d9b35de37872e9d6fa00cc88cb7311b7", 0x5a}], 0x1}}], 0x1, 0x20000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 11.476540771s ago: executing program 4 (id=900): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x7, 0x0, [{0x481, 0x0, 0x3}, {0xaf1, 0x0, 0x9}, {0xbf2, 0x0, 0x6}, {0xb21, 0x0, 0xcdd}, {0xc0010140, 0x0, 0x8}, {0xb25, 0x0, 0x7fff}, {0x25b, 0x0, 0x5}]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, r5, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001170000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x44, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42890}, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.502788746s ago: executing program 3 (id=903): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r10 = io_uring_setup(0x6ed6, &(0x7f0000000240)={0x0, 0xbf54, 0x40000, 0x0, 0x270}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, r10, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 8.238819602s ago: executing program 4 (id=904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x3}}}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x15) write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f75080039000500", 0x27) 7.497293231s ago: executing program 4 (id=905): syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x3, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "7332e94143f7f31441bdcd491414ae38d7cd90b3d173b19dcef4263363fc4aa146b6580bd8"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x20}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000000)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='0\x00', 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x28d00, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, &(0x7f00000001c0)={0x5, 0x3}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000000600)={&(0x7f0000000100)={0x14, r7, 0x30b, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20020810) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) 5.243757858s ago: executing program 1 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:06.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/vp-vdpa/bind/file0\x00', 0xc2800, 0x181) write(r1, &(0x7f00000001c0)='vp-v', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:07.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:07.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='vp-vdpa\x00', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:08.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000140), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:08.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='vp-vdpa\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='0000:00', 0x7) nanosleep(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af71, &(0x7f0000000500)={0x0, r9}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r9, 0x0, 0x0, 0xffffffff}) 4.452995908s ago: executing program 3 (id=908): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900180000000035090100000000009500000000000000b70200f509020001000000dbaaf8fff1000000bf8200000000000007080000f8ffffdfbfa4e1000000000007090000f0ffffffc70200001226080000001822", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x1, 0x1, {0x1000, 0x8, 0x3, 0x7, 0x7}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40081d4}, 0x8840) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.342850531s ago: executing program 1 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=@newae={0x164, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in6=@loopback, 0x4d2, 0xa, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-384-generic\x00'}, 0x0, 0x180}}, @tfcpad={0x8, 0x16, 0x8}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@empty, 0x4e24, 0x6, 0x4e22, 0x7, 0x2, 0x80, 0x80, 0x32}, {0x9, 0x9, 0x8, 0x3, 0x3c, 0x6, 0x8e, 0x2}, {0x1, 0xe3d2, 0x8, 0xfff}, 0x961, 0x0, 0x1, 0x0, 0x2, 0x2}}, @lifetime_val={0x24, 0x9, {0x1, 0x9, 0x9, 0x5a2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ftruncate(r4, 0x2007ffc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_clone(0x91902000, &(0x7f0000000300)="2a3ea9481b6c115f4a66e5969cd1cf956faf99ab7f966e079c83b28c2f08925572172bdac88510de2b4ad2db5fced5408af82269045d43e43ef3e51f100b797ed7f96e69ffc9e994586f1797b751443af718a6fcf7dc0965967650286a33ddcd42390405", 0x64, &(0x7f0000000380), &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r6, 0x0) 2.744205021s ago: executing program 1 (id=910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x22004000}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 2.224496644s ago: executing program 1 (id=911): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r10 = io_uring_setup(0x6ed6, &(0x7f0000000240)={0x0, 0xbf54, 0x40000, 0x0, 0x270}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x18, 0x0, r10, 0x0, 0x1, 0x8, 0x2, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) 1.253680328s ago: executing program 1 (id=912): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x3}}}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x15) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f75080039000500", 0x27) 121.939987ms ago: executing program 3 (id=913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x3}}}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x15) write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f75080039000500", 0x27) 73.254268ms ago: executing program 1 (id=914): socketpair(0x3, 0xa, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) r3 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r5, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r9}) keyctl$KEYCTL_MOVE(0x1e, r9, 0xffffffffffffffff, r10, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x4, 0x401}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r11, &(0x7f0000000000), 0xd) 0s ago: executing program 4 (id=915): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x21a6022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x7) fanotify_init(0x200, 0x800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000100)={0xa8, 0x5, 0x6, 0x0, 0x9, 0x76b3, 0x8, 0x2}, &(0x7f0000000140)={0x4, 0x9, 0x3, 0x22a5, 0x8000, 0x2, 0xe}, &(0x7f0000000180)={0xa2ba, 0x1, 0x81, 0x37, 0x8, 0x6, 0x1, 0x7ff}, &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000240)={[0x8]}, 0x8}) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) kernel console output (not intermixed with test programs): 3e syscall=202 compat=0 ip=0x7f242bb9e019 code=0x7ffc0000 [ 406.319427][ T28] audit: type=1326 audit(1785519392.467:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.0.322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242bb9e019 code=0x7ffc0000 [ 407.593650][ T7495] netlink: 23 bytes leftover after parsing attributes in process `syz.2.321'. [ 408.327495][ T7502] loop1: detected capacity change from 0 to 4096 [ 408.383698][ T7502] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 412.013488][ T7520] netlink: 300 bytes leftover after parsing attributes in process `syz.0.327'. [ 417.385041][ T7539] loop1: detected capacity change from 0 to 2048 [ 417.500675][ T7539] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 417.537528][ T7529] netlink: 23 bytes leftover after parsing attributes in process `syz.0.329'. [ 420.290747][ T7477] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 421.608196][ T7560] binder: 7553:7560 ioctl 40046205 0 returned -22 [ 422.201438][ T7561] net_ratelimit: 10 callbacks suppressed [ 422.201506][ T7561] sctp: failed to load transform for md5: -2 [ 424.058021][ T7570] netlink: 23 bytes leftover after parsing attributes in process `syz.0.335'. [ 424.961536][ T7599] netlink: 300 bytes leftover after parsing attributes in process `syz.3.338'. [ 427.630120][ T7605] netlink: 23 bytes leftover after parsing attributes in process `syz.0.348'. [ 430.797611][ T5843] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 431.049676][ T5843] usb 2-1: device descriptor read/64, error -71 [ 431.333518][ T7632] lo speed is unknown, defaulting to 1000 [ 431.341139][ T7632] lo speed is unknown, defaulting to 1000 [ 431.351222][ T7632] lo speed is unknown, defaulting to 1000 [ 431.464579][ T7632] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.623993][ T7632] lo speed is unknown, defaulting to 1000 [ 431.635250][ T7632] lo speed is unknown, defaulting to 1000 [ 431.647960][ T7632] lo speed is unknown, defaulting to 1000 [ 431.659666][ T7632] lo speed is unknown, defaulting to 1000 [ 435.487953][ T7657] 0x000000000007-0x000000020000 : "" [ 435.510849][ T7657] ftl_cs: FTL header corrupt! [ 436.507449][ T7652] netlink: 23 bytes leftover after parsing attributes in process `syz.3.341'. [ 436.780104][ T7663] loop2: detected capacity change from 0 to 1024 [ 436.813250][ T7663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.985387][ T7668] pim6reg: entered allmulticast mode [ 437.247570][ T7672] pim6reg: left allmulticast mode [ 438.767078][ T7670] netlink: 23 bytes leftover after parsing attributes in process `syz.3.352'. [ 438.952470][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.281871][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290733][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.354484][ T7703] loop0: detected capacity change from 0 to 256 [ 442.961514][ T7702] futex_wake_op: syz.0.355 tries to shift op by 144; fix this program [ 444.764138][ T7703] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 444.801464][ T28] audit: type=1800 audit(1785519431.927:159): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.355" name="file1" dev="loop0" ino=1048608 res=0 errno=0 [ 446.064263][ T7721] futex_wake_op: syz.0.368 tries to shift op by 144; fix this program [ 446.416746][ T7721] loop0: detected capacity change from 0 to 256 [ 446.487014][ T7721] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 446.795780][ T28] audit: type=1800 audit(1785519433.867:160): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.368" name="file1" dev="loop0" ino=1048609 res=0 errno=0 [ 446.895176][ T7714] netlink: 23 bytes leftover after parsing attributes in process `syz.3.361'. [ 447.354302][ T7730] 0x000000000007-0x000000020000 : "" [ 447.376963][ T7730] ftl_cs: FTL header corrupt! [ 448.774456][ T7733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 448.790931][ T7733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 448.812187][ T7728] netlink: 23 bytes leftover after parsing attributes in process `syz.1.372'. [ 448.825854][ T7733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.105941][ T7733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.166038][ T7748] tipc: Started in network mode [ 450.171189][ T7748] tipc: Node identity 4, cluster identity 4711 [ 450.177572][ T7748] tipc: Node number set to 4 [ 450.867423][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 450.873587][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 450.880136][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 450.912910][ T7749] netlink: 23 bytes leftover after parsing attributes in process `syz.0.367'. [ 450.968210][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 451.157467][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 453.691990][ T7763] loop3: detected capacity change from 0 to 128 [ 455.163928][ T7763] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.343145][ T7763] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 455.875589][ T7772] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 456.961941][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.406502][ T7779] ptrace attach of ""[7780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7779] [ 459.831133][ T7793] futex_wake_op: syz.1.373 tries to shift op by 144; fix this program [ 459.900676][ T7793] loop1: detected capacity change from 0 to 256 [ 461.747469][ T7793] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 461.804221][ T28] audit: type=1800 audit(1785519448.922:161): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.373" name="file1" dev="loop1" ino=1048610 res=0 errno=0 [ 465.419947][ T5843] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 465.686538][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.970080][ T5843] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 466.138100][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.167432][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.175657][ T5843] usb 3-1: Product: syz [ 466.247349][ T5843] usb 3-1: Manufacturer: syz [ 466.267345][ T5843] usb 3-1: SerialNumber: syz [ 466.289793][ T5843] cdc_mbim 3-1:1.0: skipping garbage [ 466.786351][ T7808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.564804][ T5843] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 467.573175][ T5843] cdc_mbim 3-1:1.0: bind() failure [ 467.598101][ T5843] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 467.620081][ T5843] cdc_ncm 3-1:1.1: bind() failure [ 467.796388][ T7822] loop0: detected capacity change from 0 to 4096 [ 468.494434][ T7817] libceph: resolve '400' (ret=-3): failed [ 468.529138][ T5843] usb 3-1: USB disconnect, device number 7 [ 470.172174][ T7837] netlink: 23 bytes leftover after parsing attributes in process `syz.1.389'. [ 471.027236][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 479.057361][ T5779] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 479.271932][ T5779] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 479.291396][ T5779] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 479.321799][ T5779] usb 3-1: Product: syz [ 479.326038][ T5779] usb 3-1: Manufacturer: syz [ 479.364849][ T5779] usb 3-1: config 0 descriptor?? [ 479.587545][ T5779] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 479.620405][ T5779] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 480.342308][ T5779] usb 3-1: USB disconnect, device number 8 [ 480.360894][ T5779] ftdi_sio 3-1:0.0: device disconnected [ 480.733671][ T7873] misc userio: Invalid payload size [ 481.825070][ T7881] netlink: 23 bytes leftover after parsing attributes in process `syz.1.398'. [ 482.037702][ T5779] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 482.887731][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.918807][ T5779] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 482.938600][ T5779] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.957384][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.966389][ T5779] usb 4-1: Product: syz [ 482.971350][ T5779] usb 4-1: Manufacturer: syz [ 482.976136][ T5779] usb 4-1: SerialNumber: syz [ 482.986994][ T5779] cdc_mbim 4-1:1.0: skipping garbage [ 483.208833][ T7880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.773245][ T5779] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 484.785963][ T5779] cdc_mbim 4-1:1.0: bind() failure [ 484.821490][ T5779] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 484.837378][ T5779] cdc_ncm 4-1:1.1: bind() failure [ 485.378569][ T7908] ptrace attach of ""[7909] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7908] [ 486.343147][ T7911] loop1: detected capacity change from 0 to 64 [ 487.838011][ T8] usb 4-1: USB disconnect, device number 4 [ 488.058641][ T5779] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 488.265081][ T7915] siw: device registration error -23 [ 488.317063][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 488.377909][ T5779] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 491.156804][ T5779] usb 2-1: string descriptor 0 read error: -71 [ 491.219254][ T5779] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 491.268312][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.317029][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 491.327389][ T5779] usb 2-1: config 0 descriptor?? [ 491.356934][ T5779] usb 2-1: can't set config #0, error -71 [ 491.409113][ T5779] usb 2-1: USB disconnect, device number 7 [ 491.573459][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 491.768144][ T8] usb 4-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 492.001872][ T8] usb 4-1: Product: syz [ 492.227848][ T8] usb 4-1: Manufacturer: syz [ 492.278521][ T8] usb 4-1: config 0 descriptor?? [ 492.303457][ T8] usb 4-1: can't set config #0, error -71 [ 492.341146][ T8] usb 4-1: USB disconnect, device number 5 [ 492.482622][ T7927] netlink: 23 bytes leftover after parsing attributes in process `syz.1.409'. [ 493.739100][ T7939] loop0: detected capacity change from 0 to 4096 [ 493.771401][ T7939] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 494.584286][ T7944] loop2: detected capacity change from 0 to 128 [ 495.174557][ T7944] FAT-fs (loop2): Directory bread(block 414) failed [ 495.181371][ T7944] FAT-fs (loop2): Directory bread(block 415) failed [ 495.188152][ T7944] FAT-fs (loop2): Directory bread(block 416) failed [ 495.194872][ T7944] FAT-fs (loop2): Directory bread(block 417) failed [ 495.201680][ T7944] FAT-fs (loop2): Directory bread(block 418) failed [ 495.208438][ T7944] FAT-fs (loop2): Directory bread(block 419) failed [ 495.215123][ T7944] FAT-fs (loop2): Directory bread(block 420) failed [ 495.221852][ T7944] FAT-fs (loop2): Directory bread(block 421) failed [ 495.937343][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 496.659482][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.527394][ T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 497.576544][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.617342][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.627809][ T8] usb 2-1: Product: syz [ 497.632040][ T8] usb 2-1: Manufacturer: syz [ 497.636677][ T8] usb 2-1: SerialNumber: syz [ 497.712240][ T8] cdc_mbim 2-1:1.0: skipping garbage [ 497.902459][ T7947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.797071][ T7965] siw: device registration error -23 [ 498.979274][ T8] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 499.037058][ T8] cdc_mbim 2-1:1.0: bind() failure [ 499.157652][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 499.183280][ T8] cdc_ncm 2-1:1.1: bind() failure [ 499.285659][ T7964] libceph: resolve '400' (ret=-3): failed [ 499.353527][ T7975] capability: warning: `syz.0.419' uses 32-bit capabilities (legacy support in use) [ 500.503407][ T5843] usb 2-1: USB disconnect, device number 8 [ 501.520096][ T7978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.558317][ T7978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.622444][ T7978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.676185][ T7978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.737949][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.744377][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.447488][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 503.252839][ T7991] netlink: 23 bytes leftover after parsing attributes in process `syz.1.421'. [ 503.417710][ T7997] loop2: detected capacity change from 0 to 128 [ 503.473715][ T7997] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.506542][ T7997] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 503.639711][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 503.645961][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 503.727423][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 503.939785][ T8008] syz.3.426 (8008): drop_caches: 0 [ 503.965149][ T8008] loop3: detected capacity change from 0 to 128 [ 503.982251][ T8008] FAT-fs (loop3): Unrecognized mount option "/proc/sys/vm/drop_caches" or missing value [ 504.817353][ T7948] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 507.052441][ T8023] misc userio: Invalid payload size [ 507.099112][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.218289][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.347733][ T8028] libceph: resolve '400' (ret=-3): failed [ 507.572768][ T8035] bridge1: entered promiscuous mode [ 507.578781][ T8035] bridge1: entered allmulticast mode [ 507.585496][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.600484][ T8035] team0: Port device bridge1 added [ 509.561272][ T8056] 0x000000000002-0x000000000004 : "" [ 509.963478][ T8056] ftl_cs: FTL header corrupt! [ 510.576841][ T8049] netlink: 23 bytes leftover after parsing attributes in process `syz.3.435'. [ 512.281982][ T8065] loop0: detected capacity change from 0 to 16 [ 512.289392][ T8065] erofs: Unknown parameter 'Ð-®æyåÖxtc;K‡Á' [ 515.637867][ T8078] loop1: detected capacity change from 0 to 16 [ 516.600133][ T8078] erofs: (device loop1): mounted with root inode @ nid 36. [ 516.671306][ T8076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.340951][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 517.592662][ T8076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.689425][ T8076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.941963][ T8076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 518.094338][ T8078] netlink: 'syz.1.441': attribute type 11 has an invalid length. [ 518.141457][ T8078] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.441'. [ 518.427355][ T5808] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 518.647597][ T5779] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 518.925876][ T5779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.059388][ T5779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 519.236238][ T5779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 519.301423][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.367415][ T5779] usb 3-1: Product: syz [ 519.371654][ T5779] usb 3-1: Manufacturer: syz [ 519.376287][ T5779] usb 3-1: SerialNumber: syz [ 519.524932][ T5779] cdc_mbim 3-1:1.0: skipping garbage [ 519.637783][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 519.717553][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 519.868559][ T8101] 0x000000000002-0x000000000004 : "" [ 519.877475][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 519.987529][ T8091] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 520.940242][ T5779] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 520.946566][ T5779] cdc_mbim 3-1:1.0: bind() failure [ 520.958037][ T8091] libceph: resolve '400' (ret=-3): failed [ 521.114175][ T8101] ftl_cs: FTL header corrupt! [ 521.550712][ T5779] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 521.592187][ T5779] cdc_ncm 3-1:1.1: bind() failure [ 521.812475][ T8120] capability: warning: `syz.1.451' uses deprecated v2 capabilities in a way that may be insecure [ 523.460224][ T5827] usb 3-1: USB disconnect, device number 9 [ 524.889776][ T8139] loop3: detected capacity change from 0 to 128 [ 525.978828][ T8139] FAT-fs (loop3): Directory bread(block 414) failed [ 525.985554][ T8139] FAT-fs (loop3): Directory bread(block 415) failed [ 525.992301][ T8139] FAT-fs (loop3): Directory bread(block 416) failed [ 525.999024][ T8139] FAT-fs (loop3): Directory bread(block 417) failed [ 526.005734][ T8139] FAT-fs (loop3): Directory bread(block 418) failed [ 526.012461][ T8139] FAT-fs (loop3): Directory bread(block 419) failed [ 526.019344][ T8139] FAT-fs (loop3): Directory bread(block 420) failed [ 526.026072][ T8139] FAT-fs (loop3): Directory bread(block 421) failed [ 526.447763][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 528.725906][ T5808] usb 3-1: device descriptor read/all, error -71 [ 531.148358][ T8175] input: syz0 as /devices/virtual/input/input6 [ 532.003915][ T8176] 0x000000000002-0x000000000004 : "" [ 532.850933][ T8176] ftl_cs: FTL header corrupt! [ 534.180965][ T8189] netlink: 23 bytes leftover after parsing attributes in process `syz.0.467'. [ 534.245725][ T8191] futex_wake_op: syz.2.466 tries to shift op by 144; fix this program [ 534.305240][ T8191] loop2: detected capacity change from 0 to 256 [ 534.979806][ T8191] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 535.005996][ T28] audit: type=1800 audit(1785519522.130:162): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.466" name="file1" dev="loop2" ino=1048611 res=0 errno=0 [ 535.107905][ T8193] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 535.169757][ T8192] IPVS: stopping backup sync thread 8193 ... [ 535.611304][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.652531][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.698649][ T8196] libceph: resolve '400' (ret=-3): failed [ 540.655562][ T8226] loop0: detected capacity change from 0 to 128 [ 541.172814][ T8226] FAT-fs (loop0): Directory bread(block 414) failed [ 541.179683][ T8226] FAT-fs (loop0): Directory bread(block 415) failed [ 541.186340][ T8226] FAT-fs (loop0): Directory bread(block 416) failed [ 541.193136][ T8226] FAT-fs (loop0): Directory bread(block 417) failed [ 541.199828][ T8226] FAT-fs (loop0): Directory bread(block 418) failed [ 541.206456][ T8226] FAT-fs (loop0): Directory bread(block 419) failed [ 541.213653][ T8226] FAT-fs (loop0): Directory bread(block 420) failed [ 541.220354][ T8226] FAT-fs (loop0): Directory bread(block 421) failed [ 541.849625][ T8233] syz_tun: entered allmulticast mode [ 541.995955][ T8239] futex_wake_op: syz.0.483 tries to shift op by 144; fix this program [ 542.063439][ T8239] loop0: detected capacity change from 0 to 256 [ 543.732490][ T8237] netlink: 23 bytes leftover after parsing attributes in process `syz.3.477'. [ 543.754212][ T8240] 0x000000000002-0x000000000004 : "" [ 543.856571][ T8240] ftl_cs: FTL header corrupt! [ 544.417468][ T8239] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 544.469909][ T28] audit: type=1800 audit(1785519531.580:163): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.483" name="file1" dev="loop0" ino=1048612 res=0 errno=0 [ 544.564289][ T8238] syz.0.483: attempt to access beyond end of device [ 544.564289][ T8238] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 544.581589][ T8238] syz.0.483: attempt to access beyond end of device [ 544.581589][ T8238] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 544.596364][ T8238] syz.0.483: attempt to access beyond end of device [ 544.596364][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.609857][ T8238] syz.0.483: attempt to access beyond end of device [ 544.609857][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.623097][ T8238] syz.0.483: attempt to access beyond end of device [ 544.623097][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.636362][ T8238] syz.0.483: attempt to access beyond end of device [ 544.636362][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.649537][ T8238] syz.0.483: attempt to access beyond end of device [ 544.649537][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.662812][ T8238] syz.0.483: attempt to access beyond end of device [ 544.662812][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.676028][ T8238] syz.0.483: attempt to access beyond end of device [ 544.676028][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 544.689361][ T8238] syz.0.483: attempt to access beyond end of device [ 544.689361][ T8238] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 545.632889][ T8255] loop3: detected capacity change from 0 to 64 [ 547.192879][ T8262] NILFS (nullb0): couldn't find nilfs on the device [ 547.323192][ T5808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 547.917462][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 548.115035][ T5808] usb 4-1: device descriptor read/all, error -71 [ 549.257907][ T8269] loop1: detected capacity change from 0 to 16 [ 549.271097][ T8269] erofs: Unknown parameter 'Ð-®æyåÖxtc;K‡Á' [ 549.990946][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.486'. [ 550.617378][ T8285] loop2: detected capacity change from 0 to 8192 [ 552.178558][ T8283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 552.185539][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 552.195311][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 552.201472][ T8287] vhci_hcd: connection closed [ 552.205308][ T11] vhci_hcd: stop threads [ 552.275859][ T11] vhci_hcd: release socket [ 552.339865][ T11] vhci_hcd: disconnect device [ 552.800753][ T8294] loop0: detected capacity change from 0 to 256 [ 554.430290][ T8293] futex_wake_op: syz.0.489 tries to shift op by 144; fix this program [ 554.504009][ T8297] netlink: 23 bytes leftover after parsing attributes in process `syz.3.491'. [ 554.771851][ T8294] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 554.826378][ T8292] bio_check_eod: 72 callbacks suppressed [ 554.826428][ T8292] syz.0.489: attempt to access beyond end of device [ 554.826428][ T8292] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 554.902016][ T28] audit: type=1800 audit(1785519541.930:164): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 556.047417][ T8304] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20000 [ 557.464840][ T8314] loop0: detected capacity change from 0 to 256 [ 558.335674][ T8313] futex_wake_op: syz.0.501 tries to shift op by 144; fix this program [ 558.695131][ T8310] loop1: detected capacity change from 0 to 128 [ 558.842084][ T8310] FAT-fs (loop1): Directory bread(block 414) failed [ 558.848915][ T8310] FAT-fs (loop1): Directory bread(block 415) failed [ 558.855562][ T8310] FAT-fs (loop1): Directory bread(block 416) failed [ 558.862297][ T8310] FAT-fs (loop1): Directory bread(block 417) failed [ 558.868994][ T8310] FAT-fs (loop1): Directory bread(block 418) failed [ 558.875663][ T8310] FAT-fs (loop1): Directory bread(block 419) failed [ 558.882323][ T8310] FAT-fs (loop1): Directory bread(block 420) failed [ 558.888983][ T8310] FAT-fs (loop1): Directory bread(block 421) failed [ 559.510267][ T8314] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 559.854965][ T8322] netlink: 23 bytes leftover after parsing attributes in process `syz.0.495'. [ 560.705653][ T8330] ip6t_srh: unknown srh match flags FF3F [ 560.862887][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 560.872133][ T8328] bridge_slave_1: left allmulticast mode [ 560.878455][ T8328] bridge_slave_1: left promiscuous mode [ 560.884680][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.073230][ T8333] syz.2.497: attempt to access beyond end of device [ 561.073230][ T8333] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 561.086638][ T8333] efs: cannot read volume header [ 564.755230][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.761843][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.822829][ T8328] bridge_slave_0: left allmulticast mode [ 564.834292][ T8328] bridge_slave_0: left promiscuous mode [ 564.853011][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.329479][ T8336] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 565.365968][ T8345] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 565.383100][ T8345] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 567.613111][ T8364] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.499'. [ 567.622929][ T8364] netlink: 316 bytes leftover after parsing attributes in process `syz.3.499'. [ 568.036729][ T8363] loop3: detected capacity change from 0 to 512 [ 568.358579][ T8363] EXT4-fs (loop3): orphan cleanup on readonly fs [ 568.441482][ T8363] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.499: EA inode hash validation failed [ 568.456568][ T8363] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 568.470706][ T8363] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.499: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 568.493515][ T8363] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.499: ea_inode dec ref err=-117 [ 568.509635][ T8363] EXT4-fs (loop3): 1 orphan inode deleted [ 568.516773][ T8363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 568.621777][ T8372] futex_wake_op: syz.0.505 tries to shift op by 144; fix this program [ 568.675018][ T8372] loop0: detected capacity change from 0 to 256 [ 568.752143][ T8372] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 568.870729][ T28] audit: type=1800 audit(1785519555.960:165): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.505" name="file1" dev="loop0" ino=1048627 res=0 errno=0 [ 569.002527][ T8371] syz.0.505: attempt to access beyond end of device [ 569.002527][ T8371] loop0: rw=524288, sector=4152, nr_sectors = 256 limit=256 [ 569.016542][ T8371] syz.0.505: attempt to access beyond end of device [ 569.016542][ T8371] loop0: rw=0, sector=4280, nr_sectors = 8 limit=256 [ 569.030698][ T8371] syz.0.505: attempt to