last executing test programs: 16m44.60568778s ago: executing program 32 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 15m21.941036775s ago: executing program 33 (id=121): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x21, 0x2, 0x10000000000002) 12m41.394850214s ago: executing program 1 (id=327): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) unshare(0x24020400) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'wlan1\x00'}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00'}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) 12m39.155386694s ago: executing program 1 (id=331): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) read$FUSE(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x496d9d793d7b54ea) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) flock(r6, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$yama_ptrace_scope(r7, &(0x7f0000000480)='2\x00', 0x2) sendmmsg$inet(r5, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D$\r'], 0x38}}], 0x1, 0x46000) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x842801) ioctl$USBDEVFS_DISCARDURB(r8, 0x550b, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f00000002c0)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4$\xae$\x91&6n @\xf4\xd6A\xdb\xd7+\x95,\x06r\xefz%\xeab\x15\xaeYB\xc5\x13@\xcc\xca\n@\x06\\\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\xb8\xce_\xdd\n\x1d/x\x81:E\x96\\\\//\xa3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\b\x00\x00\x00\x00\xdcx\x00\"\ts\xe3\x19\x11z \xd2\xfb\xc1\x1d\xb0\xdfg\xb2\f\x14\xdb\xae\x02<\xa0\x99\xcd\xf4\xec<\xf5\xa7;\x1b:\x8b\xb1\xd1\xc7\x9dW\x01\xad\x7f\r\xe9\xb2\xa3\xfe~\x06\xe76G\x045\x91\xe6\xd3\v\xdf\x14PF\x9d.V\x02\b\x9d}!\xc8@\xcd\xc7`L\xa0o\xb7U=<\x15o@\x14(s\xc0\xcd\r8=X', 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 12m35.701537883s ago: executing program 1 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x4) syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 12m34.353530815s ago: executing program 1 (id=343): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20040000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r4 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xa, 0x5, 0x8, 0xfdff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) 12m30.156000707s ago: executing program 1 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00005a6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000247000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000370000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd30}, 0x68) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r4, &(0x7f0000000a40)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x10, @loopback, 0x7fffffff}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000ac0)="03baa9d45db4bf356e160c8510c5b8293b70a78e24880700b9fec1a2a2c65893b971f9830bf9a00c5ce0b850a3ee135b643405544367481ee71cde903ce73a1e35e1a547ae010d61fe5bce5b5bd87bd7e670de6ed347688d3b010b3d3aba04ab896b83104ee67a4079899dc037023c000000a98c17096d37505bffb4c3161cd32e0b", 0x82}, {&(0x7f0000000300)}], 0x2, &(0x7f0000000440)=[{0x10, 0x102, 0x93dc}, {0x10, 0x114, 0xfffffff0}], 0x20}}, {{&(0x7f0000000700)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=[{0x100, 0x111, 0x6, "830c4d9220a9fe438d62a91fe5c748b48be452cb5697541b2f004c171727bcf0ba2aa77af08767887d0e4ffdc902973e5fc62ff0c8882016f18bb88796834bf60c8b92ed14ad66d1b0825de64861601b6ff3bb9347ddb0768d5d2a2b36a1eba4c36169256684bc83b645fab756cdc0559719c9357a261b16355adc7e610ef658adf9b216ddcae257e3b3af0a9adfae9aad0216f8020c10ac5b1abbbe8cdbd34bcad9168379ead70c15d89e6ae3556851365755011e9d0c3d306ed1db4c09b7af421fadd7bb2c542230e9016a6472afc2175205847fe0dbb647c33b2e3ebe6e65b3febeda6ce5c47ddce065"}, {0x80, 0x104, 0x3, "f802896d88a1eac7ec3d39f9ab0ed15a7035efc1ea14fb12f44dbc713c40fd611e4a7e2cf3fd59c54ff67fdc96d3148a92bd839d1a223f42c016443ac554e424bf8a133cd2e67cf4bea04701c8eb9528d324f1f2d3485c48b4ba519bd4a8e366816049c5bfb48270f1e6fce30f8d365c"}, {0x50, 0x108, 0x4, "d808e92500d340eaa1b29820a4e6094a25b37a683006436737fd8a288f3a7dfcecb2eab6065ae395bba53b644b1a72221c92a1352e840538b7cc"}], 0x1d0}}], 0x2, 0x404c041) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) io_uring_setup(0x14cf, 0x0) 12m25.679001128s ago: executing program 1 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 12m25.651979039s ago: executing program 2 (id=351): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r4, &(0x7f0000000140)=""/116, 0x74) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 12m22.078532381s ago: executing program 2 (id=355): clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x8, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x24040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 12m18.964582799s ago: executing program 2 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x345, 0x0, 0xffffffffffffffff}]}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x3cde03, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x8000) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) dup2(r4, 0xffffffffffffffff) 12m17.750201128s ago: executing program 2 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x22, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x6, 0x10000) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r6 = gettid() r7 = getpid() rt_tgsigqueueinfo(r7, r6, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 12m16.028745862s ago: executing program 2 (id=364): execve(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, 0x0, 0x4048800) 12m13.277443598s ago: executing program 2 (id=365): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x99, 0x23b) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_frontend(&(0x7f0000001300), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000640)={0x29, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x40800) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000340)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x32) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x800) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee00) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast1, @in=@local, 0x4e23, 0x3, 0x4e22, 0x4, 0x2, 0x80, 0x80, 0x2b}, {0x4, 0x1000, 0x53d, 0x0, 0x2, 0x3f97, 0x8, 0x8}, {0x6, 0x1, 0x2e, 0x7}, 0xbd8d, 0x6e6bb6, 0x1, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4d2, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x3, 0x4, 0x406, 0xd, 0x1ff}}, 0xe8) r7 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x1, 'T'}, &(0x7f0000000680)={0x20, 0x82, 0x1, "98"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, '\x00['}, &(0x7f0000000700)={0x20, 0x84, 0x2, "fa6f"}, 0x0}) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b"]) 12m8.596731775s ago: executing program 34 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 11m56.550683064s ago: executing program 35 (id=365): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x99, 0x23b) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_frontend(&(0x7f0000001300), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000640)={0x29, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x40800) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000340)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x32) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x800) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee00) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast1, @in=@local, 0x4e23, 0x3, 0x4e22, 0x4, 0x2, 0x80, 0x80, 0x2b}, {0x4, 0x1000, 0x53d, 0x0, 0x2, 0x3f97, 0x8, 0x8}, {0x6, 0x1, 0x2e, 0x7}, 0xbd8d, 0x6e6bb6, 0x1, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4d2, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x3, 0x4, 0x406, 0xd, 0x1ff}}, 0xe8) r7 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x1, 'T'}, &(0x7f0000000680)={0x20, 0x82, 0x1, "98"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, '\x00['}, &(0x7f0000000700)={0x20, 0x84, 0x2, "fa6f"}, 0x0}) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b"]) 9m30.425914478s ago: executing program 7 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, r2, 0x2) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="490000000d06010200000000000000000500000211000300686173683a69702c706f7274000000000500"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r5, 0x5501) 9m25.174470253s ago: executing program 7 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(r5, &(0x7f0000000380)=""/153, 0x99) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000600)=[{0x0}], 0x1, 0x1006c, 0x0) close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)={0x428, 0x3f4, 0x20, 0x70bd27, 0x25dfdbfb, {0x4, 0x2, 0x2d, [0xc, 0x6, 0x9, 0x5, 0x81, 0x9, 0xffffffff, 0x0, 0x9, 0x4, 0xd837, 0x6, 0xfe1a, 0x3, 0x6, 0x0, 0x7, 0x1000, 0x7ff, 0x3, 0xa000000, 0x1, 0x4, 0x40000, 0x8, 0x4, 0x51e, 0x4, 0x3, 0x8, 0x6, 0x6, 0x6, 0x7, 0x8000, 0xc, 0x7, 0x3, 0x1, 0x1, 0xf987, 0x76d, 0x8, 0x5, 0x6, 0xbf, 0x2, 0x39d, 0xd89, 0x1, 0x101, 0x800, 0x400, 0x7, 0x1, 0x10, 0x1, 0x2, 0xe, 0x7ff, 0x6, 0x0, 0xfffffff7, 0x9], [0x6, 0x3, 0x6175, 0x8, 0x36c, 0xd, 0x6, 0x6, 0x1, 0x5144, 0xcfce, 0x1000, 0x10001, 0x0, 0x6c, 0x6, 0xffffffff, 0x1ff, 0x9, 0x9, 0xd, 0x1, 0x0, 0xd, 0xfffffffb, 0x0, 0x8129, 0x6, 0x81, 0x5, 0x0, 0xfffffffd, 0xfffffffc, 0x8, 0x0, 0x6, 0x401, 0x9, 0x4, 0x1, 0x1ff, 0x5, 0x3, 0xdb2, 0x401, 0x55fe, 0x6, 0x1, 0x918, 0x6, 0xfffffffb, 0x43, 0x0, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0xfffffff7, 0x3, 0x86, 0xcab, 0x401, 0xfffffffa], [0xa0d6, 0x2, 0x6, 0x0, 0xe, 0x8001, 0x5, 0x8001, 0x0, 0x1ff, 0x5, 0x7ff, 0x8e93, 0x6, 0x2, 0x8, 0x100, 0x7, 0x2, 0x7, 0x0, 0x9, 0xb, 0x1, 0x4, 0x81, 0x1, 0x8001, 0x6, 0x200, 0x8001, 0x1000, 0x4, 0x6, 0x9, 0xa198, 0x7, 0x5143, 0x42, 0x0, 0x370d, 0xa7, 0x0, 0x400, 0x7ee4, 0x10001, 0xffff6209, 0x9, 0xa5a, 0x3, 0x4, 0x4, 0x3, 0x401, 0x5, 0x7, 0x1000, 0x9524, 0x65a8, 0x397ac931, 0xd647, 0x80000000, 0xce12, 0x3], [0x4, 0x7, 0x5, 0x8132, 0xffffffff, 0x5, 0x1, 0x31b9, 0x120000, 0xf54f, 0x7, 0x5f, 0x2, 0x9, 0x3, 0x1, 0x848, 0x2, 0x6, 0x3, 0x4, 0x7, 0x3b539950, 0xb, 0x1, 0x3, 0x9, 0xff, 0xffff0001, 0x7, 0x9, 0x659e, 0xb6, 0x100, 0x4, 0x80, 0x3, 0x9, 0x1, 0x9f, 0x430, 0x7f, 0xd, 0x4, 0x7, 0x400, 0xa, 0x8, 0x6, 0x67, 0x1, 0x7fff, 0x7, 0x1, 0x3, 0x0, 0x1, 0x2, 0xfffffff7, 0x0, 0x3, 0x6, 0x9, 0x2], 0x7, ['%(%:\xa4&\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008850) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x0) 9m21.419284491s ago: executing program 7 (id=545): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r5 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc06d40c0, &(0x7f00000003c0)={[{@nodiscard}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x400}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@oldalloc}]}, 0xf5, 0x48f, &(0x7f0000000980)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9m11.687766426s ago: executing program 7 (id=563): execve(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, 0x0, 0x4048800) 8m54.766202899s ago: executing program 36 (id=563): execve(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, 0x0, 0x4048800) 8m35.710715117s ago: executing program 9 (id=584): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd9077e0b91987b1df57ebd0de93733e577533d9169ae72ac49ab179faa6c888601079ec93f8d966530d30e4de"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 8m33.989422322s ago: executing program 9 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(r5, &(0x7f0000000380)=""/153, 0x99) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000600)=[{0x0}], 0x1, 0x1006c, 0x0) close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)={0x428, 0x3f4, 0x20, 0x70bd27, 0x25dfdbfb, {0x4, 0x2, 0x2d, [0xc, 0x6, 0x9, 0x5, 0x81, 0x9, 0xffffffff, 0x0, 0x9, 0x4, 0xd837, 0x6, 0xfe1a, 0x3, 0x6, 0x0, 0x7, 0x1000, 0x7ff, 0x3, 0xa000000, 0x1, 0x4, 0x40000, 0x8, 0x4, 0x51e, 0x4, 0x3, 0x8, 0x6, 0x6, 0x6, 0x7, 0x8000, 0xc, 0x7, 0x3, 0x1, 0x1, 0xf987, 0x76d, 0x8, 0x5, 0x6, 0xbf, 0x2, 0x39d, 0xd89, 0x1, 0x101, 0x800, 0x400, 0x7, 0x1, 0x10, 0x1, 0x2, 0xe, 0x7ff, 0x6, 0x0, 0xfffffff7, 0x9], [0x6, 0x3, 0x6175, 0x8, 0x36c, 0xd, 0x6, 0x6, 0x1, 0x5144, 0xcfce, 0x1000, 0x10001, 0x0, 0x6c, 0x6, 0xffffffff, 0x1ff, 0x9, 0x9, 0xd, 0x1, 0x0, 0xd, 0xfffffffb, 0x0, 0x8129, 0x6, 0x81, 0x5, 0x0, 0xfffffffd, 0xfffffffc, 0x8, 0x0, 0x6, 0x401, 0x9, 0x4, 0x1, 0x1ff, 0x5, 0x3, 0xdb2, 0x401, 0x55fe, 0x6, 0x1, 0x918, 0x6, 0xfffffffb, 0x43, 0x0, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0xfffffff7, 0x3, 0x86, 0xcab, 0x401, 0xfffffffa], [0xa0d6, 0x2, 0x6, 0x0, 0xe, 0x8001, 0x5, 0x8001, 0x0, 0x1ff, 0x5, 0x7ff, 0x8e93, 0x6, 0x2, 0x8, 0x100, 0x7, 0x2, 0x7, 0x0, 0x9, 0xb, 0x1, 0x4, 0x81, 0x1, 0x8001, 0x6, 0x200, 0x8001, 0x1000, 0x4, 0x6, 0x9, 0xa198, 0x7, 0x5143, 0x42, 0x0, 0x370d, 0xa7, 0x0, 0x400, 0x7ee4, 0x10001, 0xffff6209, 0x9, 0xa5a, 0x3, 0x4, 0x4, 0x3, 0x401, 0x5, 0x7, 0x1000, 0x9524, 0x65a8, 0x397ac931, 0xd647, 0x80000000, 0xce12, 0x3], [0x4, 0x7, 0x5, 0x8132, 0xffffffff, 0x5, 0x1, 0x31b9, 0x120000, 0xf54f, 0x7, 0x5f, 0x2, 0x9, 0x3, 0x1, 0x848, 0x2, 0x6, 0x3, 0x4, 0x7, 0x3b539950, 0xb, 0x1, 0x3, 0x9, 0xff, 0xffff0001, 0x7, 0x9, 0x659e, 0xb6, 0x100, 0x4, 0x80, 0x3, 0x9, 0x1, 0x9f, 0x430, 0x7f, 0xd, 0x4, 0x7, 0x400, 0xa, 0x8, 0x6, 0x67, 0x1, 0x7fff, 0x7, 0x1, 0x3, 0x0, 0x1, 0x2, 0xfffffff7, 0x0, 0x3, 0x6, 0x9, 0x2], 0x7, ['%(%:\xa4&\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008850) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x0) 8m30.595796648s ago: executing program 9 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) io_uring_setup(0xd94, &(0x7f0000000800)={0x0, 0x74ef, 0x40, 0x2, 0x278}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 8m12.582329885s ago: executing program 37 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) io_uring_setup(0xd94, &(0x7f0000000800)={0x0, 0x74ef, 0x40, 0x2, 0x278}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 2m12.551560583s ago: executing program 8 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xe, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2m11.855923335s ago: executing program 8 (id=1737): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, 0x0) fchdir(r2) r3 = open(&(0x7f0000000100)='.\x00', 0x40080, 0x150) getdents(r3, 0x0, 0x0) 2m9.653080124s ago: executing program 8 (id=1742): clock_gettime(0x3, &(0x7f0000000040)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x8, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x24040000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) read$FUSE(r0, 0x0, 0x0) 2m8.420113713s ago: executing program 8 (id=1746): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) 2m7.968253447s ago: executing program 8 (id=1748): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x24040000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) read$FUSE(r0, 0x0, 0x0) 2m7.471486442s ago: executing program 8 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040811) 2m6.541231272s ago: executing program 38 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040811) 23.21495324s ago: executing program 3 (id=2050): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x10}}, 0x40019) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 19.488961408s ago: executing program 3 (id=2056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, 0x0, 0x0, 0x4, 0xffff) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) socket$pptp(0x18, 0x1, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) io_uring_setup(0x28a6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x4, 0x1) getdents64(r3, 0xffffffffffffffff, 0x43) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00442f00fe80000000009c1059200000000000bbfe8000000000000000000000000000aa0c2088be0000000201008100000086dd080088be000000031c4885100100000000007b40080022eb00000002230223090200"], 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x4}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) syz_io_uring_setup(0x39d, &(0x7f0000000080)={0x0, 0x20000851, 0x200, 0x3, 0x3a1}, &(0x7f0000000100), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 15.705403906s ago: executing program 4 (id=2060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r5, r4}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ptrace$setopts(0x4200, r0, 0x8000000000000001, 0xc93168559fb45e18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mount$afs(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x4, &(0x7f0000000040)) 15.474814653s ago: executing program 3 (id=2062): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x10}}, 0x40019) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 13.263617193s ago: executing program 4 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000016000133f2c96a6eee"], 0x78}}, 0x0) 11.378975892s ago: executing program 4 (id=2067): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x9, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 10.889451927s ago: executing program 3 (id=2070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}, {&(0x7f0000000700)="c38d022478f17ee2de8249dcbaaa92300a45354d08b2e5b3bb246b461e83c431a55802216549339251e4675813669291cdc3ed7f47063641988894ce4fb48329654d52a47eee82e6081d602ea8792620f9949f898e6338914b229e1f526866f5cfc735c96cda0bc4d5e17df420cad0a30fe78e25c847e31f4807055f507a9a3a91aee0a8235c5606", 