access beyond end of device [ 569.030698][ T8371] loop0: rw=0, sector=4280, nr_sectors = 8 limit=256 [ 569.046519][ T8371] syz.0.505: attempt to access beyond end of device [ 569.046519][ T8371] loop0: rw=0, sector=4280, nr_sectors = 8 limit=256 [ 569.060230][ T8371] syz.0.505: attempt to access beyond end of device [ 569.060230][ T8371] loop0: rw=0, sector=4280, nr_sectors = 8 limit=256 [ 569.064038][ T8373] syz.0.505: attempt to access beyond end of device [ 569.064038][ T8373] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 569.087310][ T8373] syz.0.505: attempt to access beyond end of device [ 569.087310][ T8373] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 569.103243][ T8373] syz.0.505: attempt to access beyond end of device [ 569.103243][ T8373] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 569.116474][ T8373] syz.0.505: attempt to access beyond end of device [ 569.116474][ T8373] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 569.129726][ T8373] syz.0.505: attempt to access beyond end of device [ 569.129726][ T8373] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 570.712615][ T8381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 570.719198][ T8381] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 570.727185][ T8381] vhci_hcd vhci_hcd.0: Device attached [ 570.746539][ T8382] vhci_hcd: connection closed [ 570.754801][ T78] vhci_hcd: stop threads [ 571.876382][ T78] vhci_hcd: release socket [ 571.919500][ T5827] usb 36-1: SetAddress Request (2) to port 0 [ 571.934685][ T5827] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 571.969281][ T78] vhci_hcd: disconnect device [ 572.087891][ T5827] usb 36-1: enqueue for inactive port 0 [ 572.315892][ T8397] netlink: 23 bytes leftover after parsing attributes in process `syz.2.509'. [ 572.335311][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.068259][ T5827] usb usb36-port1: attempt power cycle [ 574.365334][ T5827] usb usb36-port1: unable to enumerate USB device [ 574.583600][ T8407] netlink: 23 bytes leftover after parsing attributes in process `syz.1.513'. [ 575.513580][ T8423] loop2: detected capacity change from 0 to 16 [ 575.539172][ T8423] erofs: (device loop2): mounted with root inode @ nid 36. [ 575.680461][ T8427] netlink: 'syz.2.517': attribute type 11 has an invalid length. [ 576.883666][ T8427] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.517'. [ 576.977993][ T8427] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 577.918952][ T8442] netlink: 23 bytes leftover after parsing attributes in process `syz.3.522'. [ 577.932450][ T8443] futex_wake_op: syz.0.521 tries to shift op by 144; fix this program [ 577.949303][ T8443] loop0: detected capacity change from 0 to 256 [ 577.960007][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 578.159866][ T8445] syz.1.520 (8445): drop_caches: 0 [ 578.174245][ T8445] loop1: detected capacity change from 0 to 128 [ 578.186406][ T8445] FAT-fs (loop1): Unrecognized mount option "/proc/sys/vm/drop_caches" or missing value [ 578.232483][ T8443] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 578.497722][ T28] audit: type=1800 audit(1785519565.450:166): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.521" name="file1" dev="loop0" ino=1048641 res=0 errno=0 [ 578.551704][ T8443] bio_check_eod: 388 callbacks suppressed [ 578.551722][ T8443] syz.0.521: attempt to access beyond end of device [ 578.551722][ T8443] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 579.090274][ T8453] loop2: detected capacity change from 0 to 64 [ 579.320979][ T8448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.523'. [ 579.593265][ T8457] loop0: detected capacity change from 0 to 8 [ 579.629912][ T8457] SQUASHFS error: Failed to read block 0x29b: -5 [ 579.636404][ T8457] SQUASHFS error: Unable to read metadata cache entry [299] [ 581.267437][ T8467] netlink: 23 bytes leftover after parsing attributes in process `syz.3.527'. [ 583.687722][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 583.786155][ T8484] netlink: 23 bytes leftover after parsing attributes in process `syz.0.532'. [ 584.496502][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.543481][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 584.744750][ T23] usb 3-1: string descriptor 0 read error: -71 [ 584.759601][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.774629][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.878797][ T23] usb 3-1: can't set config #1, error -71 [ 584.897752][ T23] usb 3-1: USB disconnect, device number 13 [ 585.028439][ T8494] pim6reg: entered allmulticast mode [ 585.945768][ T8501] Set syz0 is full, maxelem 0 reached [ 586.087610][ T8502] autofs4:pid:8502:autofs_fill_super: called with bogus options [ 586.774449][ T8505] loop3: detected capacity change from 0 to 128 [ 590.642463][ T8521] netlink: 23 bytes leftover after parsing attributes in process `syz.0.539'. [ 591.478076][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.487063][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.502205][ T8532] libceph: resolve '400' (ret=-3): failed [ 591.647965][ T8534] futex_wake_op: syz.1.533 tries to shift op by 144; fix this program [ 591.717718][ T8534] loop1: detected capacity change from 0 to 256 [ 591.836316][ T8534] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 591.952867][ T28] audit: type=1800 audit(1785519579.050:167): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.533" name="file1" dev="loop1" ino=1048644 res=0 errno=0 [ 592.196066][ T8535] syz.1.533: attempt to access beyond end of device [ 592.196066][ T8535] loop1: rw=0, sector=256, nr_sectors = 8 limit=256 [ 593.093093][ T8537] loop3: detected capacity change from 0 to 4096 [ 594.644460][ T5827] IPVS: starting estimator thread 0... [ 594.849587][ T8548] IPVS: using max 16 ests per chain, 38400 per kthread [ 595.045282][ T8551] 0x000000000002-0x000000000004 : "" [ 595.089677][ T8551] ftl_cs: FTL header corrupt! [ 597.313248][ T8564] futex_wake_op: syz.0.549 tries to shift op by 144; fix this program [ 598.426387][ T8571] netlink: 23 bytes leftover after parsing attributes in process `syz.0.551'. [ 599.214398][ T5779] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 599.246344][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.264673][ T8575] netlink: 23 bytes leftover after parsing attributes in process `syz.2.542'. [ 599.277159][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.325195][ T8580] libceph: resolve '400' (ret=-3): failed [ 599.438573][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.475558][ T5779] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 599.505766][ T5779] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.699236][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 599.847358][ T8590] NILFS (nullb0): couldn't find nilfs on the device [ 600.631096][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.631126][ T5779] usb 4-1: Product: syz [ 600.631141][ T5779] usb 4-1: Manufacturer: syz [ 600.631156][ T5779] usb 4-1: SerialNumber: syz [ 600.646352][ T5779] cdc_mbim 4-1:1.0: skipping garbage [ 601.091138][ T8570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.169505][ T5779] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 602.175897][ T5779] cdc_mbim 4-1:1.0: bind() failure [ 602.199627][ T8595] pim6reg: entered allmulticast mode [ 602.216153][ T5779] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 602.234005][ T5779] cdc_ncm 4-1:1.1: bind() failure [ 602.293292][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.360687][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.424700][ T8603] libceph: resolve '400' (ret=-3): failed [ 602.525811][ T8605] libceph: resolve '400' (ret=-3): failed [ 603.382211][ T8111] usb 4-1: USB disconnect, device number 8 [ 604.070769][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 604.936296][ T8625] netlink: 23 bytes leftover after parsing attributes in process `syz.3.562'. [ 605.410375][ T8629] netlink: 23 bytes leftover after parsing attributes in process `syz.1.564'. [ 605.637055][ T8630] netlink: 23 bytes leftover after parsing attributes in process `syz.0.565'. [ 608.451885][ T8650] trusted_key: syz.2.571 sent an empty control message without MSG_MORE. [ 609.717696][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 610.098686][ T5843] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.148733][ T5843] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 610.200104][ T5843] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.217280][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.225427][ T5843] usb 2-1: Product: syz [ 610.258548][ T5843] usb 2-1: Manufacturer: syz [ 610.278317][ T5843] usb 2-1: SerialNumber: syz [ 610.304051][ T5843] cdc_mbim 2-1:1.0: skipping garbage [ 610.877806][ T8654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 613.037659][ T5779] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 613.161523][ T5843] cdc_mbim 2-1:1.0: bind() failure [ 613.202040][ T5843] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 613.271001][ T5843] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 613.329004][ T5843] usbtest: probe of 2-1:1.1 failed with error -71 [ 613.368261][ T5843] usb 2-1: USB disconnect, device number 10 [ 613.439134][ T8677] netlink: 23 bytes leftover after parsing attributes in process `syz.0.576'. [ 614.455400][ T8680] netlink: 23 bytes leftover after parsing attributes in process `syz.2.579'. [ 616.337625][ T8696] loop0: detected capacity change from 0 to 8192 [ 619.567835][ T8706] loop0: detected capacity change from 0 to 1024 [ 620.683128][ T8706] hfsplus: keylen 65060 too large [ 620.701328][ T8706] hfsplus: xattr searching failed [ 620.736864][ T28] audit: type=1800 audit(1785519607.860:168): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.585" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 620.997409][ T8111] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 621.095404][ T8717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.121408][ T8717] mmap: syz.0.585 (8717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 621.562243][ T8111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.765760][ T8111] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 621.865688][ T8111] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.896247][ T8726] netlink: 23 bytes leftover after parsing attributes in process `syz.3.589'. [ 621.936921][ T8111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.977535][ T8111] usb 2-1: Product: syz [ 621.991970][ T8111] usb 2-1: Manufacturer: syz [ 621.996645][ T8111] usb 2-1: SerialNumber: syz [ 622.056043][ T8111] cdc_mbim 2-1:1.0: skipping garbage [ 622.277923][ T8716] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 622.735484][ T8111] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 622.743047][ T8111] cdc_mbim 2-1:1.0: bind() failure [ 622.764284][ T8111] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 622.778772][ T8111] cdc_ncm 2-1:1.1: bind() failure [ 623.497679][ T8734] libceph: resolve '400' (ret=-3): failed [ 625.748525][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.765436][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.257515][ T179] usb 2-1: USB disconnect, device number 11 [ 626.557349][ T5819] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 628.793203][ T5819] usb 3-1: device descriptor read/all, error -71 [ 629.643295][ T8756] netlink: 23 bytes leftover after parsing attributes in process `syz.2.598'. [ 629.957863][ T8763] futex_wake_op: syz.1.599 tries to shift op by 144; fix this program [ 630.009180][ T8763] loop1: detected capacity change from 0 to 256 [ 630.072554][ T8763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 630.126430][ T28] audit: type=1800 audit(1785519617.240:169): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.599" name="file1" dev="loop1" ino=1048645 res=0 errno=0 [ 633.706380][ T8786] futex_wake_op: syz.1.603 tries to shift op by 144; fix this program [ 634.586426][ T8789] 0x000000000002-0x000000000004 : "" [ 635.173428][ T8789] ftl_cs: FTL header corrupt! [ 635.408121][ T8794] loop2: detected capacity change from 0 to 2048 [ 635.591490][ T8795] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 638.953117][ T8812] netlink: 23 bytes leftover after parsing attributes in process `syz.0.608'. [ 638.978969][ T8795] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 639.024772][ T8795] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 639.077337][ T5827] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 639.100310][ T8795] Remounting filesystem read-only [ 639.106411][ T11] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 639.170306][ T11] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 639.187634][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.196562][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.211946][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.224222][ T11] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 639.234149][ T11] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 639.241926][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.253701][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.263918][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.277154][ T5776] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 639.292934][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.306363][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 639.324024][ T5827] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 639.336449][ T5776] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 639.360533][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.374139][ T5776] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 639.392143][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.404209][ T5776] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 639.417956][ T5827] usb 4-1: Product: syz [ 639.422197][ T5827] usb 4-1: Manufacturer: syz [ 639.426832][ T5827] usb 4-1: SerialNumber: syz [ 639.437425][ T5776] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 639.451433][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 639.469125][ T5827] cdc_mbim 4-1:1.0: skipping garbage [ 639.484253][ T5776] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 639.492078][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.507144][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.549603][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.700769][ T8808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 639.775856][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 639.825016][ T5776] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 639.832740][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.841810][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.851032][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.860446][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 639.867316][ T5776] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 639.874692][ T5776] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 639.887229][ T5776] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 639.898657][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.933779][ T5776] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 639.947296][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.956247][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 639.965813][ T5776] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 639.973587][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.507371][ T5827] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 640.513594][ T5827] cdc_mbim 4-1:1.0: bind() failure [ 640.532919][ T5827] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 640.557415][ T5827] cdc_ncm 4-1:1.1: bind() failure [ 640.590676][ T8809] libceph: resolve '400' (ret=-3): failed [ 640.721696][ T5827] usb 4-1: USB disconnect, device number 9 [ 645.992577][ T8847] 0x000000000002-0x000000000004 : "" [ 646.168136][ T8847] ftl_cs: FTL header corrupt! [ 647.283917][ T8851] netlink: 23 bytes leftover after parsing attributes in process `syz.1.607'. [ 647.675240][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.701795][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.741157][ T8858] libceph: resolve '400' (ret=-3): failed [ 648.234452][ T8865] netlink: 23 bytes leftover after parsing attributes in process `syz.2.617'. [ 648.454175][ T8869] loop0: detected capacity change from 0 to 128 [ 649.992661][ T8879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.623'. [ 653.625553][ T8891] 0x000000000002-0x000000000004 : "" [ 653.874239][ T8891] ftl_cs: FTL header corrupt! [ 655.161710][ T8898] netlink: 23 bytes leftover after parsing attributes in process `syz.2.630'. [ 655.429681][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 656.189641][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.275735][ T23] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 656.383831][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.458335][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.807390][ T23] usb 2-1: Product: syz [ 656.822685][ T23] usb 2-1: Manufacturer: syz [ 657.304751][ T23] usb 2-1: SerialNumber: syz [ 657.333707][ T23] cdc_mbim 2-1:1.0: skipping garbage [ 659.354204][ T8901] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 659.739220][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 659.959240][ T23] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 660.066089][ T23] cdc_mbim 2-1:1.0: bind() failure [ 660.699589][ T23] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 660.706523][ T23] cdc_ncm 2-1:1.1: bind() failure [ 661.050399][ T23] usb 2-1: USB disconnect, device number 12 [ 663.936838][ T8938] futex_wake_op: syz.1.638 tries to shift op by 144; fix this program [ 663.999370][ T8938] loop1: detected capacity change from 0 to 256 [ 664.226306][ T8938] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 664.379497][ T28] audit: type=1800 audit(1785519651.430:170): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.638" name="file1" dev="loop1" ino=1048659 res=0 errno=0 [ 664.877461][ T8937] netlink: 23 bytes leftover after parsing attributes in process `syz.3.640'. [ 665.147631][ T179] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 665.277323][ T5779] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 665.368605][ T179] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.405800][ T179] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 665.484142][ T179] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.530483][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.556358][ T179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.638653][ T5779] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 665.662886][ T179] usb 2-1: Product: syz [ 665.694618][ T179] usb 2-1: Manufacturer: syz [ 665.715860][ T179] usb 2-1: SerialNumber: syz [ 665.717348][ T5779] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.757225][ T179] cdc_mbim 2-1:1.0: skipping garbage [ 665.779141][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.840087][ T5779] usb 4-1: Product: syz [ 665.844791][ T5779] usb 4-1: Manufacturer: syz [ 665.880043][ T5779] usb 4-1: SerialNumber: syz [ 665.961064][ T5779] cdc_mbim 4-1:1.0: skipping garbage [ 666.006284][ T8945] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.118960][ T8953] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 666.492146][ T8947] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 666.716163][ T179] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 666.740105][ T179] cdc_mbim 2-1:1.0: bind() failure [ 667.027300][ T5779] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 667.034038][ T5779] cdc_mbim 4-1:1.0: bind() failure [ 667.086524][ T179] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 667.252513][ T5779] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 667.260153][ T179] cdc_ncm 2-1:1.1: bind() failure [ 667.275782][ T8956] libceph: resolve '400' (ret=-3): failed [ 667.501007][ T8961] libceph: resolve '400' (ret=-3): failed [ 667.518372][ T5779] cdc_ncm 4-1:1.1: bind() failure [ 667.603149][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.623938][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.126779][ T8964] libceph: resolve '400' (ret=-3): failed [ 668.596770][ T5779] usb 4-1: USB disconnect, device number 10 [ 669.113222][ T5819] usb 2-1: USB disconnect, device number 13 [ 672.599822][ T179] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 672.607615][ T5827] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 672.636426][ T8990] netlink: 23 bytes leftover after parsing attributes in process `syz.0.651'. [ 675.051722][ T9012] loop3: detected capacity change from 0 to 128 [ 675.058214][ T9011] xt_TCPMSS: Only works on TCP SYN packets [ 675.119663][ T9014] futex_wake_op: syz.1.654 tries to shift op by 144; fix this program [ 675.177267][ T9014] loop1: detected capacity change from 0 to 256 [ 675.390037][ T9014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 675.488923][ T28] audit: type=1800 audit(1785519662.590:171): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.654" name="file1" dev="loop1" ino=1048660 res=0 errno=0 [ 675.620062][ T9013] syz.1.654: attempt to access beyond end of device [ 675.620062][ T9013] loop1: rw=524288, sector=5792, nr_sectors = 256 limit=256 [ 675.622852][ T9014] syz.1.654: attempt to access beyond end of device [ 675.622852][ T9014] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 675.634029][ T9013] syz.1.654: attempt to access beyond end of device [ 675.634029][ T9013] loop1: rw=0, sector=5920, nr_sectors = 8 limit=256 [ 675.654952][ T9014] syz.1.654: attempt to access beyond end of device [ 675.654952][ T9014] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 675.661335][ T9013] syz.1.654: attempt to access beyond end of device [ 675.661335][ T9013] loop1: rw=0, sector=5920, nr_sectors = 8 limit=256 [ 675.676933][ T9014] syz.1.654: attempt to access beyond end of device [ 675.676933][ T9014] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 675.702344][ T9014] syz.1.654: attempt to access beyond end of device [ 675.702344][ T9014] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 675.715703][ T9014] syz.1.654: attempt to access beyond end of device [ 675.715703][ T9014] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 675.729308][ T9014] syz.1.654: attempt to access beyond end of device [ 675.729308][ T9014] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 675.742595][ T9014] syz.1.654: attempt to access beyond end of device [ 675.742595][ T9014] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 676.008505][ T179] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 676.413307][ T28] audit: type=1326 audit(1785519663.500:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 676.548126][ T28] audit: type=1326 audit(1785519663.500:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 676.735360][ T179] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.750890][ T179] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 676.761534][ T28] audit: type=1326 audit(1785519663.500:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 676.807432][ T179] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 676.816537][ T179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.853751][ T28] audit: type=1326 audit(1785519663.500:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 676.896567][ T179] usb 3-1: Product: syz [ 677.027425][ T28] audit: type=1326 audit(1785519663.500:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 677.205104][ T9026] loop1: detected capacity change from 0 to 1024 [ 677.215880][ T28] audit: type=1326 audit(1785519663.500:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 677.342781][ T179] usb 3-1: Manufacturer: syz [ 677.347506][ T179] usb 3-1: SerialNumber: syz [ 677.359001][ T179] cdc_mbim 3-1:1.0: skipping garbage [ 677.372245][ T28] audit: type=1326 audit(1785519663.500:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 677.419244][ T8113] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 677.448388][ T9026] hfsplus: keylen 65060 too large [ 677.458296][ T28] audit: type=1326 audit(1785519663.500:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 677.463708][ T9026] hfsplus: xattr searching failed [ 677.495210][ T28] audit: type=1326 audit(1785519663.500:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff58e59e019 code=0x7ffc0000 [ 677.566465][ T9005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 677.939662][ T8113] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.939768][ T8113] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 677.988812][ T9027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.059711][ T8113] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.082395][ T8113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.165659][ T8113] usb 4-1: Product: syz [ 678.256087][ T179] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 678.266733][ T8113] usb 4-1: Manufacturer: syz [ 678.270261][ T179] cdc_mbim 3-1:1.0: bind() failure [ 678.279938][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.300269][ T8113] usb 4-1: SerialNumber: syz [ 678.303674][ T179] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 678.312961][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.336252][ T8113] cdc_mbim 4-1:1.0: skipping garbage [ 678.340293][ T179] cdc_ncm 3-1:1.1: bind() failure [ 678.361517][ T9031] libceph: resolve '400' (ret=-3): failed [ 678.544930][ T9025] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 678.581006][ T9033] netlink: 23 bytes leftover after parsing attributes in process `syz.1.665'. [ 678.616458][ T9006] libceph: resolve '400' (ret=-3): failed [ 679.120898][ T8113] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 679.180226][ T8113] cdc_mbim 4-1:1.0: bind() failure [ 679.363194][ T8113] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 679.408976][ T8113] cdc_ncm 4-1:1.1: bind() failure [ 679.733922][ T9038] libceph: resolve '400' (ret=-3): failed [ 680.030759][ T5827] usb 3-1: USB disconnect, device number 17 [ 681.123595][ T5819] usb 4-1: USB disconnect, device number 12 [ 682.829564][ T9058] futex_wake_op: syz.2.669 tries to shift op by 144; fix this program [ 682.894471][ T9058] loop2: detected capacity change from 0 to 256 [ 682.910660][ T9062] futex_wake_op: syz.0.670 tries to shift op by 144; fix this program [ 682.966553][ T9062] loop0: detected capacity change from 0 to 256 [ 683.232150][ T9062] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 683.337429][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 683.337613][ T28] audit: type=1800 audit(1785519670.440:227): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.670" name="file1" dev="loop0" ino=1048662 res=0 errno=0 [ 683.377203][ T9058] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 683.544259][ T9056] bio_check_eod: 3177 callbacks suppressed [ 683.544275][ T9056] syz.0.670: attempt to access beyond end of device [ 683.544275][ T9056] loop0: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 683.566789][ T9056] syz.0.670: attempt to access beyond end of device [ 683.566789][ T9056] loop0: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 683.580733][ T9056] syz.0.670: attempt to access beyond end of device [ 683.580733][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.594184][ T9056] syz.0.670: attempt to access beyond end of device [ 683.594184][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.607640][ T9056] syz.0.670: attempt to access beyond end of device [ 683.607640][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.620967][ T9056] syz.0.670: attempt to access beyond end of device [ 683.620967][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.634207][ T9056] syz.0.670: attempt to access beyond end of device [ 683.634207][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.647401][ T9056] syz.0.670: attempt to access beyond end of device [ 683.647401][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.661666][ T9056] syz.0.670: attempt to access beyond end of device [ 683.661666][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.674878][ T9056] syz.0.670: attempt to access beyond end of device [ 683.674878][ T9056] loop0: rw=0, sector=664, nr_sectors = 8 limit=256 [ 683.864813][ T28] audit: type=1800 audit(1785519670.560:228): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.669" name="file1" dev="loop2" ino=1048663 res=0 errno=0 [ 684.105134][ T9067] loop3: detected capacity change from 0 to 2048 [ 684.193471][ T9068] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.536114][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.545510][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.560672][ T9073] libceph: resolve '400' (ret=-3): failed [ 684.824630][ T9076] MPI: mpi too large (110728 bits) [ 686.079982][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.086810][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.124709][ T9072] netlink: 23 bytes leftover after parsing attributes in process `syz.2.674'. [ 687.096727][ T9068] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 687.405071][ T9068] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 687.453579][ T9068] Remounting filesystem read-only [ 687.487570][ T4246] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 687.535342][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 687.576003][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 687.585053][ T4246] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 687.592751][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.600138][ T4246] NILFS (loop3): discard dirty page: offset=233472, ino=3 [ 687.607371][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.614644][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.622000][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.629345][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.636654][ T4246] NILFS (loop3): discard dirty page: offset=237568, ino=3 [ 687.656462][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.671189][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 687.699262][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 687.717304][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 687.794517][ T4246] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 687.867539][ T4246] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 687.976433][ T4246] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 688.142062][ T4246] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 688.313271][ T4246] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 688.458105][ T4246] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 688.587774][ T4246] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 688.657484][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 688.666432][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 688.686235][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 688.695266][ T4246] NILFS (loop3): discard dirty page: offset=274432, ino=15 [ 688.727908][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 688.756578][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 688.782762][ T9087] netlink: 23 bytes leftover after parsing attributes in process `syz.2.680'. [ 688.805173][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 688.828761][ T4246] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 688.836104][ T4246] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 688.932376][ T4246] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 688.993180][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 689.031263][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 689.059263][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 689.104431][ T4246] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 689.244893][ T9103] loop1: detected capacity change from 0 to 256 [ 690.935461][ T9102] futex_wake_op: syz.1.683 tries to shift op by 144; fix this program [ 691.016937][ T4246] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 691.214737][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 