0xffcc}], 0x2}, 0x4005) 10.300048036s ago: executing program 5 (id=2072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, 0x0, 0x0, 0x4, 0xffff) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) socket$pptp(0x18, 0x1, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) io_uring_setup(0x28a6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x4, 0x1) getdents64(r3, 0xffffffffffffffff, 0x43) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00442f00fe80000000009c1059200000000000bbfe8000000000000000000000000000aa0c2088be0000000201008100000086dd080088be000000031c4885100100000000007b40080022eb00000002230223090200"], 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x4}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) syz_io_uring_setup(0x39d, &(0x7f0000000080)={0x0, 0x20000851, 0x200, 0x3, 0x3a1}, &(0x7f0000000100), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 10.139645611s ago: executing program 3 (id=2073): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x10}}, 0x40019) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.787614112s ago: executing program 6 (id=2074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4399f472db23099974db8bf4a31accb1cc69f10664dcc06110f8ef4f73c34947bd0a3aabaef5d002a18326c5af0dff077", 0x50}], 0x1}, 0x20008011) 8.510874852s ago: executing program 5 (id=2077): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xc2041, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.9958423s ago: executing program 4 (id=2078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pptp(0x18, 0x1, 0x2) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7a, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x4}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) 6.66215784s ago: executing program 3 (id=2079): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, 0x0, 0x0, 0x4, 0xffff) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) socket$pptp(0x18, 0x1, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) io_uring_setup(0x28a6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x4, 0x1) getdents64(r4, 0xffffffffffffffff, 0x43) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00442f00fe80000000009c1059200000000000bbfe8000000000000000000000000000aa0c2088be0000000201008100000086dd080088be000000031c4885100100000000007b40080022eb00000002230223090200"], 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x4}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) syz_io_uring_setup(0x39d, &(0x7f0000000080)={0x0, 0x20000851, 0x200, 0x3, 0x3a1}, &(0x7f0000000100), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 6.076852859s ago: executing program 5 (id=2080): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) 6.04014637s ago: executing program 6 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x0, 0x48bc, 0x9, 0x5, 0x101, 0x40, 0x1, 0x7, 0x100, 0x8, 0xa76a, 0x4, 0xe2, 0x0, 0x6, 0x83f4, 0x20, 0xaa, 0x40007, 0x0, 0x7, 0x7, 0x20a, 0x86e, 0x2, 0x50, 0x0, 0xff, 0x8, 0x1, 0x3, 0x100, 0x7, 0x85b, 0x4, 0x8, 0x9, 0x9, 0x6, 0x7, 0x3, 0x401, 0x0, 0x7, 0x1, 0xd, 0x8, 0xfffeffff, 0x0, 0x1, 0xe16, 0x101, 0x4, 0x8, 0x9, 0x8, 0x0, 0x90, 0x3, 0x1, 0x7344, 0x3, 0xfff, 0xed38, 0xb0f9, 0x8, 0x400, 0x879, 0x3, 0x4, 0x8b8, 0x2, 0x1, 0xffffff7f, 0xffff8001, 0xa605, 0x4fa9, 0x4859, 0x8, 0xfffffffc, 0x6, 0x7fffffff, 0x84ee, 0xf, 0x2, 0xb, 0x4, 0xffff, 0x4, 0x10001, 0x5, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x1, 0x4, 0x3, 0x4, 0xd4c5, 0xa, 0x7, 0x2, 0x2, 0x2fd4e867, 0x4, 0xe, 0x9, 0x8, 0x3, 0x0, 0x7d, 0x9, 0x8, 0x5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x6, 0x0, 0xc4, 0xfffffff8, 0x5, 0x4, 0x86b978a9, 0x8, 0x0, 0x9, 0x7f, 0x5, 0x5, 0x4, 0xb9, 0x0, 0x5e4, 0xffffffff, 0x3a39de97, 0x3, 0x3ff, 0x4d, 0x7, 0x3, 0xa, 0x80, 0x1, 0x8, 0x900000, 0xc73d, 0x1, 0x0, 0x80000000, 0x4, 0x3, 0x9, 0x7fff, 0x1d6, 0x0, 0x100, 0x4, 0x1, 0x6, 0x7, 0x40, 0xb22, 0x3, 0x0, 0x2ced, 0xa7a, 0x8, 0x75c, 0x93ca, 0x8, 0x9, 0x10, 0x7, 0x82f9, 0x7, 0x1000, 0xa8e, 0xfff, 0x5, 0xfff, 0x262, 0x81, 0x4, 0x2, 0xff, 0xfffffffb, 0xffff, 0xb36, 0x5, 0x8, 0x10000, 0xda, 0x428, 0xd, 0x1, 0xb0e, 0x2, 0x4, 0x4000, 0x7, 0xfff, 0xf, 0x56, 0x800, 0x401, 0xfff, 0x3, 0x1, 0x6, 0x0, 0xf0, 0x3, 0x5, 0x7dae8f6b, 0xffffffff, 0x3, 0x5, 0x5, 0xf7, 0xfffffff7, 0x6, 0x80, 0x4c6, 0x70d, 0x101, 0x40, 0x4, 0x3, 0x5, 0x2, 0x5, 0x2, 0x0, 0x9, 0x8, 0x7, 0x13050aa4, 0x8000, 0x1ff, 0x7, 0xfff, 0xfaa, 0x0, 0x6, 0x8, 0x40, 0x7, 0x1, 0x8]}]}]}}]}, 0x43c}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 6.018229461s ago: executing program 0 (id=2082): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}, {@bh}]}, 0x1, 0xbdd, &(0x7f0000019200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000740)='./bus/file0\x00') syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b6, &(0x7f00000009c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x20, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x2b9a, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x10}}], 0x30}, 0x8044) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x20000001000, 0x8, 0xfffffffb}) 4.412206041s ago: executing program 6 (id=2083): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x10}}, 0x40019) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.987671205s ago: executing program 5 (id=2084): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000745000/0x3000)=nil, 0x3) 3.902351347s ago: executing program 0 (id=2085): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000100004800400c98008003500", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd9077e0b91987b1df57ebd0de93733e577533d9169ae72ac49ab179faa6c888601079ec93f8d966530d30e4de"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 3.613788436s ago: executing program 0 (id=2086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000c300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2400}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) 3.075049433s ago: executing program 6 (id=2087): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x4881, 0x4d) r1 = socket(0xa, 0x2400000001, 0x3ff) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x2d0, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}]}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xef, 0x1, "2985ae68c08bb1ae0fe1c776c90efe77555c9bb48be4c4a70f8af78c7140aa2dd36d54fe36d6c2363d55da1acfc4dfea27b284cd069ff470e7e958955499224e2a37ac28a00594e22780b56ac6b3727bde25b8c6f798bfdddc4980d4b5425220f86b42a07319b73fdb8900eb98943c6c2d79940d7a40f44f2d8db238858aaf8ed704549dd54fae0df6f08023279761a967dd7cfa837352f42c0c2dafc166ca4faa98c97ebc56c24f20730d0d5f2bf804b5193b57884a1c5da83079980fed7d35b5656d678b16f427af9edb302ac36c663e7d09adcc27025395f7cab907ab0a5337abd08f0790d66d6e5fa7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "be32046e2c55d9c6b0de611fbf8b05b358384e0bb1a5098fb73e8e6dfc9b6df0598fe52f698efdb9e650d8cbd95c723ff02c4a4ad1e7"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "51941be6dd1bcbae46a0938b52d27100556f51293f32f237ac7c3dd0ebf1d4dea55647f86a3191767487fbeaf514340638fd19fa95d4ae09d298d6289a63698e64011db410f63f99279e8547a8f29f5bf40adfea76d1e6fcd623"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x27, 0x6, 0x1, 0x0, "b9e29b00f90a460643b7253ce47989abbbd2312e5e897a6206b2c89cb6c09eb7ac3129"}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040014) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xf1}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f0000000000)=ANY=[@ANYBLOB="6543fbf7deee6d24c9ba32b393390f53853210f7f3e1c9259a0f9bc0cf837db1d149b4f29c148bc5cf060ff38d0000e7"], 0x2, 0x4b9, &(0x7f0000000c00)="$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") add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) wait4(0x0, 0x0, 0x2, &(0x7f0000000d40)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x41bc0000) r3 = socket(0xb, 0x1, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e25, @private=0xa010101}, 0x10) 2.370295335s ago: executing program 0 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0xd0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 1.823424023s ago: executing program 6 (id=2089): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x10}}, 0x40019) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 984.288289ms ago: executing program 0 (id=2090): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 804.676315ms ago: executing program 4 (id=2091): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x22020400) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) 703.522278ms ago: executing program 5 (id=2092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4399f472db23099974db8bf4a31accb1cc69f10664dcc06110f8ef4f73c34947bd0a3aabaef5d002a18326c5af0dff077", 0x50}], 0x1}, 0x20008011) 417.612627ms ago: executing program 0 (id=2093): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34611d41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r6, r4) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) 388.785868ms ago: executing program 4 (id=2094): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00"], 0x48) 215.395313ms ago: executing program 6 (id=2095): getresgid(0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0xc76, 0x7fffffff, 0x40, 0xaaf1, 0x80, 0x0, 0x100, 0x8000, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0xa, 0x4, 0x8000000000805a, 0x3, 0x0, 0xd}) 0s ago: executing program 5 (id=2096): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) kernel console output (not intermixed with test programs): RFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 685.432941][ T8502] BTRFS info (device loop6): use lzo compression, level 0 [ 685.440110][ T8502] BTRFS info (device loop6): turning on flush-on-commit [ 685.447134][ T8502] BTRFS info (device loop6): enabling auto defrag [ 685.453658][ T8502] BTRFS info (device loop6): max_inline at 4096 [ 685.459968][ T8502] BTRFS info (device loop6): force zlib compression, level 3 [ 685.467442][ T8502] BTRFS info (device loop6): using free space tree [ 685.976138][ T8502] BTRFS info (device loop6): enabling ssd optimizations [ 686.097205][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 686.097288][ T26] audit: type=1800 audit(2000000438.908:49): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.716" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 686.247265][ T26] audit: type=1800 audit(2000000439.049:50): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.716" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 686.430176][ T8130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 686.563056][ T8130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 686.647392][ T8130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 686.809127][ T8130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 686.867025][ T5558] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 687.382367][ T7547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop6 scanned by udevd (7547) [ 687.497926][ T8544] dlm: no local IP address has been set [ 687.503614][ T8544] dlm: cannot start dlm midcomms -107 [ 687.988892][ T8130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.250457][ T8130] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.453459][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.463583][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.557037][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.566527][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.575646][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.582827][ T7599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.653119][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.675950][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.716657][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.723824][ T7599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.770489][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.802383][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.845360][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.869597][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.944553][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.980832][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 690.008442][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.035925][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 690.076682][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.142233][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.176452][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 690.200065][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.246906][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.308858][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.390532][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 690.409900][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 690.558019][ T22] usb 7-1: config 255 has an invalid interface number: 216 but max is 0 [ 690.743962][ T22] usb 7-1: config 255 has no interface number 0 [ 690.750324][ T22] usb 7-1: config 255 interface 216 has no altsetting 0 [ 691.012318][ T22] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=77.cf [ 691.025463][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.039802][ T22] usb 7-1: Product: syz [ 691.044368][ T22] usb 7-1: Manufacturer: syz [ 691.049005][ T22] usb 7-1: SerialNumber: syz [ 691.868873][ T8588] netlink: 104 bytes leftover after parsing attributes in process `syz.4.729'. [ 691.939755][ T22] usb 7-1: active config #255 != 1 ?? [ 692.100892][ T22] usbhid 7-1:255.216: couldn't find an input interrupt endpoint [ 692.215330][ T22] usb 7-1: USB disconnect, device number 4 [ 693.806028][ T8610] loop0: detected capacity change from 0 to 256 [ 694.068219][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 694.075854][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 694.088169][ T8610] FAT-fs (loop0): Directory bread(block 64) failed [ 694.101894][ T8610] FAT-fs (loop0): Directory bread(block 65) failed [ 694.451185][ T8610] FAT-fs (loop0): Directory bread(block 66) failed [ 694.467353][ T8610] FAT-fs (loop0): Directory bread(block 67) failed [ 694.546145][ T8130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.606575][ T8610] FAT-fs (loop0): Directory bread(block 68) failed [ 694.750144][ T8610] FAT-fs (loop0): Directory bread(block 69) failed [ 694.756847][ T8610] FAT-fs (loop0): Directory bread(block 70) failed [ 694.800722][ T8610] FAT-fs (loop0): Directory bread(block 71) failed [ 694.850954][ T8610] FAT-fs (loop0): Directory bread(block 72) failed [ 694.879431][ T8610] FAT-fs (loop0): Directory bread(block 73) failed [ 694.925015][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 694.938375][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 695.031808][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 695.047991][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 695.074131][ T8130] device veth0_vlan entered promiscuous mode [ 695.092597][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 695.123170][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 695.159691][ T8130] device veth1_vlan entered promiscuous mode [ 695.246048][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 695.335303][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 695.389564][ T8130] device veth0_macvtap entered promiscuous mode [ 695.516373][ T8130] device veth1_macvtap entered promiscuous mode [ 696.214591][ T8130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.225256][ T8130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.235410][ T8130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.246257][ T8130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.385070][ T8130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.438202][ T8130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.468873][ T8130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.507908][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 696.522947][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 696.532844][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 696.549604][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 696.564682][ T8130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.646889][ T8638] netlink: 104 bytes leftover after parsing attributes in process `syz.6.737'. [ 696.656185][ T8130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.716866][ T8130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.811028][ T8130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.993658][ T8130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.186011][ T8130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.332249][ T8130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.495464][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 697.519208][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 697.982194][ T8130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.027425][ T8130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.062704][ T8130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.091352][ T8130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.229742][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.242474][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.251650][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.260544][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.268067][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 699.484138][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.663989][ T4398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.770939][ T8678] lo speed is unknown, defaulting to 1000 [ 699.800622][ T4398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.047017][ T4398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.080225][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 700.152757][ T4398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.186611][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.210616][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.224037][ T8678] device bridge_slave_0 entered promiscuous mode [ 700.247472][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.264135][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.272058][ T8678] device bridge_slave_1 entered promiscuous mode [ 700.316065][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.370051][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.482113][ T8678] team0: Port device team_slave_0 added [ 700.504942][ T8678] team0: Port device team_slave_1 added [ 700.557122][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.565731][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.592403][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.660697][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.667723][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.695387][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.738085][ T8678] device hsr_slave_0 entered promiscuous mode [ 700.749532][ T8678] device hsr_slave_1 entered promiscuous mode [ 700.756501][ T8678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.764131][ T8678] Cannot create hsr debugfs directory [ 701.572147][ T4398] device hsr_slave_0 left promiscuous mode [ 701.579163][ T4398] device hsr_slave_1 left promiscuous mode [ 701.585739][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.593454][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.605217][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.613305][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.621715][ T4398] device bridge_slave_1 left promiscuous mode [ 701.627998][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.636850][ T4398] device bridge_slave_0 left promiscuous mode [ 701.643463][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.674172][ T4398] device veth1_macvtap left promiscuous mode [ 701.680417][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 701.680496][ T4398] device veth0_macvtap left promiscuous mode [ 701.680627][ T4398] device veth1_vlan left promiscuous mode [ 701.699293][ T4398] device veth0_vlan left promiscuous mode [ 702.450782][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 702.502147][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 702.557843][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.617881][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.994848][ T4398] bond0 (unregistering): Released all slaves [ 703.136670][ T8678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 703.157150][ T8678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 703.167668][ T8678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 703.191325][ T8678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 703.302686][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.348230][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 703.359536][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 703.370512][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.388530][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 703.398418][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 703.407356][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.414477][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.425198][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 703.441846][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 703.450865][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 703.459638][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.466777][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.501192][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 703.521609][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 703.532248][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 703.551392][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 703.560623][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 703.569659][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 703.579060][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 703.589326][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 703.605579][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 703.618792][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 703.631568][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 703.641706][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 703.899172][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 704.042348][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 704.057551][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 704.070299][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.115435][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 704.125379][ T7603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 704.140022][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 704.162554][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 704.174283][ T8678] device veth0_vlan entered promiscuous mode [ 704.184560][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 704.193401][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 704.211798][ T8678] device veth1_vlan entered promiscuous mode [ 704.258096][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 704.269718][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 704.288769][ T8678] device veth0_macvtap entered promiscuous mode [ 704.307420][ T8678] device veth1_macvtap entered promiscuous mode [ 704.338938][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.350712][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.361151][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.372708][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.383130][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.393932][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.405608][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.414752][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 704.424493][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 704.435055][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 704.447929][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 704.467622][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.488201][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.504516][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.524685][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.535743][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.554002][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.567651][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.578928][ T8678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.588724][ T8678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.597598][ T8678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.607645][ T8678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.618598][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 704.628150][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.724675][ T5354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.741515][ T5354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.749727][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.802047][ T5354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.813162][ T5354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.826360][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 705.672671][ T8754] dlm: no local IP address has been set [ 705.678298][ T8754] dlm: cannot start dlm midcomms -107 [ 706.122487][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 707.496710][ T8764] loop6: detected capacity change from 0 to 32768 [ 707.523406][ T8764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.753 (8764) [ 707.620134][ T8764] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 707.659623][ T8764] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 707.839684][ T8764] BTRFS info (device loop6): using free space tree [ 707.930228][ T8799] netlink: 104 bytes leftover after parsing attributes in process `syz.3.761'. [ 708.554690][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 709.197618][ T8764] BTRFS info (device loop6): enabling ssd optimizations [ 709.366865][ T5558] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 710.057082][ T8837] dlm: no local IP address has been set [ 710.062856][ T8837] dlm: cannot start dlm midcomms -107 [ 710.943123][ T8852] netlink: 'syz.4.776': attribute type 3 has an invalid length. [ 710.998705][ T8852] netlink: 'syz.4.776': attribute type 3 has an invalid length. [ 711.666563][ T8816] loop3: detected capacity change from 0 to 32768 [ 711.885783][ T8816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.766 (8816) [ 712.089769][ T8816] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 712.224513][ T8816] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 712.285440][ T8816] BTRFS info (device loop3): setting nodatacow, compression disabled [ 712.576917][ T8816] BTRFS info (device loop3): setting datasum, datacow enabled [ 712.586098][ T8816] BTRFS info (device loop3): force clearing of disk cache [ 712.599453][ T8816] BTRFS info (device loop3): enabling ssd optimizations [ 712.734139][ T8816] BTRFS info (device loop3): using spread ssd allocation scheme [ 712.742636][ T8816] BTRFS info (device loop3): turning on sync discard [ 712.749757][ T8816] BTRFS info (device loop3): turning off barriers [ 712.769416][ T8816] BTRFS info (device loop3): enabling disk space caching [ 712.817245][ T8816] BTRFS info (device loop3): enabling auto defrag [ 712.838227][ T8816] BTRFS info (device loop3): not using ssd optimizations [ 713.525394][ T8816] BTRFS info (device loop3): not using spread ssd allocation scheme [ 713.553589][ T8816] BTRFS info (device loop3): disk space caching is enabled [ 714.158451][ T8816] BTRFS error (device loop3): open_ctree failed: -12 [ 714.296009][ T8906] dlm: no local IP address has been set [ 714.301764][ T8906] dlm: cannot start dlm midcomms -107 [ 718.460497][ T8964] dlm: no local IP address has been set [ 718.466218][ T8964] dlm: cannot start dlm midcomms -107 [ 720.001781][ T8987] loop6: detected capacity change from 0 to 128 [ 720.083470][ T8987] FAT-fs (loop6): Directory bread(block 162) failed [ 720.156990][ T8987] FAT-fs (loop6): Directory bread(block 163) failed [ 720.164509][ T8987] FAT-fs (loop6): Directory bread(block 164) failed [ 720.171561][ T8987] FAT-fs (loop6): Directory bread(block 165) failed [ 720.199375][ T8987] FAT-fs (loop6): Directory bread(block 166) failed [ 720.284556][ T8987] FAT-fs (loop6): Directory bread(block 167) failed [ 720.348277][ T8987] FAT-fs (loop6): Directory bread(block 168) failed [ 720.411786][ T8987] FAT-fs (loop6): Directory bread(block 169) failed [ 720.470959][ T8987] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 720.809152][ T8987] FAT-fs (loop6): Directory bread(block 162) failed [ 720.868951][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.875332][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.901030][ T8987] FAT-fs (loop6): Directory bread(block 163) failed [ 720.947199][ T8987] syz.6.805: attempt to access beyond end of device [ 720.947199][ T8987] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 721.011506][ T8987] syz.6.805: attempt to access beyond end of device [ 721.011506][ T8987] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 721.551682][ T8975] loop3: detected capacity change from 0 to 32768 [ 721.715199][ T8975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.801 (8975) [ 721.784458][ T8975] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 721.849137][ T8975] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 721.872098][ T9012] dlm: no local IP address has been set [ 721.877771][ T9012] dlm: cannot start dlm midcomms -107 [ 722.144019][ T8975] BTRFS info (device loop3): using free space tree [ 722.775457][ T8975] BTRFS info (device loop3): enabling ssd optimizations [ 722.980236][ T9043] loop0: detected capacity change from 0 to 2048 [ 723.151419][ T9043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.200323][ T8678] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 723.358100][ T9043] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 726.221945][ T9085] dlm: no local IP address has been set [ 726.227592][ T9085] dlm: cannot start dlm midcomms -107 [ 727.057161][ T9092] netlink: 32 bytes leftover after parsing attributes in process `syz.8.827'. [ 728.198973][ T9120] dlm: no local IP address has been set [ 728.204668][ T9120] dlm: cannot start dlm midcomms -107 [ 729.328669][ T9130] dlm: no local IP address has been set [ 729.334416][ T9130] dlm: cannot start dlm midcomms -107 [ 730.371608][ T9140] netlink: 104 bytes leftover after parsing attributes in process `syz.3.839'. [ 731.006688][ T9143] 8021q: VLANs not supported on ipvlan1 [ 731.198762][ T9145] loop3: detected capacity change from 0 to 256 [ 731.242416][ T9148] netlink: 'syz.0.853': attribute type 10 has an invalid length. [ 731.299241][ T9148] device syz_tun entered promiscuous mode [ 731.383798][ T9148] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 733.052852][ T9180] dlm: no local IP address has been set [ 733.058515][ T9180] dlm: cannot start dlm midcomms -107 [ 734.110350][ T9188] netlink: 104 bytes leftover after parsing attributes in process `syz.0.852'. [ 735.526209][ T9195] netlink: 104 bytes leftover after parsing attributes in process `syz.0.855'. [ 736.278950][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.8.856'. [ 736.328165][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.8.856'. [ 737.969612][ T9233] hsr0: VLAN not yet supported [ 738.352218][ T9241] dlm: no local IP address has been set [ 738.362787][ T9241] dlm: cannot start dlm midcomms -107 [ 739.758889][ T9250] loop6: detected capacity change from 0 to 4096 [ 739.882778][ T9250] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 740.135926][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.872'. [ 740.227590][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 742.965279][ T9310] netlink: 104 bytes leftover after parsing attributes in process `syz.3.881'. [ 745.288435][ T9325] loop0: detected capacity change from 0 to 256 [ 745.579333][ T9327] dlm: no local IP address has been set [ 745.585056][ T9327] dlm: cannot start dlm midcomms -107 [ 745.609803][ T9325] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 746.445135][ T9334] loop6: detected capacity change from 0 to 512 [ 746.535819][ T9334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 746.702712][ T9334] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.891: invalid indirect mapped block 4294967295 (level 0) [ 746.834737][ T9334] EXT4-fs (loop6): Remounting filesystem read-only [ 746.919343][ T9334] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.891: invalid indirect mapped block 4294967295 (level 1) [ 747.142651][ T9334] EXT4-fs (loop6): Remounting filesystem read-only [ 747.211664][ T9334] EXT4-fs (loop6): 1 orphan inode deleted [ 747.218347][ T9334] EXT4-fs (loop6): 1 truncate cleaned up [ 747.226416][ T9334] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 747.584085][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 748.406063][ T9352] lo speed is unknown, defaulting to 1000 [ 748.523355][ T9330] loop3: detected capacity change from 0 to 32768 [ 748.629948][ T7113] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 749.303540][ T9330] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 749.513205][ T7113] usb 7-1: Using ep0 maxpacket: 16 [ 749.525975][ T7113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.612227][ T7113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.663257][ T7113] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 749.711955][ T8678] ocfs2: Unmounting device (7,3) on (node local) [ 749.718481][ T7113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.741324][ T7113] usb 7-1: config 0 descriptor?? [ 749.898958][ T9377] loop3: detected capacity change from 0 to 2048 [ 750.130767][ T9377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.946873][ T7113] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 750.958455][ T7113] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 750.965647][ T7113] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 750.973281][ T7113] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 751.004195][ T7113] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0 [ 751.312103][ T8543] usb 7-1: USB disconnect, device number 5 [ 751.510651][ T9399] loop3: detected capacity change from 0 to 1024 [ 751.581699][ T9393] fido_id[9393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 751.824007][ T9058] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 751.863264][ T9406] device bridge1 entered promiscuous mode [ 752.028857][ T9058] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 752.048100][ T9058] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 752.087345][ T9058] usb 9-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 752.114919][ T9058] usb 9-1: config 220 has no interface number 2 [ 752.121431][ T9058] usb 9-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 752.132582][ T9058] usb 9-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 752.176713][ T9058] usb 9-1: config 220 interface 0 has no altsetting 0 [ 752.198233][ T9058] usb 9-1: config 220 interface 76 has no altsetting 0 [ 752.241225][ T9058] usb 9-1: config 220 interface 1 has no altsetting 0 [ 753.065705][ T9058] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 753.076128][ T9058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.084154][ T9058] usb 9-1: Product: syz [ 753.088849][ T9058] usb 9-1: Manufacturer: syz [ 753.093516][ T9058] usb 9-1: SerialNumber: syz [ 753.369956][ T9058] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 753.377184][ T9058] usb 9-1: No valid video chain found. [ 753.383256][ T9058] usb 9-1: selecting invalid altsetting 0 [ 753.411598][ T9058] usb 9-1: selecting invalid altsetting 0 [ 753.417641][ T9058] usbtest: probe of 9-1:220.1 failed with error -22 [ 753.495363][ T9423] netlink: 104 bytes leftover after parsing attributes in process `syz.6.911'. [ 754.118515][ T9058] usb 9-1: USB disconnect, device number 2 [ 755.114461][ T9426] loop0: detected capacity change from 0 to 32768 [ 755.131309][ T9426] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.913 (9426) [ 755.153180][ T9426] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 755.165457][ T9426] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 755.177529][ T9426] BTRFS info (device loop0): using free space tree [ 756.311583][ T9426] BTRFS info (device loop0): enabling ssd optimizations [ 756.502174][ T26] audit: type=1800 audit(2000000504.789:51): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.913" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 756.664138][ T4277] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 759.334202][ T9479] loop6: detected capacity change from 0 to 32768 [ 759.360331][ T9508] loop3: detected capacity change from 0 to 1024 [ 759.428976][ T9510] netlink: 104 bytes leftover after parsing attributes in process `syz.4.926'. [ 759.622453][ T9508] EXT4-fs: inline encryption not supported [ 759.782058][ T9479] XFS (loop6): Mounting V5 Filesystem [ 760.007519][ T9508] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 760.091587][ T9508] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 760.101066][ T9508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 760.116457][ T9508] EXT4-fs error (device loop3): ext4_quota_enable:7045: comm syz.3.927: Bad quota inum: 9, type: 2 [ 760.128900][ T9479] XFS (loop6): log mount failed [ 760.153548][ T9508] EXT4-fs (loop3): Remounting filesystem read-only [ 760.166148][ T9508] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 760.200317][ T9508] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 760.250944][ T9508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 760.517241][ T8678] EXT4-fs (loop3): unmounting filesystem. [ 761.354164][ T9545] dlm: no local IP address has been set [ 761.359931][ T9545] dlm: cannot start dlm midcomms -107 [ 764.019120][ T9547] loop6: detected capacity change from 0 to 32768 [ 764.123151][ T9547] XFS (loop6): Mounting V5 Filesystem [ 764.339116][ T9547] XFS (loop6): Ending clean mount [ 764.478720][ T9600] dlm: no local IP address has been set [ 764.484402][ T9600] dlm: cannot start dlm midcomms -107 [ 765.129169][ T5558] XFS (loop6): Unmounting Filesystem [ 766.276026][ T9616] loop3: detected capacity change from 0 to 256 [ 766.778778][ T26] audit: type=1326 audit(2000000514.409:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 766.877744][ T26] audit: type=1326 audit(2000000514.437:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 766.966570][ T26] audit: type=1326 audit(2000000514.437:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.080434][ T26] audit: type=1326 audit(2000000514.437:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.154465][ T9625] loop3: detected capacity change from 0 to 4096 [ 767.179054][ T9625] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 767.192557][ T26] audit: type=1326 audit(2000000514.437:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.354602][ T26] audit: type=1326 audit(2000000514.437:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.446221][ T9625] ntfs3: loop3: failed to convert "076c" to cp1255 [ 767.492517][ T9633] loop6: detected capacity change from 0 to 2048 [ 767.518713][ T26] audit: type=1326 audit(2000000514.437:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.556408][ T9625] ntfs3: loop3: ino=5, "/" directory corrupted [ 767.604729][ T9633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 767.659819][ T26] audit: type=1326 audit(2000000514.437:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.736610][ T9633] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 767.778377][ T26] audit: type=1326 audit(2000000514.437:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 767.802573][ T9633] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 767.863839][ T8543] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 767.895861][ T26] audit: type=1326 audit(2000000514.437:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676d79ce59 code=0x7ffc0000 [ 768.077579][ T8543] usb 9-1: Using ep0 maxpacket: 8 [ 768.087803][ T8543] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.149510][ T8543] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 768.211667][ T8543] usb 9-1: config 0 interface 0 has no altsetting 0 [ 768.242274][ T8543] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 768.276358][ T8543] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.342990][ T8543] usb 9-1: config 0 descriptor?? [ 768.382891][ T9653] device bridge0 entered promiscuous mode [ 768.805890][ T8543] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x2 [ 768.833793][ T8543] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x0 [ 768.849387][ T9643] loop0: detected capacity change from 0 to 32768 [ 768.868377][ T8543] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x0 [ 768.906352][ T8543] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x0 [ 768.957606][ T9643] JBD2: Ignoring recovery information on journal [ 769.092178][ T8543] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x0 [ 769.103003][ T8543] lenovo 0003:17EF:60A3.0002: unknown main item tag 0x0 [ 769.130710][ T8543] lenovo 0003:17EF:60A3.0002: hidraw0: USB HID v0.04 Device [HID 17ef:60a3] on usb-dummy_hcd.8-1/input0 [ 769.164915][ T8543] usb 9-1: USB disconnect, device number 3 [ 769.462856][ T9676] loop3: detected capacity change from 0 to 2048 [ 769.671360][ T9676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 770.348113][ T9643] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 770.858673][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 770.880409][ T9684] fido_id[9684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 771.575318][ T9709] netlink: 216 bytes leftover after parsing attributes in process `syz.4.977'. [ 771.657372][ T9709] tc_dump_action: action bad kind [ 772.341515][ T9703] loop0: detected capacity change from 0 to 32768 [ 772.390839][ T9703] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.985 (9703) [ 772.413099][ T9703] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 772.483409][ T9703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 772.570270][ T9703] BTRFS info (device loop0): enabling auto defrag [ 772.582545][ T9703] BTRFS info (device loop0): use no compression [ 772.599057][ T9703] BTRFS info (device loop0): force clearing of disk cache [ 772.613561][ T9703] BTRFS info (device loop0): max_inline at 4096 [ 772.633975][ T9703] BTRFS info (device loop0): disabling free space tree [ 772.758046][ T9703] BTRFS info (device loop0): enabling ssd optimizations [ 772.784800][ T9703] BTRFS info (device loop0): rebuilding free space tree [ 772.919463][ T9703] BTRFS info (device loop0): disabling free space tree [ 772.939074][ T9703] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 773.025247][ T9703] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 773.649132][ T4277] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 774.388323][ T9763] loop3: detected capacity change from 0 to 128 [ 774.478124][ T9763] EXT4-fs (loop3): Test dummy encryption mode enabled [ 774.520211][ T9763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 774.616281][ T9763] System zones: 1-3, 19-19, 35-36 [ 774.706030][ T9763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 774.759622][ T9763] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.292536][ T9763] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 775.484787][ T8678] EXT4-fs (loop3): unmounting filesystem. [ 775.724609][ T9790] loop3: detected capacity change from 0 to 256 [ 775.855137][ T9790] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 776.703545][ T9808] dlm: no local IP address has been set [ 776.709244][ T9808] dlm: cannot start dlm midcomms -107 [ 777.834168][ T9820] dlm: no local IP address has been set [ 777.839844][ T9820] dlm: cannot start dlm midcomms -107 [ 781.345356][ T9885] capability: warning: `syz.4.1017' uses deprecated v2 capabilities in a way that may be insecure [ 782.338778][ T9890] loop3: detected capacity change from 0 to 32768 [ 782.397281][ T9890] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1019 (9890) [ 782.470312][ T9890] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 782.539814][ T9890] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 782.576763][ T9890] BTRFS info (device loop3): using free space tree [ 783.957421][ T9890] BTRFS info (device loop3): enabling ssd optimizations [ 784.027442][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 784.027456][ T26] audit: type=1800 audit(2000000530.551:65): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1019" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 784.299726][ T8678] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 785.113011][ T9961] dlm: no local IP address has been set [ 785.118682][ T9961] dlm: cannot start dlm midcomms -107 [ 785.746031][ T9964] loop0: detected capacity change from 0 to 512 [ 785.828887][ T9964] EXT4-fs: Ignoring removed nobh option [ 785.834522][ T9964] EXT4-fs: Ignoring removed orlov option [ 785.903523][ T9964] EXT4-fs: Ignoring removed i_version option [ 786.013632][ T9964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 786.052046][ T9964] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.130812][ T26] audit: type=1800 audit(2000000532.516:66): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1032" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 786.227013][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.233425][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.355332][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 786.543501][ T9984] netlink: 'syz.4.1036': attribute type 10 has an invalid length. [ 786.563310][ T9984] device syz_tun entered promiscuous mode [ 786.611838][ T9984] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 786.617533][ T9982] loop3: detected capacity change from 0 to 2048 [ 786.642674][ T9957] loop6: detected capacity change from 0 to 32768 [ 786.675011][ T9982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.688704][ T9957] JBD2: Ignoring recovery information on journal [ 786.762121][ T9982] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 786.856931][ T9957] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 787.222061][ T5558] ocfs2: Unmounting device (7,6) on (node local) [ 788.614315][T10022] loop6: detected capacity change from 0 to 4096 [ 790.229439][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 790.737936][T10071] loop0: detected capacity change from 0 to 8192 [ 790.835196][T10071] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 790.944172][T10071] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 791.014285][T10071] REISERFS (device loop0): using ordered data mode [ 791.076475][T10071] reiserfs: using flush barriers [ 791.156247][T10071] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 791.216540][T10071] REISERFS (device loop0): checking transaction log (loop0) [ 791.480379][T10092] dlm: no local IP address has been set [ 791.486052][T10092] dlm: cannot start dlm midcomms -107 [ 792.590547][T10071] REISERFS (device loop0): Using tea hash to sort names [ 792.635728][T10071] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 794.132074][T10136] dlm: no local IP address has been set [ 794.137742][T10136] dlm: cannot start dlm midcomms -107 [ 795.455343][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 795.696120][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.772696][ T14] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 795.865397][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.935469][ T14] usb 4-1: config 0 descriptor?? [ 797.055735][ T14] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 797.075487][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input13 [ 797.310106][ T14] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 797.422796][T10163] IPv6: Can't replace route, no match found [ 797.495160][ T27] usb 4-1: USB disconnect, device number 2 [ 797.801375][T10165] fido_id[10165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 798.701276][T10199] dlm: no local IP address has been set [ 798.707201][T10199] dlm: cannot start dlm midcomms -107 [ 800.122152][T10214] 9pnet_fd: Insufficient options for proto=fd [ 802.433422][T10268] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1110'. [ 802.524646][T10255] syz.8.1108 (10255) used greatest stack depth: 19728 bytes left [ 803.940010][ T8543] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 804.142897][ T8543] usb 9-1: Using ep0 maxpacket: 32 [ 804.992184][ T8543] usb 9-1: config 0 interface 0 has no altsetting 0 [ 805.001447][ T8543] usb 9-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 805.011838][ T8543] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.020308][ T8543] usb 9-1: Product: syz [ 805.024567][ T8543] usb 9-1: Manufacturer: syz [ 805.035625][ T8543] usb 9-1: SerialNumber: syz [ 805.056106][ T8543] usb 9-1: config 0 descriptor?? [ 805.299869][ T8543] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X found [ 805.355287][ T8543] snd_usb_podhd 9-1:0.0: set_interface failed [ 805.384232][ T8543] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X now disconnected [ 805.408762][ T8543] snd_usb_podhd: probe of 9-1:0.0 failed with error -71 [ 805.455642][ T8543] usb 9-1: USB disconnect, device number 4 [ 805.916946][ T8543] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 806.120050][ T8543] usb 9-1: Using ep0 maxpacket: 32 [ 806.129331][ T8543] usb 9-1: config 0 interface 0 has no altsetting 0 [ 806.209149][ T8543] usb 9-1: string descriptor 0 read error: -22 [ 806.233334][T10326] loop6: detected capacity change from 0 to 256 [ 806.249239][ T8543] usb 9-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 806.258378][ T8543] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.313919][ T8543] usb 9-1: config 0 descriptor?? [ 806.348881][ T8543] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X found [ 806.368668][T10326] FAT-fs (loop6): Directory bread(block 64) failed [ 806.375275][T10326] FAT-fs (loop6): Directory bread(block 65) failed [ 806.404782][T10326] FAT-fs (loop6): Directory bread(block 66) failed [ 806.419162][T10326] FAT-fs (loop6): Directory bread(block 67) failed [ 806.444365][T10326] FAT-fs (loop6): Directory bread(block 68) failed [ 806.450991][T10326] FAT-fs (loop6): Directory bread(block 69) failed [ 806.481797][T10326] FAT-fs (loop6): Directory bread(block 70) failed [ 806.526072][T10326] FAT-fs (loop6): Directory bread(block 71) failed [ 806.532813][T10326] FAT-fs (loop6): Directory bread(block 72) failed [ 806.546223][ T8543] snd_usb_podhd 9-1:0.0: endpoint not available, using fallback values [ 806.579656][ T8543] snd_usb_podhd 9-1:0.0: invalid control EP [ 806.585621][ T8543] snd_usb_podhd 9-1:0.0: cannot start listening: -22 [ 806.609217][T10326] FAT-fs (loop6): Directory bread(block 73) failed [ 806.661589][ T8543] snd_usb_podhd 9-1:0.0: Line 6 POD HD500X now disconnected [ 806.683277][ T8543] snd_usb_podhd: probe of 9-1:0.0 failed with error -22 [ 806.792350][ T8543] usb 9-1: USB disconnect, device number 5 [ 807.892379][T10352] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 808.006042][T10351] loop6: detected capacity change from 0 to 4096 [ 808.074098][T10354] loop0: detected capacity change from 0 to 4096 [ 808.124919][T10351] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 808.140406][T10354] EXT4-fs: inline encryption not supported [ 808.206063][T10354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 808.237194][T10354] EXT4-fs (loop0): Test dummy encryption mode enabled [ 808.256451][T10354] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 808.279945][T10354] System zones: 0-5 [ 808.395412][T10329] loop3: detected capacity change from 0 to 32768 [ 808.405221][T10354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 808.426469][T10329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1130 (10329) [ 808.480960][ T26] audit: type=1800 audit(2000000553.431:67): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1136" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 808.673904][T10329] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 808.684176][T10329] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 808.695242][T10329] BTRFS info (device loop3): using free space tree [ 808.854668][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 809.123020][T10329] BTRFS info (device loop3): enabling ssd optimizations [ 809.455852][T10401] dlm: no local IP address has been set [ 809.461566][T10401] dlm: cannot start dlm midcomms -107 [ 811.107514][ T8678] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 812.290123][T10443] loop6: detected capacity change from 0 to 1024 [ 812.385916][T10443] EXT4-fs: Ignoring removed orlov option [ 812.433972][T10443] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 812.615980][T10429] loop0: detected capacity change from 0 to 32768 [ 812.670151][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 812.813666][T10429] JBD2: Ignoring recovery information on journal [ 812.904628][T10429] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 812.938282][T10429] JBD2: bad block at offset 32 [ 813.623571][T10429] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 813.762911][T10429] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 813.782698][T10429] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 813.792631][T10429] OCFS2: File system is now read-only. [ 813.798286][T10429] (syz.0.1152,10429,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 813.806128][T10429] (syz.0.1152,10429,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 813.821827][T10429] (syz.0.1152,10429,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 813.830291][T10429] (syz.0.1152,10429,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 813.839183][T10429] (syz.0.1152,10429,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 813.848471][T10429] (syz.0.1152,10429,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 813.867246][T10429] (syz.0.1152,10429,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 813.907773][T10429] (syz.0.1152,10429,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 813.965353][T10429] (syz.0.1152,10429,0):ocfs2_symlink:1864 ERROR: status = -5 [ 814.128136][T10429] (syz.0.1152,10429,0):ocfs2_symlink:2065 ERROR: status = -5 [ 814.324125][T10480] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1161'. [ 815.093062][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 815.138956][ T4351] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 815.384680][ T4351] usb 4-1: Using ep0 maxpacket: 8 [ 815.411954][ T4351] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 815.445689][ T4351] usb 4-1: config 179 has no interface number 0 [ 815.474383][ T4351] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 815.502380][ T4351] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 815.502473][ T4351] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 815.502558][ T4351] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 815.502616][ T4351] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 815.502654][ T4351] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 815.502678][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.591154][T10469] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 816.478442][ T8543] usb 4-1: USB disconnect, device number 3 [ 816.478442][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 816.494302][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 816.786052][T10505] loop0: detected capacity change from 0 to 4096 [ 816.905133][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 816.973652][ T26] audit: type=1800 audit(2000000561.376:68): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1169" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 817.608837][T10532] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1176'. [ 819.476441][T10521] loop6: detected capacity change from 0 to 32768 [ 819.488901][T10553] lo speed is unknown, defaulting to 1000 [ 819.636501][T10521] XFS (loop6): Mounting V5 Filesystem [ 819.738986][T10521] XFS (loop6): Ending clean mount [ 820.088166][T10579] dlm: no local IP address has been set [ 820.093847][T10579] dlm: cannot start dlm midcomms -107 [ 820.503999][ T26] audit: type=1800 audit(2000000564.661:69): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1174" name="bus" dev="loop6" ino=6153 res=0 errno=0 [ 820.875927][ T5558] XFS (loop6): Unmounting Filesystem [ 822.319863][T10608] dlm: no local IP address has been set [ 822.325534][T10608] dlm: cannot start dlm midcomms -107 [ 825.347476][T10636] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1200'. [ 826.500533][T10650] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1190'. [ 828.456017][T10671] dlm: no local IP address has been set [ 828.461698][T10671] dlm: cannot start dlm midcomms -107 [ 830.522191][T10688] device vlan0 entered promiscuous mode [ 830.997421][T10697] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1214'. [ 833.038280][T10719] dlm: no local IP address has been set [ 833.043966][T10719] dlm: cannot start dlm midcomms -107 [ 834.551853][T10733] loop0: detected capacity change from 0 to 2048 [ 834.618896][T10737] loop3: detected capacity change from 0 to 512 [ 834.626353][T10737] EXT4-fs: Ignoring removed i_version option [ 834.645547][T10737] EXT4-fs: Ignoring removed bh option [ 834.664117][T10733] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 834.724356][T10733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 834.787150][T10737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 834.809737][T10737] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 835.128161][T10748] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1227'. [ 835.854779][ T8678] EXT4-fs (loop3): unmounting filesystem. [ 837.375128][T10775] dlm: no local IP address has been set [ 837.380979][T10775] dlm: cannot start dlm midcomms -107 [ 838.259358][T10782] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1228'. [ 838.402460][ T5570] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 838.669220][ T5570] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 838.690212][ T5570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.708243][ T5570] usb 7-1: Product: syz [ 838.722332][ T5570] usb 7-1: Manufacturer: syz [ 838.735968][ T5570] usb 7-1: SerialNumber: syz [ 838.754654][ T5570] usb 7-1: config 0 descriptor?? [ 838.776118][ T5570] hub 7-1:0.0: bad descriptor, ignoring hub [ 838.796444][ T5570] hub: probe of 7-1:0.0 failed with error -5 [ 839.007570][ T5570] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 839.046895][ T5570] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.087028][ T5570] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 839.118753][ T5570] usb 7-1: media controller created [ 839.167622][ T5570] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.182257][T10789] loop0: detected capacity change from 0 to 40427 [ 839.282837][T10789] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 839.326928][T10789] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 839.409585][T10789] F2FS-fs (loop0): Found nat_bits in checkpoint [ 839.511065][ T5570] DVB: Unable to find symbol dib7000p_attach() [ 839.532133][ T5570] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 839.623317][T10789] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 839.630455][T10789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 839.781321][ T26] audit: type=1800 audit(2000000582.731:70): pid=10789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1238" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 839.860837][ T5570] rc_core: IR keymap rc-dib0700-rc5 not found [ 839.871292][ T5570] Registered IR keymap rc-empty [ 839.894243][ T5570] dvb-usb: could not initialize remote control. [ 839.935304][ T5570] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 840.005771][ T5570] usb 7-1: USB disconnect, device number 6 [ 840.515415][T10826] dlm: no local IP address has been set [ 840.521206][T10826] dlm: cannot start dlm midcomms -107 [ 840.644908][ T5570] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 843.741007][T10870] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1255'. [ 846.627622][T10893] dlm: no local IP address has been set [ 846.633331][T10893] dlm: cannot start dlm midcomms -107 [ 846.836563][T10895] dlm: no local IP address has been set [ 846.842279][T10895] dlm: cannot start dlm midcomms -107 [ 847.887437][T10911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1265'. [ 848.789673][T10917] loop0: detected capacity change from 0 to 256 [ 848.995221][T10921] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1267'. [ 849.992169][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1271'. [ 851.197714][T10948] dlm: no local IP address has been set [ 851.203368][T10948] dlm: cannot start dlm midcomms -107 [ 851.889336][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.906314][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.212859][T10957] dlm: no local IP address has been set [ 852.218516][T10957] dlm: cannot start dlm midcomms -107 [ 854.093810][T10975] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1282'. [ 855.329215][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 860.055740][T11074] dlm: no local IP address has been set [ 860.061368][T11074] dlm: cannot start dlm midcomms -107 [ 861.285553][T11093] input: syz0 as /devices/virtual/input/input15 [ 862.911944][T11118] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1313'. [ 863.088277][T11120] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1314'. [ 866.038425][T11153] dlm: no local IP address has been set [ 866.044167][T11153] dlm: cannot start dlm midcomms -107 [ 866.492393][T11156] dlm: no local IP address has been set [ 866.498508][T11156] dlm: cannot start dlm midcomms -107 [ 867.685235][T11189] dlm: no local IP address has been set [ 867.691154][T11189] dlm: cannot start dlm midcomms -107 [ 868.402389][T11194] loop3: detected capacity change from 0 to 128 [ 868.483135][T11194] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 869.851477][ T26] audit: type=1800 audit(2000000610.861:71): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1334" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 870.487458][T11231] dlm: no local IP address has been set [ 870.493256][T11231] dlm: cannot start dlm midcomms -107 [ 870.501135][T11227] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 870.628647][T11234] overlayfs: failed to set xattr on upper [ 870.710514][T11234] overlayfs: ...falling back to index=off,metacopy=off. [ 870.877784][T11234] overlayfs: failed to resolve './file0': -2 [ 876.194909][T11319] loop3: detected capacity change from 0 to 262144 [ 876.212985][T11319] F2FS-fs (loop3): invalid crc value [ 876.349710][T11319] F2FS-fs (loop3): Found nat_bits in checkpoint [ 876.482530][T11319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 876.828551][T11339] syz.0.1373 sent an empty control message without MSG_MORE. [ 881.897267][T11445] loop3: detected capacity change from 0 to 512 [ 882.024902][T11445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 882.050899][T11445] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.219071][T11445] EXT4-fs error (device loop3): ext4_get_first_dir_block:3594: inode #12: comm syz.3.1395: directory missing '.' [ 882.290957][T11445] EXT4-fs (loop3): Remounting filesystem read-only [ 882.532797][ T8678] EXT4-fs (loop3): unmounting filesystem. [ 882.928180][T11438] loop6: detected capacity change from 0 to 32768 [ 883.102264][T11438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1392 (11438) [ 883.337357][T11438] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 883.347591][T11438] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 883.597588][T11438] BTRFS info (device loop6): setting nodatacow, compression disabled [ 883.630860][T11438] BTRFS info (device loop6): turning on flush-on-commit [ 883.700650][T11438] BTRFS info (device loop6): use no compression [ 883.707023][T11438] BTRFS info (device loop6): trying to use backup root at mount time [ 883.773077][T11494] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1398'. [ 884.427278][T11438] BTRFS info (device loop6): max_inline at 0 [ 884.433410][T11438] BTRFS error (device loop6): unrecognized mount option 'permit_directio' [ 884.547906][T11438] BTRFS error (device loop6): open_ctree failed: -22 [ 886.101522][ T6951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (6951) [ 886.565476][T11524] loop0: detected capacity change from 0 to 1764 [ 886.821028][T11531] dlm: no local IP address has been set [ 886.826638][T11531] dlm: cannot start dlm midcomms -107 [ 887.193573][T11524] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 887.271606][T11534] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1408'. [ 891.202220][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 891.633153][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 892.204482][ T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 892.213001][ T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 892.222974][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 892.232369][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.253986][T11604] dlm: no local IP address has been set [ 892.259625][T11604] dlm: cannot start dlm midcomms -107 [ 892.291540][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.345655][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 892.388891][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 892.412543][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.613330][ T14] usb 4-1: config 0 descriptor?? [ 892.851289][ T14] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 892.945054][T11623] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1429'. [ 893.513700][ T14] usb 4-1: USB disconnect, device number 4 [ 893.544946][ T14] usblp0: removed [ 894.096655][T11639] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1433'. [ 895.719799][T11658] dlm: no local IP address has been set [ 895.726468][T11658] dlm: cannot start dlm midcomms -107 [ 896.253057][T11673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1441'. [ 897.155121][T11674] dlm: no local IP address has been set [ 897.160802][T11674] dlm: cannot start dlm midcomms -107 [ 897.692982][T11699] loop3: detected capacity change from 0 to 512 [ 897.743072][T11699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 897.790375][T11699] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 897.998870][ T5336] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 898.214014][ T5336] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 898.305271][T11712] dlm: no local IP address has been set [ 898.311034][T11712] dlm: cannot start dlm midcomms -107 [ 898.618485][ T5336] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 898.630035][ T5336] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 898.641391][ T5336] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 898.655507][ T5336] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.844166][ T5336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.854597][T11717] dlm: no local IP address has been set [ 898.860266][T11717] dlm: cannot start dlm midcomms -107 [ 898.875846][ T5336] usb 7-1: Product: syz [ 898.880423][ T5336] usb 7-1: Manufacturer: syz [ 898.885164][ T5336] usb 7-1: SerialNumber: syz [ 898.928610][T11696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 898.948391][ T5336] cdc_mbim 7-1:1.0: skipping garbage [ 899.366897][T11696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 899.374196][T11696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 899.788088][T11730] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1454'. [ 900.882585][T11696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 900.980029][T11696] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 900.987567][ T5336] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 901.017522][ T5336] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 901.214182][ T5336] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 901.320457][ T5336] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 62:9d:bd:3c:61:28 [ 901.374403][ T5336] usb 7-1: USB disconnect, device number 7 [ 901.412237][ T5336] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 901.729387][T11748] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1461'. [ 902.770942][T11766] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1466'. [ 904.212997][T11773] loop6: detected capacity change from 0 to 8192 [ 904.509367][T11773] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 904.570863][T11773] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 904.612901][T11773] REISERFS (device loop6): using ordered data mode [ 904.645519][T11773] reiserfs: using flush barriers [ 904.692701][T11791] dlm: no local IP address has been set [ 904.698632][T11791] dlm: cannot start dlm midcomms -107 [ 904.736126][T11773] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 904.946311][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1475'. [ 904.977248][T11773] REISERFS (device loop6): checking transaction log (loop6) [ 905.354042][T11773] REISERFS (device loop6): Using tea hash to sort names [ 905.382877][T11773] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 905.819232][T11810] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1478'. [ 906.123789][T11802] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1477'. [ 907.222250][T11837] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1483'. [ 909.536034][T11862] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1490'. [ 910.294698][T11877] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1493'. [ 911.200474][T11896] dlm: no local IP address has been set [ 911.206241][T11896] dlm: cannot start dlm midcomms -107 [ 913.010913][T11925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1506'. [ 913.224711][T11928] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1507'. [ 913.779220][T11936] device vlan0 entered promiscuous mode [ 914.002793][T11942] loop3: detected capacity change from 0 to 16 [ 914.037498][T11942] erofs: (device loop3): mounted with root inode @ nid 36. [ 914.349420][T11950] loop0: detected capacity change from 0 to 128 [ 914.470667][T11956] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1512'. [ 914.493056][T11950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 914.502439][T11950] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 914.654312][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 916.453259][ C0] hrtimer: interrupt took 46067 ns [ 917.588459][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.595453][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.676478][T12001] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1522'. [ 920.803301][ T7115] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 921.108285][T12049] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1537'. [ 921.144697][ T7115] usb 9-1: Using ep0 maxpacket: 32 [ 922.095894][T12060] lo speed is unknown, defaulting to 1000 [ 922.572896][T12067] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 922.611904][ T7115] usb 9-1: unable to get BOS descriptor or descriptor too short [ 922.632676][T12067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 922.666927][ T7115] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 922.720559][ T7115] usb 9-1: can't read configurations, error -71 [ 924.432173][ T8543] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 924.649834][ T8543] usb 4-1: Using ep0 maxpacket: 32 [ 924.936758][T12099] dlm: no local IP address has been set [ 924.942649][T12099] dlm: cannot start dlm midcomms -107 [ 925.902861][ T8543] usb 4-1: unable to get BOS descriptor or descriptor too short [ 925.944066][ T8543] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 925.963785][ T8543] usb 4-1: can't read configurations, error -71 [ 929.597516][T12153] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1562'. [ 930.933554][T12162] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1573'. [ 932.659714][T12171] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1575'. [ 933.990694][T12198] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1580'. [ 934.587589][ T5570] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 934.983112][ T5570] usb 7-1: Using ep0 maxpacket: 32 [ 935.849084][T12213] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1566'. [ 936.226255][ T5570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 936.306891][ T5570] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 936.350110][ T5570] usb 7-1: can't read configurations, error -71 [ 940.999047][T12260] loop6: detected capacity change from 0 to 512 [ 941.071359][T12260] EXT4-fs (loop6): Test dummy encryption mode enabled [ 941.233682][T12260] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1584: inode has both inline data and extents flags [ 941.338279][T12260] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1584: couldn't read orphan inode 15 (err -117) [ 941.431816][T12260] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 941.914086][T12275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1588'. [ 942.509508][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 949.083015][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 949.167321][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 949.225941][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.290232][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.410063][T12330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 949.500119][T12337] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1602'. [ 950.523536][T12349] loop3: detected capacity change from 0 to 512 [ 950.711079][ T6099] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 951.504078][ T6099] usb 7-1: Using ep0 maxpacket: 32 [ 951.528544][ T6099] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.591606][ T6099] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.638470][ T6099] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 951.689555][ T6099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.733520][T12349] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1608: corrupted inode contents [ 951.766720][ T6099] usb 7-1: config 0 descriptor?? [ 951.793218][T12349] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #16: comm syz.3.1608: mark_inode_dirty error [ 951.810505][ T6099] hub 7-1:0.0: USB hub found [ 951.829880][T12349] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1608: corrupted inode contents [ 951.872360][T12349] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1608: mark_inode_dirty error [ 951.921973][T12349] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1608: corrupted inode contents [ 952.027729][ T6099] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 952.045028][T12349] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 952.097302][T12349] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.1608: corrupted inode contents [ 952.155153][T12349] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.1608: mark_inode_dirty error [ 952.222491][T12349] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 952.293161][T12349] EXT4-fs (loop3): 1 truncate cleaned up [ 952.323707][ T4652] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 952.520723][ T6099] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 952.597440][ T6099] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 952.970794][T12349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 953.009362][ T4652] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 1 [ 953.023485][T12349] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.048807][T12364] loop6: detected capacity change from 0 to 512 [ 953.128404][T12364] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 953.265964][T12335] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 953.562111][T12374] binder: 12373:12374 ioctl 4018620d 0 returned -22 [ 953.632604][ T4321] usb 7-1: USB disconnect, device number 10 [ 953.735089][T12367] fido_id[12367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 953.751174][ T8678] EXT4-fs (loop3): unmounting filesystem. [ 955.666610][T12401] binder: 12373:12401 ioctl c0306201 0 returned -14 [ 956.396023][T12406] loop3: detected capacity change from 0 to 1024 [ 957.687927][T12388] loop6: detected capacity change from 0 to 32768 [ 960.527441][T12449] loop0: detected capacity change from 0 to 64 [ 960.725506][T12449] MINIX-fs: bad superblock or unable to read bitmaps [ 960.965915][T12449] loop0: detected capacity change from 0 to 1024 [ 961.012799][T12449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 961.064545][T12457] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1623'. [ 961.081115][T12449] EXT4-fs: inline encryption not supported [ 961.087005][T12449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 961.148353][T12449] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 961.325675][T12449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 961.347829][T12449] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.410071][T12438] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1625'. [ 961.453854][T12470] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.1628: Freeing blocks not in datazone - block = 0, count = 16 [ 961.517009][T12470] EXT4-fs (loop0): Remounting filesystem read-only [ 961.526606][T12460] overlayfs: overlapping lowerdir path [ 961.843901][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 963.500809][T12488] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1635'. [ 968.689251][T12550] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1650'. [ 968.856617][T12548] fuse: root generation should be zero [ 971.756547][T12564] loop6: detected capacity change from 0 to 8192 [ 971.809266][T12564] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 971.999425][T12564] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 972.008711][T12564] REISERFS (device loop6): using ordered data mode [ 972.139245][T12564] reiserfs: using flush barriers [ 972.338736][T12564] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 973.297784][T12564] REISERFS (device loop6): checking transaction log (loop6) [ 974.006139][T12564] REISERFS (device loop6): Using tea hash to sort names [ 974.051566][T12564] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 975.675699][T12635] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1670'. [ 976.142680][ T26] audit: type=1804 audit(2000000710.327:72): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1672" name="/newroot/342/file0/file1" dev="overlay" ino=1858 res=1 errno=0 [ 976.356644][T12611] loop3: detected capacity change from 0 to 32768 [ 976.536337][T12611] XFS (loop3): Mounting V5 Filesystem [ 976.936622][T12611] XFS (loop3): Ending clean mount [ 977.270971][T12611] XFS (loop3): Quotacheck needed: Please wait. [ 977.489171][T12611] XFS (loop3): Quotacheck: Done. [ 977.638702][ T8678] XFS (loop3): Unmounting Filesystem [ 977.651800][T12666] lo speed is unknown, defaulting to 1000 [ 978.486149][ T5336] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 978.699580][ T5336] usb 7-1: Using ep0 maxpacket: 32 [ 978.718809][ T5336] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 978.773832][ T5336] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 978.827869][ T5336] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 978.883216][ T5336] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 978.965009][ T5336] usb 7-1: config 0 interface 0 has no altsetting 0 [ 979.013561][ T5336] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 979.054449][ T5336] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 979.106508][ T5336] usb 7-1: Product: syz [ 979.110747][ T5336] usb 7-1: Manufacturer: syz [ 979.197187][ T5336] usb 7-1: SerialNumber: syz [ 979.238083][ T5336] usb 7-1: config 0 descriptor?? [ 979.275481][ T5336] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 979.351895][ T5336] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 979.691508][ T5336] usb 7-1: USB disconnect, device number 11 [ 979.691561][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 979.726713][T12678] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 979.769147][T12693] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 979.894273][ T5336] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 980.069916][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1685'. [ 980.505572][ T5336] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 981.282987][T12701] team0 (unregistering): Port device team_slave_0 removed [ 981.336738][T12701] team0 (unregistering): Port device team_slave_1 removed [ 981.445871][ T5336] usb 4-1: Using ep0 maxpacket: 8 [ 981.974629][ T5336] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 981.982950][ T5336] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.992803][ T5336] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 982.002614][ T5336] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 982.012682][ T5336] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.025815][ T5336] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 982.034962][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.272272][ T5336] usb 4-1: usb_control_msg returned -32 [ 982.278595][ T5336] usbtmc 4-1:16.0: can't read capabilities [ 982.522232][ T4321] usb 4-1: USB disconnect, device number 7 [ 983.199603][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 983.207286][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 983.320599][T12746] loop0: detected capacity change from 0 to 128 [ 983.448407][T12743] device bond1 entered promiscuous mode [ 985.959484][T12760] loop6: detected capacity change from 0 to 32768 [ 986.114935][T12760] XFS (loop6): Mounting V5 Filesystem [ 986.194805][T12802] fuse: Bad value for 'fd' [ 986.506086][T12760] XFS (loop6): Ending clean mount [ 986.761423][ T9058] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 986.905659][ T9058] XFS (loop6): Unmount and run xfs_repair [ 986.937480][T12824] netlink: 'syz.8.1720': attribute type 11 has an invalid length. [ 987.014550][ T9058] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 987.086233][ T9058] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 987.102065][ T9058] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 987.112469][ T9058] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 987.143666][ T9058] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 987.175215][ T9058] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 987.185513][ T9058] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 987.197628][ T9058] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 987.214787][ T9058] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 987.226993][T12760] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 987.360501][T12760] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 987.494524][T12760] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 987.804696][ T5558] XFS (loop6): Unmounting Filesystem [ 989.136288][T12858] loop6: detected capacity change from 0 to 256 [ 989.231392][T12858] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 989.374011][T12859] dlm: no local IP address has been set [ 989.452115][T12859] dlm: cannot start dlm midcomms -107 [ 990.391613][T12873] dlm: no local IP address has been set [ 990.397279][T12873] dlm: cannot start dlm midcomms -107 [ 995.670307][ T7115] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 995.797272][ T5336] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 995.878608][ T7115] usb 9-1: Using ep0 maxpacket: 32 [ 995.912850][ T7115] usb 9-1: unable to get BOS descriptor or descriptor too short [ 995.935320][ T7115] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 995.967004][ T7115] usb 9-1: can't read configurations, error -71 [ 996.008352][ T5336] usb 7-1: config 128 has an invalid interface number: 148 but max is 0 [ 996.031015][ T5336] usb 7-1: config 128 has no interface number 0 [ 996.052609][ T5336] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 996.071645][ T5336] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 996.083504][ T5336] usb 7-1: config 128 interface 148 has no altsetting 0 [ 996.103135][ T5336] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 996.124265][ T5336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.135366][ T5336] usb 7-1: Product: syz [ 996.144739][ T5336] usb 7-1: Manufacturer: syz [ 996.160384][ T5336] usb 7-1: SerialNumber: syz [ 996.444838][ T5336] usb 7-1: USB disconnect, device number 12 [ 997.090611][ T5336] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 997.314621][ T5336] usb 7-1: Using ep0 maxpacket: 8 [ 997.321732][ T5336] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 997.400251][ T5336] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.432059][ T5336] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.442170][ T5336] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 997.527424][ T5336] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.556997][ T5336] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 