691.262160][ T9098] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 691.265308][ T9103] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 691.310828][ T28] audit: type=1800 audit(1785519678.440:229): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.683" name="file1" dev="loop1" ino=1048664 res=0 errno=0 [ 691.371885][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 691.541108][ T9114] futex_wake_op: syz.2.684 tries to shift op by 144; fix this program [ 691.598862][ T9114] loop2: detected capacity change from 0 to 256 [ 691.679145][ T9114] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 691.892990][ T9115] bio_check_eod: 825 callbacks suppressed [ 691.893008][ T9115] syz.2.684: attempt to access beyond end of device [ 691.893008][ T9115] loop2: rw=0, sector=256, nr_sectors = 8 limit=256 [ 691.916561][ T9113] syz.2.684: attempt to access beyond end of device [ 691.916561][ T9113] loop2: rw=524288, sector=3824, nr_sectors = 256 limit=256 [ 691.924820][ T9114] syz.2.684: attempt to access beyond end of device [ 691.924820][ T9114] loop2: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 691.930845][ T9113] syz.2.684: attempt to access beyond end of device [ 691.930845][ T9113] loop2: rw=0, sector=3952, nr_sectors = 8 limit=256 [ 691.952824][ T9114] syz.2.684: attempt to access beyond end of device [ 691.952824][ T9114] loop2: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 691.960409][ T9113] syz.2.684: attempt to access beyond end of device [ 691.960409][ T9113] loop2: rw=0, sector=3952, nr_sectors = 8 limit=256 [ 691.971892][ T9114] syz.2.684: attempt to access beyond end of device [ 691.971892][ T9114] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 691.985027][ T9113] syz.2.684: attempt to access beyond end of device [ 691.985027][ T9113] loop2: rw=0, sector=3952, nr_sectors = 8 limit=256 [ 691.998300][ T9114] syz.2.684: attempt to access beyond end of device [ 691.998300][ T9114] loop2: rw=0, sector=664, nr_sectors = 8 limit=256 [ 692.010995][ T9113] syz.2.684: attempt to access beyond end of device [ 692.010995][ T9113] loop2: rw=0, sector=3952, nr_sectors = 8 limit=256 [ 692.045144][ T4246] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 692.273773][ T5774] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 692.287690][ T28] audit: type=1800 audit(1785519678.870:230): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.684" name="file1" dev="loop2" ino=1048665 res=0 errno=0 [ 692.429962][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 692.436754][ T5774] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 692.487010][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 692.547455][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 692.597693][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 692.627602][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 692.634389][ T5774] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 692.682631][ T5774] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 692.707297][ T5774] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 692.737420][ T5827] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 692.780572][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 692.835324][ T9125] 0x000000000002-0x000000000004 : "" [ 692.894009][ T5774] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 692.940946][ T9125] ftl_cs: FTL header corrupt! [ 693.100696][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.173574][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 693.377291][ T5827] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 693.386358][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 693.406947][ T5774] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 693.457410][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 693.480970][ T5827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.507648][ T9124] netlink: 23 bytes leftover after parsing attributes in process `syz.1.688'. [ 693.546400][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.564809][ T5827] usb 3-1: Product: syz [ 693.574941][ T5827] usb 3-1: Manufacturer: syz [ 693.589655][ T5827] usb 3-1: SerialNumber: syz [ 693.658802][ T5827] cdc_mbim 3-1:1.0: skipping garbage [ 693.868270][ T9119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 694.318262][ T5827] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 694.543761][ T5827] cdc_mbim 3-1:1.0: bind() failure [ 694.655615][ T5827] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 694.977543][ T5827] cdc_ncm 3-1:1.1: bind() failure [ 694.982850][ T9139] libceph: resolve '400' (ret=-3): failed [ 696.470482][ T5827] usb 3-1: USB disconnect, device number 18 [ 696.727440][ T9146] netlink: 23 bytes leftover after parsing attributes in process `syz.0.692'. [ 696.851165][ T9156] bridge0: port 4(syz_tun) entered blocking state [ 696.858515][ T9156] bridge0: port 4(syz_tun) entered disabled state [ 696.866230][ T9156] syz_tun: entered allmulticast mode [ 696.894681][ T9156] syz_tun: entered promiscuous mode [ 696.904063][ T9156] bridge0: port 4(syz_tun) entered blocking state [ 696.910676][ T9156] bridge0: port 4(syz_tun) entered forwarding state [ 696.962843][ T9156] bridge0: port 4(syz_tun) entered learning state [ 696.987003][ T9156] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 698.420519][ T9160] futex_wake_op: syz.1.695 tries to shift op by 144; fix this program [ 698.482446][ T9160] loop1: detected capacity change from 0 to 256 [ 698.889050][ T9160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 698.917361][ T28] audit: type=1800 audit(1785519686.040:231): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.695" name="file1" dev="loop1" ino=1048666 res=0 errno=0 [ 699.001362][ T9159] bio_check_eod: 2653 callbacks suppressed [ 699.001380][ T9159] syz.1.695: attempt to access beyond end of device [ 699.001380][ T9159] loop1: rw=0, sector=256, nr_sectors = 8 limit=256 [ 699.057927][ T9159] syz.1.695: attempt to access beyond end of device [ 699.057927][ T9159] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 699.073207][ T9159] syz.1.695: attempt to access beyond end of device [ 699.073207][ T9159] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 699.087307][ T9159] syz.1.695: attempt to access beyond end of device [ 699.087307][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.102670][ T9159] syz.1.695: attempt to access beyond end of device [ 699.102670][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.116620][ T9159] syz.1.695: attempt to access beyond end of device [ 699.116620][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.130086][ T9159] syz.1.695: attempt to access beyond end of device [ 699.130086][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.143504][ T9159] syz.1.695: attempt to access beyond end of device [ 699.143504][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.156883][ T9159] syz.1.695: attempt to access beyond end of device [ 699.156883][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.170490][ T9159] syz.1.695: attempt to access beyond end of device [ 699.170490][ T9159] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 699.739995][ T9162] loop0: detected capacity change from 0 to 128 [ 702.013753][ T9169] netlink: 23 bytes leftover after parsing attributes in process `syz.1.697'. [ 703.947524][ T5827] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 704.658370][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.708183][ T5827] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 704.808997][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.827473][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.875275][ T5827] usb 4-1: Product: syz [ 704.900285][ T5827] usb 4-1: Manufacturer: syz [ 704.904958][ T5827] usb 4-1: SerialNumber: syz [ 705.337658][ T5827] cdc_mbim 4-1:1.0: skipping garbage [ 708.244980][ T5827] cdc_mbim 4-1:1.0: bind() failure [ 708.341409][ T5827] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 708.407309][ T5827] cdc_ncm 4-1:1.1: bind() failure [ 708.466429][ T5827] usb 4-1: USB disconnect, device number 13 [ 709.217453][ T9217] futex_wake_op: syz.3.709 tries to shift op by 144; fix this program [ 709.272134][ T9217] loop3: detected capacity change from 0 to 256 [ 709.517973][ T9217] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 709.601028][ T28] audit: type=1800 audit(1785519696.710:232): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.709" name="file1" dev="loop3" ino=1048668 res=0 errno=0 [ 710.005741][ T9209] netlink: 23 bytes leftover after parsing attributes in process `syz.1.706'. [ 710.638135][ T9226] siw: device registration error -23 [ 712.279643][ C1] bridge0: port 4(syz_tun) entered forwarding state [ 714.454741][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 717.643059][ T789] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 718.939883][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.967205][ T789] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 719.022040][ T789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.073853][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.165879][ T789] usb 4-1: Product: syz [ 719.195658][ T789] usb 4-1: Manufacturer: syz [ 719.311829][ T789] usb 4-1: SerialNumber: syz [ 719.667714][ T789] cdc_mbim 4-1:1.0: skipping garbage [ 719.926836][ T9253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 720.249482][ T9269] loop2: detected capacity change from 0 to 8192 [ 720.306839][ T9269] loop2: p1 p2 p3 p4 < > [ 720.312364][ T9269] loop2: partition table partially beyond EOD, truncated [ 720.322212][ T9269] loop2: p1 start 100663296 is beyond EOD, truncated [ 720.329854][ T9269] loop2: p2 size 590592 extends beyond EOD, truncated [ 720.340800][ T9269] loop2: p3 start 4294967295 is beyond EOD, truncated [ 720.347924][ T9269] loop2: p4 start 117440516 is beyond EOD, truncated [ 720.560252][ T789] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 720.972211][ T9275] libceph: resolve '400' (ret=-3): failed [ 722.068651][ T789] cdc_mbim 4-1:1.0: bind() failure [ 722.099185][ T789] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 722.106155][ T789] cdc_ncm 4-1:1.1: bind() failure [ 722.197621][ T789] usb 4-1: USB disconnect, device number 14 [ 723.876551][ T9292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.726'. [ 724.071198][ T8111] IPVS: starting estimator thread 0... [ 724.657434][ T9294] IPVS: using max 19 ests per chain, 45600 per kthread [ 725.128009][ T7477] udevd[7477]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 725.298854][ T7477] udevd[7477]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 725.389235][ T9302] futex_wake_op: syz.0.728 tries to shift op by 144; fix this program [ 725.532814][ T9302] loop0: detected capacity change from 0 to 256 [ 726.087029][ T9302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 726.121542][ T28] audit: type=1800 audit(1785519713.250:233): pid=9301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.728" name="file1" dev="loop0" ino=1048669 res=0 errno=0 [ 729.357368][ T5808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 730.334623][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.463219][ T5808] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 730.773304][ T9327] netlink: 23 bytes leftover after parsing attributes in process `syz.2.737'. [ 730.788775][ T5808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.886878][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.958254][ T5808] usb 4-1: Product: syz [ 730.977761][ T5808] usb 4-1: Manufacturer: syz [ 731.014540][ T5808] usb 4-1: SerialNumber: syz [ 731.135994][ T5808] cdc_mbim 4-1:1.0: skipping garbage [ 731.360890][ T9319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 732.067421][ T5808] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 732.092223][ T5808] cdc_mbim 4-1:1.0: bind() failure [ 732.137477][ T5808] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 732.146592][ T5808] cdc_ncm 4-1:1.1: bind() failure [ 732.251083][ T9346] futex_wake_op: syz.2.739 tries to shift op by 144; fix this program [ 732.306827][ T9346] loop2: detected capacity change from 0 to 256 [ 732.434171][ T9346] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 732.987516][ T28] audit: type=1800 audit(1785519719.640:234): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.739" name="file1" dev="loop2" ino=1048670 res=0 errno=0 [ 733.034506][ T9340] libceph: resolve '400' (ret=-3): failed [ 733.191650][ T9347] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 733.200623][ T9347] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 733.209369][ T9347] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 733.504851][ T9353] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 733.806691][ T3436] bio_check_eod: 189 callbacks suppressed [ 733.806709][ T3436] kworker/u4:9: attempt to access beyond end of device [ 733.806709][ T3436] loop2: rw=1, sector=4248, nr_sectors = 3008 limit=256 [ 734.172303][ T3436] kworker/u4:9: attempt to access beyond end of device [ 734.172303][ T3436] loop2: rw=1, sector=7256, nr_sectors = 1160 limit=256 [ 734.227008][ T5779] usb 4-1: USB disconnect, device number 15 [ 739.342496][ T9377] loop3: detected capacity change from 0 to 512 [ 739.581584][ T9377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.661251][ T9377] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.758997][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.837972][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.890595][ T9379] netlink: 23 bytes leftover after parsing attributes in process `syz.1.748'. [ 739.927633][ T9386] libceph: resolve '400' (ret=-3): failed [ 740.657804][ T9393] futex_wake_op: syz.1.750 tries to shift op by 144; fix this program [ 740.723524][ T9393] loop1: detected capacity change from 0 to 256 [ 740.878627][ T9393] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 740.938008][ T28] audit: type=1800 audit(1785519728.050:235): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.750" name="file1" dev="loop1" ino=1048671 res=0 errno=0 [ 741.049858][ T9393] syz.1.750: attempt to access beyond end of device [ 741.049858][ T9393] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 741.075090][ T9393] syz.1.750: attempt to access beyond end of device [ 741.075090][ T9393] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 741.093582][ T9393] syz.1.750: attempt to access beyond end of device [ 741.093582][ T9393] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 741.142515][ T9393] syz.1.750: attempt to access beyond end of device [ 741.142515][ T9393] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 741.142660][ T9392] syz.1.750: attempt to access beyond end of device [ 741.142660][ T9392] loop1: rw=524288, sector=4936, nr_sectors = 64 limit=256 [ 741.156366][ T9393] syz.1.750: attempt to access beyond end of device [ 741.156366][ T9393] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 741.169739][ T9392] syz.1.750: attempt to access beyond end of device [ 741.169739][ T9392] loop1: rw=0, sector=4968, nr_sectors = 8 limit=256 [ 741.183231][ T9393] syz.1.750: attempt to access beyond end of device [ 741.183231][ T9393] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 741.196321][ T9392] syz.1.750: attempt to access beyond end of device [ 741.196321][ T9392] loop1: rw=0, sector=4968, nr_sectors = 8 limit=256 [ 741.209502][ T9393] syz.1.750: attempt to access beyond end of device [ 741.209502][ T9393] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 741.294044][ T28] audit: type=1800 audit(1785519728.240:236): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.750" name="file1" dev="loop1" ino=1048671 res=0 errno=0 [ 741.362186][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.709037][ T9410] dvmrp8: entered allmulticast mode [ 743.724758][ T9407] xt_HMARK: spi-set and port-set can't be combined [ 744.014727][ T9407] loop0: detected capacity change from 0 to 1024 [ 745.604818][ T9430] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 748.034473][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.468367][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.096490][ T9463] futex_wake_op: syz.0.761 tries to shift op by 144; fix this program [ 750.154601][ T9463] loop0: detected capacity change from 0 to 256 [ 750.300548][ T9463] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 750.444033][ T9463] bio_check_eod: 1365 callbacks suppressed [ 750.444073][ T9463] syz.0.761: attempt to access beyond end of device [ 750.444073][ T9463] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 750.471582][ T28] audit: type=1800 audit(1785519737.480:237): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.761" name="file1" dev="loop0" ino=1048672 res=0 errno=0 [ 750.498943][ T9463] syz.0.761: attempt to access beyond end of device [ 750.498943][ T9463] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 750.513283][ T9463] syz.0.761: attempt to access beyond end of device [ 750.513283][ T9463] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 750.563540][ T9463] syz.0.761: attempt to access beyond end of device [ 750.563540][ T9463] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 750.563770][ T9461] syz.0.761: attempt to access beyond end of device [ 750.563770][ T9461] loop0: rw=524288, sector=5112, nr_sectors = 64 limit=256 [ 750.577314][ T9463] syz.0.761: attempt to access beyond end of device [ 750.577314][ T9463] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 750.591100][ T9461] syz.0.761: attempt to access beyond end of device [ 750.591100][ T9461] loop0: rw=0, sector=5144, nr_sectors = 8 limit=256 [ 750.604524][ T9463] syz.0.761: attempt to access beyond end of device [ 750.604524][ T9463] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 750.617385][ T9461] syz.0.761: attempt to access beyond end of device [ 750.617385][ T9461] loop0: rw=0, sector=5144, nr_sectors = 8 limit=256 [ 750.630471][ T9463] syz.0.761: attempt to access beyond end of device [ 750.630471][ T9463] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 750.951730][ T9464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 750.958410][ T9464] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 750.973035][ T28] audit: type=1800 audit(1785519737.660:238): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.761" name="file1" dev="loop0" ino=1048672 res=0 errno=0 [ 751.029747][ T9464] vhci_hcd vhci_hcd.0: Device attached [ 751.253952][ T9467] vhci_hcd: connection closed [ 751.267383][ T11] vhci_hcd: stop threads [ 751.306949][ T11] vhci_hcd: release socket [ 751.347253][ T11] vhci_hcd: disconnect device [ 751.369073][ T9472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 751.397330][ T5827] usb 38-1: enqueue for inactive port 0 [ 752.067667][ T5827] usb usb38-port1: attempt power cycle [ 752.943338][ T5827] usb usb38-port1: unable to enumerate USB device [ 753.819468][ T9484] siw: device registration error -23 [ 754.664913][ T9495] netlink: 64 bytes leftover after parsing attributes in process `syz.0.776'. [ 755.199037][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 755.227265][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.776'. [ 755.280102][ T9495] gretap1: entered promiscuous mode [ 757.879990][ T9525] loop2: detected capacity change from 0 to 128 [ 762.645286][ T9555] netlink: 'syz.3.773': attribute type 14 has an invalid length. [ 764.650538][ T9580] siw: device registration error -23 [ 767.795030][ T9605] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 767.808575][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 768.880582][ T9609] loop3: detected capacity change from 0 to 128 [ 774.266535][ T9630] loop1: detected capacity change from 0 to 256 [ 774.361892][ T9630] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 774.386291][ T28] audit: type=1800 audit(1785519761.510:239): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.790" name="file1" dev="loop1" ino=1048676 res=0 errno=0 [ 774.866930][ T9634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 774.873625][ T9634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 774.881879][ T9634] vhci_hcd vhci_hcd.0: Device attached [ 775.237584][ T5827] vhci_hcd: vhci_device speed not set [ 775.387306][ T5827] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 775.430282][ T9637] vhci_hcd: connection closed [ 775.440801][ T12] vhci_hcd: stop threads [ 775.590564][ T12] vhci_hcd: release socket [ 775.679740][ T12] vhci_hcd: disconnect device [ 776.204085][ T9641] bridge0: port 3(syz_tun) entered blocking state [ 776.211181][ T9641] bridge0: port 3(syz_tun) entered disabled state [ 776.218723][ T9641] syz_tun: entered allmulticast mode [ 776.232781][ T9641] syz_tun: entered promiscuous mode [ 776.241407][ T9641] bridge0: port 3(syz_tun) entered blocking state [ 776.248087][ T9641] bridge0: port 3(syz_tun) entered forwarding state [ 776.293757][ T9641] bridge0: port 3(syz_tun) entered learning state [ 776.317305][ T9641] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 779.325105][ T9648] loop1: detected capacity change from 0 to 8192 [ 779.429145][ T9648] loop1: p1 p2 p3 p4 < > [ 779.434144][ T9648] loop1: partition table partially beyond EOD, truncated [ 779.443149][ T9648] loop1: p1 start 100663296 is beyond EOD, truncated [ 779.450078][ T9648] loop1: p2 size 590592 extends beyond EOD, truncated [ 779.462648][ T9648] loop1: p3 start 4294967295 is beyond EOD, truncated [ 779.471189][ T9648] loop1: p4 start 117440516 is beyond EOD, truncated [ 780.917948][ T5827] vhci_hcd: vhci_device speed not set [ 781.272815][ T9662] overlayfs: overlapping lowerdir path [ 781.383227][ T9663] overlayfs: conflicting lowerdir path [ 783.356127][ T9675] netem: change failed [ 785.505347][ T9375] udevd[9375]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 785.767102][ T9375] udevd[9375]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 786.902706][ T5086] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 787.209011][ T9697] netlink: 23 bytes leftover after parsing attributes in process `syz.1.804'. [ 787.655969][ T9710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 787.701104][ T9710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 787.722074][ T9710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 787.752336][ T9710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 787.771783][ T9710] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 787.785410][ T9710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 788.870907][ T9716] 9pnet_virtio: no channels available for device 127.0.0.1 [ 789.039056][ T9719] file system registered [ 790.347335][ T9710] Bluetooth: hci4: command tx timeout [ 790.503371][ T5781] ffs_data_put(): freeing [ 790.510859][ T5776] syz_tun (unregistering): left allmulticast mode [ 791.637234][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 791.877880][ T9707] lo speed is unknown, defaulting to 1000 [ 792.357447][ T9710] Bluetooth: hci4: command tx timeout [ 793.073739][ T9721] netlink: 23 bytes leftover after parsing attributes in process `syz.0.808'. [ 793.124191][ T4246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.237348][ T9729] netem: change failed [ 793.511196][ T4246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.741330][ T4246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.006849][ T4246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.097487][ T9743] netlink: 23 bytes leftover after parsing attributes in process `syz.0.813'. [ 794.437668][ T9710] Bluetooth: hci4: command tx timeout [ 794.605583][ T9707] chnl_net:caif_netlink_parms(): no params data found [ 794.686229][ T5827] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 794.922408][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.092641][ T5827] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 795.968022][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.991999][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.018193][ T5827] usb 4-1: Product: syz [ 796.022446][ T5827] usb 4-1: Manufacturer: syz [ 796.027078][ T5827] usb 4-1: SerialNumber: syz [ 796.046640][ T5827] cdc_mbim 4-1:1.0: skipping garbage [ 796.192778][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.201003][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.211907][ T9707] bridge_slave_0: entered allmulticast mode [ 796.220569][ T9707] bridge_slave_0: entered promiscuous mode [ 796.254014][ T9750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 796.334509][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.341952][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.352182][ T9707] bridge_slave_1: entered allmulticast mode [ 796.360249][ T9707] bridge_slave_1: entered promiscuous mode [ 796.494826][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.517633][ T9710] Bluetooth: hci4: command tx timeout [ 796.573205][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.665402][ T9707] team0: Port device team_slave_0 added [ 796.679011][ T9707] team0: Port device team_slave_1 added [ 796.689760][ T5827] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 796.695983][ T5827] cdc_mbim 4-1:1.0: bind() failure [ 796.721154][ T5827] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 796.743071][ T5827] cdc_ncm 4-1:1.1: bind() failure [ 796.811698][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.823203][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.851048][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.895038][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.902665][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.934569][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.065120][ T9780] libceph: resolve '400' (ret=-3): failed [ 797.085511][ T9780] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 797.100619][ T9707] hsr_slave_0: entered promiscuous mode [ 797.113821][ T9707] hsr_slave_1: entered promiscuous mode [ 797.122271][ T9707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.134255][ T9707] Cannot create hsr debugfs directory [ 797.715304][ T4246] hsr_slave_0: left promiscuous mode [ 797.732932][ T4246] hsr_slave_1: left promiscuous mode [ 797.741139][ T4246] batman_adv: batadv0: Interface deactivated: dummy0 [ 797.753507][ T4246] batman_adv: batadv0: Removing interface: dummy0 [ 797.762415][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.775352][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.784013][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.803206][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.869429][ T4246] veth1_macvtap: left promiscuous mode [ 797.875790][ T4246] veth0_macvtap: left promiscuous mode [ 797.898277][ T4246] veth1_vlan: left promiscuous mode [ 797.904163][ T4246] veth0_vlan: left promiscuous mode [ 798.209181][ T23] usb 4-1: USB disconnect, device number 16 [ 798.602108][ T9802] loop1: detected capacity change from 0 to 256 [ 799.578714][ T9804] loop3: detected capacity change from 0 to 8192 [ 800.559024][ T9802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 801.486280][ T9804] loop3: p1 p2 p3 p4 < > [ 801.493562][ T9804] loop3: partition table partially beyond EOD, truncated [ 801.542693][ T9804] loop3: p1 start 100663296 is beyond EOD, truncated [ 801.550426][ T9804] loop3: p2 size 590592 extends beyond EOD, truncated [ 801.627366][ T9804] loop3: p3 start 4294967295 is beyond EOD, truncated [ 801.650050][ T9804] loop3: p4 start 117440516 is beyond EOD, truncated [ 801.760969][ T5141] loop3: p1 p2 p3 p4 < > [ 801.766595][ T5141] loop3: partition table partially beyond EOD, truncated [ 801.824854][ T5141] loop3: p1 start 100663296 is beyond EOD, truncated [ 801.898454][ T5141] loop3: p2 size 590592 extends beyond EOD, truncated [ 801.969787][ T5141] loop3: p3 start 4294967295 is beyond EOD, truncated [ 802.041212][ T5141] loop3: p4 start 117440516 is beyond EOD, truncated [ 803.410159][ T4246] team0 (unregistering): Port device team_slave_1 removed [ 803.475045][ T4246] team0 (unregistering): Port device team_slave_0 removed [ 803.539546][ T4246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.615176][ T4246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.086809][ T4246] bond0 (unregistering): Released all slaves [ 804.400631][ T9707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 804.450095][ T9707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 804.530491][ T9707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 804.590366][ T9707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 804.930192][ T9826] netlink: 23 bytes leftover after parsing attributes in process `syz.0.819'. [ 805.543853][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.776639][ T9707] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.914553][ T9838] futex_wake_op: syz.3.821 tries to shift op by 144; fix this program [ 805.974491][ T9838] loop3: detected capacity change from 0 to 256 [ 806.199836][ T9838] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 806.378966][ T28] audit: type=1800 audit(1785519793.430:240): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="file1" dev="loop3" ino=1048677 res=0 errno=0 [ 806.659951][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.668475][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.781892][ T4246] IPVS: stop unused estimator thread 0... [ 806.795789][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.803017][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.825507][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.840943][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.889482][ T9844] libceph: resolve '400' (ret=-3): failed [ 807.296972][ T9843] netlink: 23 bytes leftover after parsing attributes in process `syz.1.822'. [ 808.146599][ T9864] loop0: detected capacity change from 0 to 256 [ 808.562681][ T9864] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 808.922677][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.096832][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.941334][ T28] audit: type=1800 audit(1785519798.070:241): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.826" name="file1" dev="loop0" ino=1048678 res=0 errno=0 [ 811.506715][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.935134][ T9891] XFS (nullb0): Invalid superblock magic number [ 814.505996][ T9886] netlink: 23 bytes leftover after parsing attributes in process `syz.3.831'. [ 814.966054][ T9905] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 816.097453][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.149773][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.226840][ T9914] libceph: resolve '400' (ret=-3): failed [ 816.249923][ T9916] netlink: 23 bytes leftover after parsing attributes in process `syz.1.835'. [ 816.589149][ T9922] netem: change failed [ 817.437012][ T9707] veth0_vlan: entered promiscuous mode [ 817.540857][ T9707] veth1_vlan: entered promiscuous mode [ 817.677441][ T5779] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 818.911967][ T9707] veth0_macvtap: entered promiscuous mode [ 818.963244][ T5779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.978686][ T9707] veth1_macvtap: entered promiscuous mode [ 818.994939][ T5779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 819.214947][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.474832][ T5779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.520704][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.553775][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.591027][ T5779] usb 2-1: Product: syz [ 819.595290][ T5779] usb 2-1: Manufacturer: syz [ 819.643981][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.677641][ T5779] usb 2-1: SerialNumber: syz [ 819.740067][ T5779] cdc_mbim 2-1:1.0: skipping garbage [ 819.746533][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.822415][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.897161][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.958093][ T9927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 819.965301][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.200609][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.272206][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.598545][ T9955] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 820.626041][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.724027][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.901795][ T9707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.950285][ T9707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.962271][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.099122][ T5779] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 822.105375][ T5779] cdc_mbim 2-1:1.0: bind() failure [ 822.121018][ T5779] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 822.137202][ T5779] cdc_ncm 2-1:1.1: bind() failure [ 822.164570][ T5779] usb 2-1: USB disconnect, device number 15 [ 822.232392][ T9707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.247498][ T9707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.256353][ T9707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.277827][ T9707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.555346][ T9968] netlink: 23 bytes leftover after parsing attributes in process `syz.0.843'. [ 825.694227][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.750271][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.903468][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.953092][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.170637][ T9986] netlink: 23 bytes leftover after parsing attributes in process `syz.0.848'. [ 828.138680][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.189617][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.260793][T10001] libceph: resolve '400' (ret=-3): failed [ 832.216302][T10019] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 832.456366][T10019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 832.544327][T10021] bond1: (slave veth0_to_bond): making interface the new active one [ 832.563098][T10021] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 833.384733][T10022] loop1: detected capacity change from 0 to 4096 [ 833.474684][T10022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.637256][ T5827] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 834.298458][ T28] audit: type=1800 audit(1785519821.340:242): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.853" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 834.426438][T10035] netlink: 23 bytes leftover after parsing attributes in process `syz.0.855'. [ 834.551912][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.583445][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.637380][ T5827] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 834.723808][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.738571][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.746662][ T5827] usb 4-1: Product: syz [ 834.797164][ T5827] usb 4-1: Manufacturer: syz [ 834.801833][ T5827] usb 4-1: SerialNumber: syz [ 834.850297][ T5827] cdc_mbim 4-1:1.0: skipping garbage [ 835.150798][T10026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.805357][ T5827] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 835.848137][ T5827] cdc_mbim 4-1:1.0: bind() failure [ 835.885019][ T5827] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 835.914997][ T5827] cdc_ncm 4-1:1.1: bind() failure [ 836.253200][T10057] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 838.038042][T10074] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 838.119666][ T5843] usb 4-1: USB disconnect, device number 17 [ 838.613880][T10078] kernel profiling enabled (shift: 5) [ 839.305547][T10093] futex_wake_op: syz.4.860 tries to shift op by 144; fix this program [ 839.357443][T10093] loop4: detected capacity change from 0 to 256 [ 839.554980][T10093] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 839.663314][ T28] audit: type=1800 audit(1785519826.770:243): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.860" name="file1" dev="loop4" ino=1048682 res=0 errno=0 [ 839.807181][T10092] bio_check_eod: 1521 callbacks suppressed [ 839.807200][T10092] syz.4.860: attempt to access beyond end of device [ 839.807200][T10092] loop4: rw=524288, sector=5792, nr_sectors = 256 limit=256 [ 839.810274][T10093] syz.4.860: attempt to access beyond end of device [ 839.810274][T10093] loop4: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 839.813847][T10092] syz.4.860: attempt to access beyond end of device [ 839.813847][T10092] loop4: rw=0, sector=5920, nr_sectors = 8 limit=256 [ 839.835868][T10093] syz.4.860: attempt to access beyond end of device [ 839.835868][T10093] loop4: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 839.841846][T10092] syz.4.860: attempt to access beyond end of device [ 839.841846][T10092] loop4: rw=0, sector=5920, nr_sectors = 8 limit=256 [ 839.855239][T10093] syz.4.860: attempt to access beyond end of device [ 839.855239][T10093] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 839.870102][T10092] syz.4.860: attempt to access beyond end of device [ 839.870102][T10092] loop4: rw=0, sector=5920, nr_sectors = 8 limit=256 [ 839.882323][T10093] syz.4.860: attempt to access beyond end of device [ 839.882323][T10093] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 839.895249][T10092] syz.4.860: attempt to access beyond end of device [ 839.895249][T10092] loop4: rw=0, sector=5920, nr_sectors = 8 limit=256 [ 839.908776][T10093] syz.4.860: attempt to access beyond end of device [ 839.908776][T10093] loop4: rw=0, sector=664, nr_sectors = 8 limit=256 [ 840.411320][T10096] misc userio: Invalid payload size [ 840.969377][T10095] netlink: 23 bytes leftover after parsing attributes in process `syz.3.859'. [ 841.561846][T10111] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 842.715097][T10119] loop1: detected capacity change from 0 to 256 [ 844.429449][T10118] futex_wake_op: syz.1.864 tries to shift op by 144; fix this program [ 844.512089][T10119] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 844.545998][ T28] audit: type=1800 audit(1785519831.670:244): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.864" name="file1" dev="loop1" ino=1048683 res=0 errno=0 [ 847.883044][T10135] futex_wake_op: syz.3.868 tries to shift op by 144; fix this program [ 847.898978][T10135] loop3: detected capacity change from 0 to 256 [ 847.914376][T10132] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 847.970310][T10135] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 847.997941][ T28] audit: type=1800 audit(1785519835.130:245): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.868" name="file1" dev="loop3" ino=1048684 res=0 errno=0 [ 848.139168][T10135] bio_check_eod: 1439 callbacks suppressed [ 848.139188][T10135] syz.3.868: attempt to access beyond end of device [ 848.139188][T10135] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 848.229050][T10131] syz.3.868: attempt to access beyond end of device [ 848.229050][T10131] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 848.245232][T10131] syz.3.868: attempt to access beyond end of device [ 848.245232][T10131] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 848.259111][T10131] syz.3.868: attempt to access beyond end of device [ 848.259111][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 848.272514][T10131] syz.3.868: attempt to access beyond end of device [ 848.272514][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 848.285832][T10131] syz.3.868: attempt to access beyond end of device [ 848.285832][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 848.299359][T10131] syz.3.868: attempt to access beyond end of device [ 848.299359][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 848.313538][T10131] syz.3.868: attempt to access beyond end of device [ 848.313538][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 848.327489][T10131] syz.3.868: attempt to access beyond end of device [ 848.327489][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 848.342189][T10131] syz.3.868: attempt to access beyond end of device [ 848.342189][T10131] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 849.697092][T10150] futex_wake_op: syz.1.871 tries to shift op by 144; fix this program [ 849.744899][T10150] loop1: detected capacity change from 0 to 256 [ 851.789290][T10150] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 851.821897][ T28] audit: type=1800 audit(1785519838.950:246): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.871" name="file1" dev="loop1" ino=1048685 res=0 errno=0 [ 852.290970][T10158] netem: change failed [ 853.202629][T10162] loop4: detected capacity change from 0 to 8192 [ 853.297942][T10162] loop4: p1 p2 p3 p4 < > [ 853.302737][T10162] loop4: partition table partially beyond EOD, truncated [ 853.311093][T10162] loop4: p1 start 100663296 is beyond EOD, truncated [ 853.318000][T10162] loop4: p2 size 590592 extends beyond EOD, truncated [ 853.333668][T10162] loop4: p3 start 4294967295 is beyond EOD, truncated [ 853.340779][T10162] loop4: p4 start 117440516 is beyond EOD, truncated [ 855.966969][T10174] IPv6: sit2: Disabled Multicast RS [ 855.976710][T10174] sit2: entered allmulticast mode [ 857.570267][T10170] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 858.472582][T10014] udevd[10014]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 858.648586][T10014] udevd[10014]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 859.628804][T10195] lo speed is unknown, defaulting to 1000 [ 860.094543][T10193] sctp: failed to load transform for md5: -2 [ 862.237317][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 862.248414][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 862.256606][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 862.265510][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 862.281317][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 862.409625][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.549913][T10227] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 863.598651][T10230] /dev/nullb0: Can't open blockdev [ 863.828310][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.944824][T10216] lo speed is unknown, defaulting to 1000 [ 864.063283][T10237] futex_wake_op: syz.4.883 tries to shift op by 144; fix this program [ 864.110665][T10237] loop4: detected capacity change from 0 to 256 [ 864.261482][T10237] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 864.359262][ T28] audit: type=1800 audit(1785519851.460:247): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.883" name="file1" dev="loop4" ino=1048686 res=0 errno=0 [ 864.517588][ T5086] Bluetooth: hci2: command tx timeout [ 864.901386][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.942831][T10226] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 865.289509][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.725975][T10250] Cannot find set identified by id 0 to match [ 866.827198][ T5086] Bluetooth: hci2: command tx timeout [ 866.912869][T10257] loop1: detected capacity change from 0 to 256 [ 866.984287][T10257] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 867.019036][ T28] audit: type=1800 audit(1785519854.130:248): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.886" name="file1" dev="loop1" ino=1048687 res=0 errno=0 [ 867.080217][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.337428][T10273] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 868.693253][T10284] futex_wake_op: syz.3.892 tries to shift op by 144; fix this program [ 868.755733][T10284] loop3: detected capacity change from 0 to 256 [ 868.897581][ T5086] Bluetooth: hci2: command tx timeout [ 869.095072][T10284] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 869.273243][T10283] bio_check_eod: 2150 callbacks suppressed [ 869.273261][T10283] syz.3.892: attempt to access beyond end of device [ 869.273261][T10283] loop3: rw=524288, sector=6784, nr_sectors = 256 limit=256 [ 869.275399][T10284] syz.3.892: attempt to access beyond end of device [ 869.275399][T10284] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 869.279466][T10283] syz.3.892: attempt to access beyond end of device [ 869.279466][T10283] loop3: rw=0, sector=6912, nr_sectors = 8 limit=256 [ 869.301580][T10284] syz.3.892: attempt to access beyond end of device [ 869.301580][T10284] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 869.307721][T10283] syz.3.892: attempt to access beyond end of device [ 869.307721][T10283] loop3: rw=0, sector=6912, nr_sectors = 8 limit=256 [ 869.321810][T10284] syz.3.892: attempt to access beyond end of device [ 869.321810][T10284] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 869.335270][T10283] syz.3.892: attempt to access beyond end of device [ 869.335270][T10283] loop3: rw=0, sector=6912, nr_sectors = 8 limit=256 [ 869.348776][T10284] syz.3.892: attempt to access beyond end of device [ 869.348776][T10284] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 869.361297][T10283] syz.3.892: attempt to access beyond end of device [ 869.361297][T10283] loop3: rw=0, sector=6912, nr_sectors = 8 limit=256 [ 869.374738][T10284] syz.3.892: attempt to access beyond end of device [ 869.374738][T10284] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 869.586726][ T28] audit: type=1800 audit(1785519856.290:249): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.892" name="file1" dev="loop3" ino=1048688 res=0 errno=0 [ 869.902444][T10216] chnl_net:caif_netlink_parms(): no params data found [ 870.489646][T10289] 9pnet_virtio: no channels available for device 127.0.0.1 [ 872.587684][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.594067][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.617180][ T5086] Bluetooth: hci2: command tx timeout [ 873.599158][ T5774] ffs_data_put(): freeing [ 873.753038][T10304] loop1: detected capacity change from 0 to 256 [ 874.073087][T10216] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.127454][T10216] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.178045][T10216] bridge_slave_0: entered allmulticast mode [ 874.209261][T10216] bridge_slave_0: entered promiscuous mode [ 874.220049][T10216] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.227469][T10216] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.234786][T10216] bridge_slave_1: entered allmulticast mode [ 874.242983][T10216] bridge_slave_1: entered promiscuous mode [ 874.508676][T10216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.584354][T10216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.746634][T10216] team0: Port device team_slave_0 added [ 874.851136][T10216] team0: Port device team_slave_1 added [ 876.488329][T10316] bio_check_eod: 1807 callbacks suppressed [ 876.488346][T10316] syz.4.896: attempt to access beyond end of device [ 876.488346][T10316] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 876.507256][T10316] efs: cannot read volume header [ 876.837483][T10216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.870670][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.927255][T10216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.048141][T10216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.055688][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.085964][T10216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.193871][T10328] loop1: detected capacity change from 0 to 256 [ 877.304096][T10328] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 877.380685][ T28] audit: type=1800 audit(1785519864.510:250): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.899" name="file1" dev="loop1" ino=1048694 res=0 errno=0 [ 877.435962][T10325] ./file0: Can't open blockdev [ 877.475214][T10322] pim6reg: entered allmulticast mode [ 877.482241][T10323] pim6reg: left allmulticast mode [ 877.818945][T10216] hsr_slave_0: entered promiscuous mode [ 877.849103][T10216] hsr_slave_1: entered promiscuous mode [ 877.866540][T10216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.895578][T10216] Cannot create hsr debugfs directory [ 878.165725][ T179] IPVS: starting estimator thread 0... [ 878.813973][T10337] IPVS: using max 21 ests per chain, 50400 per kthread [ 