997.583306][ T5336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.845155][ T5336] usb 7-1: usb_control_msg returned -32 [ 997.851275][ T5336] usbtmc 7-1:16.0: can't read capabilities [ 998.852428][T12972] loop0: detected capacity change from 0 to 1024 [ 998.951048][ T9058] usb 7-1: USB disconnect, device number 13 [ 998.998021][T12972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 999.006730][T12972] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.027843][ T7605] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.126740][T12979] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.1750: lblock 0 mapped to illegal pblock 0 (length 6) [ 999.199363][T12979] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 999.264315][T12979] EXT4-fs (loop0): This should not happen!! Data will be lost [ 999.264315][T12979] [ 999.351307][T12979] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm syz.0.1750: lblock 8 mapped to illegal pblock 8 (length 8) [ 999.411443][ T7605] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.441807][T12979] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 999.495806][T12979] EXT4-fs (loop0): This should not happen!! Data will be lost [ 999.495806][T12979] [ 999.723939][ T7605] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.252703][T12986] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1754'. [ 1000.497529][ T7605] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.543261][ T4510] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:14: bg 0: block 112: padding at end of block bitmap is not set [ 1000.680305][ T4510] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1216 with max blocks 2048 with error 28 [ 1000.746909][T12989] dlm: no local IP address has been set [ 1000.752541][T12989] dlm: cannot start dlm midcomms -107 [ 1000.802395][ T4510] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1000.802395][ T4510] [ 1000.915682][ T4510] EXT4-fs (loop0): Total free blocks count 0 [ 1000.970106][ T4510] EXT4-fs (loop0): Free/Dirty block details [ 1000.976122][ T4510] EXT4-fs (loop0): free_blocks=0 [ 1001.419549][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1001.440101][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1001.448445][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1001.476133][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1001.484118][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1001.492512][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1001.876174][T12997] lo speed is unknown, defaulting to 1000 [ 1001.959366][T13003] lo speed is unknown, defaulting to 1000 [ 1003.705544][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 1003.740283][T12997] chnl_net:caif_netlink_parms(): no params data found [ 1004.112559][T13023] loop3: detected capacity change from 0 to 128 [ 1004.377022][T13023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1004.404795][T13023] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.127214][ T8678] EXT4-fs (loop3): unmounting filesystem. [ 1005.263796][T12997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.329384][T12997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.339336][T12997] device bridge_slave_0 entered promiscuous mode [ 1005.380501][T13038] loop0: detected capacity change from 0 to 256 [ 1005.927899][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 1006.030217][T12997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.047442][T12997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.087496][T12997] device bridge_slave_1 entered promiscuous mode [ 1006.400112][ T7605] device hsr_slave_0 left promiscuous mode [ 1006.447624][ T7605] device hsr_slave_1 left promiscuous mode [ 1006.456178][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.501736][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.623039][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.669187][T13055] dlm: no local IP address has been set [ 1006.674829][T13055] dlm: cannot start dlm midcomms -107 [ 1006.735518][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.897320][ T7605] device bridge_slave_1 left promiscuous mode [ 1006.950884][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.025157][ T7605] device bridge_slave_0 left promiscuous mode [ 1007.062924][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.536213][ T7605] device veth1_macvtap left promiscuous mode [ 1007.550323][ T7605] device veth0_macvtap left promiscuous mode [ 1007.568223][ T7605] device veth1_vlan left promiscuous mode [ 1008.150406][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 1009.568598][ T7605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.653894][ T7605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.265524][ T7605] bond0 (unregistering): Released all slaves [ 1010.373384][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 1011.651242][T13071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.658516][T13071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.865829][T13071] batman_adv: batadv0: Interface deactivated: dummy0 [ 1012.746299][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.836140][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.992057][T13110] dlm: no local IP address has been set [ 1012.997669][T13110] dlm: cannot start dlm midcomms -107 [ 1014.050145][T13071] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.059113][T13071] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.068652][T13071] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.078677][T13071] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.220128][ T1172] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1014.361108][T12997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.397630][T12997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.425784][ T1172] usb 4-1: config 0 has no interfaces? [ 1014.437449][ T1172] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1014.500013][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.520607][ T1172] usb 4-1: Product: syz [ 1014.525512][ T1172] usb 4-1: Manufacturer: syz [ 1014.553069][ T1172] usb 4-1: SerialNumber: syz [ 1014.581017][ T1172] usb 4-1: config 0 descriptor?? [ 1014.767793][T12997] team0: Port device team_slave_0 added [ 1014.823578][T12997] team0: Port device team_slave_1 added [ 1014.922680][ T7115] usb 4-1: USB disconnect, device number 8 [ 1015.027579][T13122] loop0: detected capacity change from 0 to 128 [ 1015.035161][T12997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.045618][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.221828][T12997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.258101][T13126] netlink: 'syz.6.1791': attribute type 1 has an invalid length. [ 1015.434608][T13126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1015.483116][T12997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.491133][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.527496][T12997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.565005][T13127] bond2: (slave geneve2): making interface the new active one [ 1015.575682][T13131] loop2: detected capacity change from 0 to 7 [ 1015.587057][T13127] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1015.620134][T12377] loop2: p1 [ 1015.628115][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1015.637675][T12377] loop2: partition table partially beyond EOD, truncated [ 1015.684371][T12377] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1015.800277][T13131] loop2: p1 [ 1015.833590][T13131] loop2: partition table partially beyond EOD, truncated [ 1015.863705][T13131] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1015.985790][T12997] device hsr_slave_0 entered promiscuous mode [ 1016.109822][T12997] device hsr_slave_1 entered promiscuous mode [ 1016.143684][T12997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.152586][T12997] Cannot create hsr debugfs directory [ 1016.174461][T12377] udevd[12377]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1016.369466][T12377] udevd[12377]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1017.505695][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 1022.989608][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 1023.408540][T12997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1023.462683][T12997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1023.503628][T12997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1023.593377][T12997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1023.941307][T12997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.038122][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1024.058332][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1024.106452][T12997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.173585][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1024.195495][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1024.244086][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.251361][ T7605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.314448][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1024.375084][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1024.385482][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1024.418782][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.427133][ T7605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.525860][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1024.570796][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1024.606248][T13218] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 1024.725402][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1025.084901][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1025.173389][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1025.265996][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1025.295763][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1025.319106][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1025.364391][T12997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1025.398698][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1025.420513][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1025.464566][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1025.489554][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1025.947422][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1822'. [ 1026.862457][T13246] serio: Serial port ptm0 [ 1026.909390][T13246] serio: Serial port ptm0 [ 1027.030662][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1027.113747][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1027.166931][T12997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.224395][T13256] loop0: detected capacity change from 0 to 256 [ 1027.316311][T13256] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1027.502847][T13253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1826'. [ 1030.706195][T13273] loop6: detected capacity change from 0 to 2048 [ 1030.737607][T13273] EXT4-fs: Ignoring removed nobh option [ 1030.933969][T13273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1030.967848][T13273] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.220535][ T26] audit: type=1800 audit(2000000761.871:73): pid=13273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1833" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 1031.288599][T13273] fs-verity: sha256 using implementation "sha256-avx2" [ 1031.603610][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 1031.988895][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.020032][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.095228][T13305] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1838'. [ 1032.771777][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1032.801807][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.879314][T12997] device veth0_vlan entered promiscuous mode [ 1032.888068][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.932320][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.971307][T12997] device veth1_vlan entered promiscuous mode [ 1033.065949][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1033.148229][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1033.164173][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1033.198261][T12997] device veth0_macvtap entered promiscuous mode [ 1033.262041][T12997] device veth1_macvtap entered promiscuous mode [ 1033.356420][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.399579][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.450687][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.463138][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.489095][T12997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.505521][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.551676][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.564984][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.583193][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.629174][T12997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.668317][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1033.701451][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1033.731745][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1033.816377][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1033.836473][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1033.878328][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1033.929624][T12997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.964836][T12997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.024434][T12997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.046108][T12997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.333329][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.379080][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.417723][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1034.430745][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 1034.460238][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.481494][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.522447][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1034.652062][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 1035.231580][T13371] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1848'. [ 1036.894175][T13385] device syzkaller0 entered promiscuous mode [ 1038.001858][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1860'. [ 1038.414212][T13386] loop5: detected capacity change from 0 to 32768 [ 1038.453494][T13414] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.1862'. [ 1038.536706][T13386] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1038.621194][T13386] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1038.657656][T13417] loop3: detected capacity change from 0 to 256 [ 1038.673204][T13419] fuse: Bad value for 'fd' [ 1038.688191][T13386] BTRFS info (device loop5): setting nodatasum [ 1038.741051][T13386] BTRFS info (device loop5): force zlib compression, level 3 [ 1038.804755][T13417] FAT-fs (loop3): Directory bread(block 64) failed [ 1038.811420][T13386] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1038.811563][T13386] BTRFS info (device loop5): use lzo compression, level 0 [ 1038.811668][T13386] BTRFS info (device loop5): turning on flush-on-commit [ 1038.811708][T13386] BTRFS info (device loop5): enabling auto defrag [ 1038.817546][T13386] BTRFS info (device loop5): max_inline at 4096 [ 1038.862167][T13386] BTRFS info (device loop5): using free space tree [ 1038.945921][T13417] FAT-fs (loop3): Directory bread(block 65) failed [ 1038.979789][T13417] FAT-fs (loop3): Directory bread(block 66) failed [ 1039.012249][T13417] FAT-fs (loop3): Directory bread(block 67) failed [ 1039.058374][T13417] FAT-fs (loop3): Directory bread(block 68) failed [ 1039.085308][T13417] FAT-fs (loop3): Directory bread(block 69) failed [ 1039.161400][T13417] FAT-fs (loop3): Directory bread(block 70) failed [ 1039.168162][T13417] FAT-fs (loop3): Directory bread(block 71) failed [ 1039.176026][T13417] FAT-fs (loop3): Directory bread(block 72) failed [ 1039.184200][T13417] FAT-fs (loop3): Directory bread(block 73) failed [ 1039.462514][T13386] BTRFS info (device loop5): enabling ssd optimizations [ 1040.841383][T13474] loop6: detected capacity change from 0 to 32768 [ 1041.234917][T13485] dlm: no local IP address has been set [ 1041.240549][T13485] dlm: cannot start dlm midcomms -107 [ 1041.764428][T13474] XFS (loop6): Mounting V5 Filesystem [ 1041.941032][T13474] XFS (loop6): Ending clean mount [ 1041.948150][T12997] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1042.123029][ T26] audit: type=1804 audit(2000000772.072:74): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1872" name="/newroot/324/file1/bus" dev="loop6" ino=9289 res=1 errno=0 [ 1042.417217][ T26] audit: type=1804 audit(2000000772.184:75): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1872" name="/newroot/324/file1/bus" dev="loop6" ino=9289 res=1 errno=0 [ 1043.282633][ T5558] XFS (loop6): Unmounting Filesystem [ 1043.442423][T13514] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 