878.992852][T10343] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 879.001262][T10343] netlink: 244 bytes leftover after parsing attributes in process `syz.4.900'. [ 879.010517][T10343] NCSI netlink: No device for ifindex 0 [ 881.518055][ T1032] dvmrp8 (unregistering): left allmulticast mode [ 881.605724][T10356] netlink: 23 bytes leftover after parsing attributes in process `syz.4.904'. [ 882.127424][ T1032] hsr_slave_0: left promiscuous mode [ 882.157393][ T1032] hsr_slave_1: left promiscuous mode [ 882.183900][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.217218][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.376660][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.485439][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.249567][ T1032] veth1_macvtap: left promiscuous mode [ 883.269268][ T1032] veth0_macvtap: left promiscuous mode [ 883.274970][ T1032] veth1_vlan: left promiscuous mode [ 883.311235][ T1032] veth0_vlan: left promiscuous mode [ 883.937607][ T179] IPVS: starting estimator thread 0... [ 884.238779][T10376] IPVS: using max 22 ests per chain, 52800 per kthread [ 885.714206][T10392] futex_wake_op: syz.1.909 tries to shift op by 144; fix this program [ 885.772360][T10392] loop1: detected capacity change from 0 to 256 [ 886.215449][T10392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 886.407207][ T28] audit: type=1800 audit(1785519873.410:251): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.909" name="file1" dev="loop1" ino=1048695 res=0 errno=0 [ 886.431583][T10391] syz.1.909: attempt to access beyond end of device [ 886.431583][T10391] loop1: rw=524288, sector=6896, nr_sectors = 256 limit=256 [ 886.434091][T10392] syz.1.909: attempt to access beyond end of device [ 886.434091][T10392] loop1: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 886.445792][T10391] syz.1.909: attempt to access beyond end of device [ 886.445792][T10391] loop1: rw=0, sector=7024, nr_sectors = 8 limit=256 [ 886.467671][T10392] syz.1.909: attempt to access beyond end of device [ 886.467671][T10392] loop1: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 886.472840][T10391] syz.1.909: attempt to access beyond end of device [ 886.472840][T10391] loop1: rw=0, sector=7024, nr_sectors = 8 limit=256 [ 886.486357][T10392] syz.1.909: attempt to access beyond end of device [ 886.486357][T10392] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 886.499812][T10391] syz.1.909: attempt to access beyond end of device [ 886.499812][T10391] loop1: rw=0, sector=7024, nr_sectors = 8 limit=256 [ 886.513682][T10392] syz.1.909: attempt to access beyond end of device [ 886.513682][T10392] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 886.526243][T10391] syz.1.909: attempt to access beyond end of device [ 886.526243][T10391] loop1: rw=0, sector=7024, nr_sectors = 8 limit=256 [ 886.553012][T10392] syz.1.909: attempt to access beyond end of device [ 886.553012][T10392] loop1: rw=0, sector=664, nr_sectors = 8 limit=256 [ 887.096525][ T1032] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 887.114195][ T1032] bond1 (unregistering): Released all slaves [ 887.191294][ T1032] pim6reg (unregistering): left allmulticast mode [ 888.284660][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 888.360694][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 888.395100][T10405] netlink: 23 bytes leftover after parsing attributes in process `syz.1.912'. [ 888.438722][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.503028][ T1032] bond0 (unregistering): (slave 30): Releasing backup interface [ 889.040009][ T1032] bond0 (unregistering): Released all slaves [ 889.187031][T10386] netem: change failed [ 889.479927][T10216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 889.553511][T10216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 889.614414][T10216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 890.355321][T10216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 890.499646][ C1] ------------[ cut here ]------------ [ 890.505223][ C1] WARNING: CPU: 1 PID: 10413 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 890.515583][ C1] Modules linked in: [ 890.519569][ C1] CPU: 1 PID: 10413 Comm: syz.4.915 Not tainted syzkaller #0 [ 890.527060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.537247][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 890.543708][ C1] Code: f7 4c 89 ef e8 90 69 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 eb 82 7c f7 0f 0b e9 61 f8 ff ff e8 df 82 7c f7 <0f> 0b e9 85 fb ff ff e8 d3 82 7c f7 48 c7 c7 40 bf 65 8e 4c 89 e6 [ 890.563484][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 890.569655][ C1] RAX: ffffffff8a0aec41 RBX: dffffc0000000000 RCX: ffff88801b705a00 [ 890.577664][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 890.585648][ C1] RBP: 0000000000000000 R08: ffff88801b705a00 R09: 0000000000000003 [ 890.593662][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806b6c2440 [ 890.601704][ C1] R13: ffff88801b280c24 R14: ffff88806b6c2930 R15: ffff88801b280c00 [ 890.609743][ C1] FS: 00007f339039b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 890.618732][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.625331][ C1] CR2: 00007f236c06095e CR3: 0000000076e3c000 CR4: 00000000003506e0 [ 890.633360][ C1] Call Trace: [ 890.636708][ C1] [ 890.639627][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 890.645255][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 890.650763][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 890.657573][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 890.663175][ C1] __iterate_interfaces+0x225/0x4c0 [ 890.668432][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 890.674687][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 890.681921][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 890.688203][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 890.695245][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 890.700477][ C1] ? hw_scan_work+0xf10/0xf10 [ 890.705177][ C1] __hrtimer_run_queues+0x525/0xc10 [ 890.710494][ C1] ? hrtimer_interrupt+0x980/0x980 [ 890.715618][ C1] ? read_tsc+0x9/0x20 [ 890.719758][ C1] hrtimer_run_softirq+0x177/0x290 [ 890.724900][ C1] handle_softirqs+0x27d/0x820 [ 890.729715][ C1] ? read_tsc+0x9/0x20 [ 890.733793][ C1] ? ktime_get+0x24b/0x280 [ 890.738252][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 890.743029][ C1] ? do_softirq+0x1a0/0x1a0 [ 890.747607][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 890.752838][ C1] __irq_exit_rcu+0xd3/0x190 [ 890.757481][ C1] ? irq_exit_rcu+0x20/0x20 [ 890.762007][ C1] irq_exit_rcu+0x9/0x20 [ 890.766268][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 890.772006][ C1] [ 890.774941][ C1] [ 890.777958][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 890.784024][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 890.790600][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b 6f c6 f6 65 8b 05 9c 3d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 890.810256][ C1] RSP: 0018:ffffc900033077c0 EFLAGS: 00000206 [ 890.816343][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 4052660fb9c74400 [ 890.824354][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 890.832365][ C1] RBP: ffffc90003307850 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 890.840401][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 890.848461][ C1] R13: ffff8880b8f295c0 R14: ffff8880b8f295c0 R15: 1ffff92000660ef8 [ 890.856599][ C1] ? _raw_spin_unlock+0x40/0x40 [ 890.861524][ C1] ? rcu_is_watching+0x15/0xb0 [ 890.866321][ C1] __mod_timer+0x9b0/0xd60 [ 890.870828][ C1] schedule_timeout+0x183/0x2d0 [ 890.875730][ C1] ? console_conditional_schedule+0x40/0x40 [ 890.881700][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 890.887742][ C1] ? update_process_times+0x1b0/0x1b0 [ 890.893125][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 890.898363][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 890.903571][ C1] ? snd_rawmidi_write+0x371/0xb90 [ 890.908820][ C1] snd_rawmidi_write+0x3bd/0xb90 [ 890.913796][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 890.918854][ C1] ? do_task_dead+0xd0/0xd0 [ 890.923371][ C1] ? end_current_label_crit_section+0x149/0x170 [ 890.929698][ C1] ? common_file_perm+0x198/0x1f0 [ 890.934759][ C1] ? fsnotify_perm+0x5d/0x5e0 [ 890.939513][ C1] ? security_file_permission+0x79/0xa0 [ 890.945086][ C1] do_iter_write+0x4e5/0xc50 [ 890.949743][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 890.954796][ C1] ? vfs_iter_write+0xa0/0xa0 [ 890.959526][ C1] ? __import_iovec+0x3fa/0x850 [ 890.964422][ C1] ? import_iovec+0x73/0xa0 [ 890.968990][ C1] do_writev+0x27f/0x480 [ 890.973238][ C1] ? do_readv+0x460/0x460 [ 890.977609][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 890.983599][ C1] ? lock_chain_count+0x20/0x20 [ 890.988489][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 890.993709][ C1] do_syscall_64+0x55/0xb0 [ 890.998165][ C1] ? clear_bhb_loop+0x40/0x90 [ 891.002874][ C1] ? clear_bhb_loop+0x40/0x90 [ 891.007590][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.013523][ C1] RIP: 0033:0x7f338f59e019 [ 891.017986][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.037668][ C1] RSP: 002b:00007f339039b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 891.046098][ C1] RAX: ffffffffffffffda RBX: 00007f338f825fa0 RCX: 00007f338f59e019 [ 891.054107][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 891.062127][ C1] RBP: 00007f338f63500c R08: 0000000000000000 R09: 0000000000000000 [ 891.070136][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.078155][ C1] R13: 00007f338f826038 R14: 00007f338f825fa0 R15: 00007fff23bf2d58 [ 891.086162][ C1] [ 891.089214][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 891.096496][ C1] CPU: 1 PID: 10413 Comm: syz.4.915 Not tainted syzkaller #0 [ 891.103867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.113952][ C1] Call Trace: [ 891.117260][ C1] [ 891.120106][ C1] dump_stack_lvl+0x18c/0x250 [ 891.124831][ C1] ? show_regs_print_info+0x20/0x20 [ 891.130039][ C1] ? load_image+0x420/0x420 [ 891.134590][ C1] panic+0x2ca/0x720 [ 891.138494][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 891.143020][ C1] __warn+0x2e0/0x470 [ 891.147023][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 891.152768][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 891.158498][ C1] report_bug+0x2be/0x4f0 [ 891.162891][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 891.168618][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 891.174348][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 891.180076][ C1] handle_bug+0xcf/0x120 [ 891.184323][ C1] exc_invalid_op+0x1a/0x50 [ 891.188828][ C1] asm_exc_invalid_op+0x1a/0x20 [ 891.193693][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 891.200032][ C1] Code: f7 4c 89 ef e8 90 69 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 eb 82 7c f7 0f 0b e9 61 f8 ff ff e8 df 82 7c f7 <0f> 0b e9 85 fb ff ff e8 d3 82 7c f7 48 c7 c7 40 bf 65 8e 4c 89 e6 [ 891.219645][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 891.225747][ C1] RAX: ffffffff8a0aec41 RBX: dffffc0000000000 RCX: ffff88801b705a00 [ 891.233728][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 891.241696][ C1] RBP: 0000000000000000 R08: ffff88801b705a00 R09: 0000000000000003 [ 891.249666][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806b6c2440 [ 891.257664][ C1] R13: ffff88801b280c24 R14: ffff88806b6c2930 R15: ffff88801b280c00 [ 891.265658][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 891.271400][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 891.277155][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 891.282725][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 891.288211][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 891.295006][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 891.300586][ C1] __iterate_interfaces+0x225/0x4c0 [ 891.305792][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 891.312039][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 891.319258][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 891.325532][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 891.332565][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 891.337768][ C1] ? hw_scan_work+0xf10/0xf10 [ 891.342445][ C1] __hrtimer_run_queues+0x525/0xc10 [ 891.347656][ C1] ? hrtimer_interrupt+0x980/0x980 [ 891.352771][ C1] ? read_tsc+0x9/0x20 [ 891.356853][ C1] hrtimer_run_softirq+0x177/0x290 [ 891.361972][ C1] handle_softirqs+0x27d/0x820 [ 891.366746][ C1] ? read_tsc+0x9/0x20 [ 891.370812][ C1] ? ktime_get+0x24b/0x280 [ 891.375233][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 891.380004][ C1] ? do_softirq+0x1a0/0x1a0 [ 891.384514][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 891.389729][ C1] __irq_exit_rcu+0xd3/0x190 [ 891.394322][ C1] ? irq_exit_rcu+0x20/0x20 [ 891.398865][ C1] irq_exit_rcu+0x9/0x20 [ 891.403124][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 891.408768][ C1] [ 891.411715][ C1] [ 891.414655][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 891.420665][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 891.427222][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b 6f c6 f6 65 8b 05 9c 3d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 891.446837][ C1] RSP: 0018:ffffc900033077c0 EFLAGS: 00000206 [ 891.452908][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 4052660fb9c74400 [ 891.460884][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 891.468858][ C1] RBP: ffffc90003307850 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 891.476832][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 891.484896][ C1] R13: ffff8880b8f295c0 R14: ffff8880b8f295c0 R15: 1ffff92000660ef8 [ 891.492906][ C1] ? _raw_spin_unlock+0x40/0x40 [ 891.497781][ C1] ? rcu_is_watching+0x15/0xb0 [ 891.502580][ C1] __mod_timer+0x9b0/0xd60 [ 891.507025][ C1] schedule_timeout+0x183/0x2d0 [ 891.511998][ C1] ? console_conditional_schedule+0x40/0x40 [ 891.517929][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 891.523974][ C1] ? update_process_times+0x1b0/0x1b0 [ 891.529415][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 891.534677][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 891.539928][ C1] ? snd_rawmidi_write+0x371/0xb90 [ 891.545081][ C1] snd_rawmidi_write+0x3bd/0xb90 [ 891.550081][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 891.555207][ C1] ? do_task_dead+0xd0/0xd0 [ 891.559730][ C1] ? end_current_label_crit_section+0x149/0x170 [ 891.566035][ C1] ? common_file_perm+0x198/0x1f0 [ 891.571113][ C1] ? fsnotify_perm+0x5d/0x5e0 [ 891.575826][ C1] ? security_file_permission+0x79/0xa0 [ 891.581422][ C1] do_iter_write+0x4e5/0xc50 [ 891.586060][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 891.591115][ C1] ? vfs_iter_write+0xa0/0xa0 [ 891.595808][ C1] ? __import_iovec+0x3fa/0x850 [ 891.600680][ C1] ? import_iovec+0x73/0xa0 [ 891.605198][ C1] do_writev+0x27f/0x480 [ 891.609457][ C1] ? do_readv+0x460/0x460 [ 891.613803][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 891.619797][ C1] ? lock_chain_count+0x20/0x20 [ 891.624658][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 891.629876][ C1] do_syscall_64+0x55/0xb0 [ 891.634318][ C1] ? clear_bhb_loop+0x40/0x90 [ 891.639003][ C1] ? clear_bhb_loop+0x40/0x90 [ 891.643685][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.649600][ C1] RIP: 0033:0x7f338f59e019 [ 891.654044][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.673680][ C1] RSP: 002b:00007f339039b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 891.682147][ C1] RAX: ffffffffffffffda RBX: 00007f338f825fa0 RCX: 00007f338f59e019 [ 891.690142][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 891.698125][ C1] RBP: 00007f338f63500c R08: 0000000000000000 R09: 0000000000000000 [ 891.706106][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.714172][ C1] R13: 00007f338f826038 R14: 00007f338f825fa0 R15: 00007fff23bf2d58 [ 891.722191][ C1] [ 891.725823][ C1] Kernel Offset: disabled [ 891.730230][ C1] Rebooting in 86400 seconds..