1043.544268][T13516] device bond1 entered promiscuous mode [ 1043.551131][T13516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.661377][T13514] device bridge2 entered promiscuous mode [ 1043.669190][T13514] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 1043.684508][ T75] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1043.699504][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1043.863779][ T7605] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1044.160628][T13526] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 1044.258895][T13526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1044.280535][T13529] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1044.357455][T13531] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1882'. [ 1044.455400][T13526] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1044.650369][T13534] [ 1048.141876][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1896'. [ 1048.796341][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'. [ 1048.962810][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.970167][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.092325][T13603] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1899'. [ 1051.045721][T13613] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1052.081792][T13625] Bluetooth: MGMT ver 1.22 [ 1053.012551][T13645] syz.4.1913 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1053.409487][T13652] loop6: detected capacity change from 0 to 1024 [ 1053.555038][T13652] hfsplus: bad catalog entry type [ 1053.699743][ T4388] hfsplus: b-tree write err: -5, ino 25 [ 1053.712150][ T4388] hfsplus: b-tree write err: -5, ino 4 [ 1053.757957][ T4388] hfsplus: b-tree write err: -5, ino 2 [ 1054.282820][ T26] audit: type=1800 audit(2000000783.451:76): pid=13655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1915" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1056.043001][T13696] device syzkaller0 entered promiscuous mode [ 1056.901748][T13679] loop6: detected capacity change from 0 to 32768 [ 1056.977150][T13679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1921 (13679) [ 1057.133231][T13679] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1057.198687][T13679] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1057.242099][T13679] BTRFS info (device loop6): setting nodatasum [ 1057.252382][T13679] BTRFS info (device loop6): force zlib compression, level 3 [ 1057.271547][T13679] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1057.317300][T13679] BTRFS info (device loop6): use lzo compression, level 0 [ 1057.353124][T13712] loop5: detected capacity change from 0 to 256 [ 1057.369780][T13679] BTRFS info (device loop6): turning on flush-on-commit [ 1057.420853][T13712] FAT-fs (loop5): Directory bread(block 64) failed [ 1057.427633][T13712] FAT-fs (loop5): Directory bread(block 65) failed [ 1057.434581][T13712] FAT-fs (loop5): Directory bread(block 66) failed [ 1057.441238][T13712] FAT-fs (loop5): Directory bread(block 67) failed [ 1057.448182][T13712] FAT-fs (loop5): Directory bread(block 68) failed [ 1057.455267][T13712] FAT-fs (loop5): Directory bread(block 69) failed [ 1057.462259][T13712] FAT-fs (loop5): Directory bread(block 70) failed [ 1057.468901][T13712] FAT-fs (loop5): Directory bread(block 71) failed [ 1057.475750][T13712] FAT-fs (loop5): Directory bread(block 72) failed [ 1057.482345][T13712] FAT-fs (loop5): Directory bread(block 73) failed [ 1057.610464][T13679] BTRFS info (device loop6): enabling auto defrag [ 1057.757192][T13679] BTRFS info (device loop6): max_inline at 4096 [ 1057.858710][T13679] BTRFS info (device loop6): using free space tree [ 1059.086120][T13679] BTRFS error (device loop6): open_ctree failed: -12 [ 1059.282391][T12377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (12377) [ 1059.765016][T13751] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1928'. [ 1067.497595][T13814] tipc: Started in network mode [ 1067.536629][T13814] tipc: Node identity 4ebb5a4d08bc, cluster identity 4711 [ 1067.559498][T13814] tipc: Enabled bearer , priority 0 [ 1067.583025][T13819] device syzkaller0 entered promiscuous mode [ 1067.658454][T13812] tipc: Resetting bearer [ 1067.966905][T13812] tipc: Disabling bearer [ 1068.447090][T13848] tipc: Enabling of bearer rejected, failed to enable media [ 1068.873367][T13855] binder_alloc: 13852: pid 13852 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1068.892674][T13854] loop6: detected capacity change from 0 to 1024 [ 1069.179557][T13854] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1069.329231][T13865] dlm: no local IP address has been set [ 1069.334929][T13865] dlm: cannot start dlm midcomms -107 [ 1069.535431][T13854] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Out of memory [ 1069.587672][T13854] EXT4-fs error (device loop6): ext4_setattr:5634: inode #15: comm syz.6.1954: mark_inode_dirty error [ 1069.645334][T13854] EXT4-fs error (device loop6) in ext4_setattr:5695: Out of memory [ 1069.727767][T13851] syz.6.1954: attempt to access beyond end of device [ 1069.727767][T13851] loop6: rw=1, sector=3606377190, nr_sectors = 2 limit=1024 [ 1069.830547][T13851] EXT4-fs warning (device loop6): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1803188595) [ 1069.884058][T13851] Buffer I/O error on device loop6, logical block 1803188595 [ 1069.892650][T13851] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Out of memory [ 1069.999753][T13851] EXT4-fs error (device loop6): mpage_map_and_submit_extent:2550: inode #15: comm syz.6.1954: mark_inode_dirty error [ 1070.075618][T13851] EXT4-fs error (device loop6): mpage_map_and_submit_extent:2554: comm syz.6.1954: Failed to mark inode 15 dirty [ 1070.135348][T13851] syz.6.1954: attempt to access beyond end of device [ 1070.135348][T13851] loop6: rw=1, sector=3403208898, nr_sectors = 2 limit=1024 [ 1070.212168][T13851] EXT4-fs warning (device loop6): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1701604449) [ 1070.274783][T13851] Buffer I/O error on device loop6, logical block 1701604449 [ 1070.527440][ T5558] EXT4-fs (loop6): Inode 15 (ffff888074790000): i_reserved_data_blocks (1) not cleared! [ 1070.570802][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 1072.819269][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1966'. [ 1076.191507][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 1076.245638][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 1076.614258][T13934] loop6: detected capacity change from 0 to 512 [ 1076.714170][T13934] EXT4-fs: Ignoring removed oldalloc option [ 1076.720266][T13933] binder: BINDER_SET_CONTEXT_MGR already set [ 1076.720425][T13933] binder: 13932:13933 ioctl 4018620d 200000004a80 returned -16 [ 1076.752414][T13934] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1076.880533][T13934] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1077.418957][T13956] dlm: no local IP address has been set [ 1077.425542][T13956] dlm: cannot start dlm midcomms -107 [ 1079.749143][T13934] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1080.537749][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1978'. [ 1080.564502][ T5558] EXT4-fs (loop6): unmounting filesystem. [ 1081.180780][T13993] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1083.369688][ T26] audit: type=1326 audit(2000000810.608:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14027 comm="syz.5.1990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb89d9ce59 code=0x0 [ 1083.527514][T14032] dlm: no local IP address has been set [ 1083.534270][T14032] dlm: cannot start dlm midcomms -107 [ 1086.273324][T14049] device syzkaller0 entered promiscuous mode [ 1089.246725][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1089.612075][ T4321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1089.642109][ T4321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1089.724148][T14088] dlm: no local IP address has been set [ 1089.730655][T14088] dlm: cannot start dlm midcomms -107 [ 1090.283485][ T4321] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1090.715943][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.925276][ T4321] usb 6-1: Product: syz [ 1090.929506][ T4321] usb 6-1: Manufacturer: syz [ 1090.934136][ T4321] usb 6-1: SerialNumber: syz [ 1090.962993][ T4321] usb 6-1: config 0 descriptor?? [ 1090.979972][T14069] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1090.987264][T14069] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1091.097554][T14097] device syzkaller0 entered promiscuous mode [ 1091.331611][ T4321] usb 6-1: can't set config #0, error -71 [ 1091.353105][ T4321] usb 6-1: USB disconnect, device number 2 [ 1093.108738][T14117] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2012'. [ 1094.580314][T14127] device syzkaller0 entered promiscuous mode [ 1095.406270][T14135] bridge0: port 1(erspan0) entered blocking state [ 1095.417523][ T5336] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1095.434654][T14135] bridge0: port 1(erspan0) entered disabled state [ 1095.501412][T14135] device erspan0 entered promiscuous mode [ 1095.522166][T14135] bridge0: port 1(erspan0) entered blocking state [ 1095.531912][T14135] bridge0: port 1(erspan0) entered forwarding state [ 1095.636335][T14137] device erspan0 left promiscuous mode [ 1095.657360][ T5336] usb 4-1: config 0 has no interfaces? [ 1095.668746][ T5336] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1095.674184][T14137] bridge0: port 1(erspan0) entered disabled state [ 1095.710594][ T5336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.764575][ T5336] usb 4-1: Product: syz [ 1095.792275][ T5336] usb 4-1: Manufacturer: syz [ 1095.818444][T14153] loop5: detected capacity change from 0 to 2048 [ 1095.825003][ T5336] usb 4-1: SerialNumber: syz [ 1095.858173][ T5336] usb 4-1: config 0 descriptor?? [ 1095.989459][T14153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1096.179350][ T9058] usb 4-1: USB disconnect, device number 9 [ 1096.237468][T14140] loop6: detected capacity change from 0 to 32768 [ 1096.914549][T14140] XFS (loop6): Mounting V5 Filesystem [ 1097.276771][T14140] XFS (loop6): Ending clean mount [ 1098.059878][T14195] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2026'. [ 1098.140792][T14140] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 1098.164583][T14140] XFS (loop6): Unmount and run xfs_repair [ 1098.199784][T14140] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1098.274727][T14140] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 1098.334905][T14140] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 1098.386599][T14140] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1098.471462][T14140] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 1098.501355][T14140] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 1098.629161][T14140] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 1098.647953][T14140] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 1098.719994][T14140] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 1098.770300][T14140] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 1098.836629][T14140] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 1098.892235][T14140] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 1099.177781][ T5558] XFS (loop6): Unmounting Filesystem [ 1100.454838][T14226] device syzkaller0 entered promiscuous mode [ 1100.523807][T14226] tipc: Enabled bearer , priority 0 [ 1100.640844][T14225] tipc: Resetting bearer [ 1100.825023][T14225] tipc: Disabling bearer [ 1101.144690][T14240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2040'. [ 1101.536717][T14248] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2041'. [ 1102.266029][T14256] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 1104.050166][ T26] audit: type=1326 audit(2000000830.035:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.4.2052" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc80859ce59 code=0x0 [ 1107.256596][T14306] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2056'. [ 1107.267193][ T5570] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1110.750701][ T5570] usb 6-1: device descriptor read/all, error -71 [ 1111.789657][T14328] loop6: detected capacity change from 0 to 8 [ 1112.241731][T14334] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2063'. [ 1112.711375][T14328] SQUASHFS error: xz decompression failed, data probably corrupt [ 1112.719652][T14328] SQUASHFS error: Failed to read block 0x108: -5 [ 1112.727033][T14328] SQUASHFS error: Unable to read metadata cache entry [106] [ 1112.734389][T14328] SQUASHFS error: Unable to read inode 0x11f [ 1113.507237][T14342] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2055'. [ 1114.814711][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.821688][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.502691][T14354] device syzkaller0 entered promiscuous mode [ 1115.555573][T14359] TC_ACT_REPEAT abuse ? [ 1116.391649][T14373] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2072'. [ 1116.909237][T14384] device syzkaller0 entered promiscuous mode [ 1123.129779][T14435] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2079'. [ 1123.643720][T14438] loop6: detected capacity change from 0 to 128 [ 1123.715336][T14438] UDF-fs: bad mount option "eCm$ɺ29S2%σ}I" or missing value [ 1123.947855][T14438] Invalid option length (301) for dns_resolver key [ 1124.257598][T14453] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2078'. [ 1125.552748][T14462] fuse: Bad value for 'fd' [ 1125.735454][T14466] device syzkaller0 entered promiscuous mode [ 1238.637552][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1238.644591][ C1] rcu: 0-...!: (1 GPs behind) idle=a62c/0/0x1 softirq=60918/60919 fqs=0 [ 1238.655253][ C1] (detected by 1, t=10503 jiffies, g=82001, q=11 ncpus=2) [ 1238.662508][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1238.668188][ C0] NMI backtrace for cpu 0 [ 1238.668204][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1238.668287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1238.668303][ C0] RIP: 0010:__hrtimer_run_queues+0x2c6/0xd50 [ 1238.668427][ C0] Code: ff ff e8 8d eb bc 08 89 c3 31 ff 89 c6 e8 c2 11 10 00 85 db 0f 84 97 04 00 00 e8 55 0e 10 00 eb 05 e8 4e 0e 10 00 48 8b 1c 24 <4c> 89 e7 48 c7 c6 e0 0a 8e 8a e8 2b 74 a3 02 48 8b 44 24 40 42 80 [ 1238.668482][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000006 [ 1238.668523][ C0] RAX: ffffffff81726d4b RBX: ffff8880b8e2a808 RCX: ffffffff8c8bc740 [ 1238.668536][ C0] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1238.668547][ C0] RBP: ffffc90000007e88 R08: ffff888027d07357 R09: ffff888027d07340 [ 1238.668560][ C0] R10: dffffc0000000000 R11: ffffed1004fa0e6b R12: ffff888027d07340 [ 1238.668572][ C0] R13: dffffc0000000000 R14: 1bc16f79616562ef R15: ffff8880b8e2a7c0 [ 1238.668585][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1238.668599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1238.668610][ C0] CR2: 0000200000000100 CR3: 0000000029ad7000 CR4: 00000000003506f0 [ 1238.668626][ C0] Call Trace: [ 1238.668656][ C0] [ 1238.668676][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 1238.668789][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1238.668822][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 1238.668854][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1238.668940][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1238.668968][ C0] [ 1238.668973][ C0] [ 1238.669002][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1238.669068][ C0] RIP: 0010:default_idle+0xb/0x10 [ 1238.669089][ C0] Code: 48 89 df e8 37 34 9a f7 e9 44 ff ff ff e8 cd 06 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d a7 5a 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1238.669102][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 1238.669115][ C0] RAX: e51262f0afc1ea00 RBX: ffffffff8a395407 RCX: e51262f0afc1ea00 [ 1238.669128][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 1238.669140][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1238.669152][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 1238.669164][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 1238.669179][ C0] ? default_idle_call+0x77/0xc0 [ 1238.669204][ C0] default_idle_call+0x84/0xc0 [ 1238.669224][ C0] do_idle+0x3a2/0x680 [ 1238.669272][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1238.669303][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1238.669332][ C0] ? schedule_idle+0x57/0x90 [ 1238.669350][ C0] cpu_startup_entry+0x3f/0x60 [ 1238.669380][ C0] rest_init+0x2dc/0x300 [ 1238.669421][ C0] ? time_init+0x33/0x33 [ 1238.669497][ C0] arch_call_rest_init+0xa/0xa [ 1238.669521][ C0] start_kernel+0x493/0x53c [ 1238.669545][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 1238.669605][ C0] [ 1238.670176][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g82001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1238.974826][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1238.984817][ C1] rcu: RCU grace-period kthread stack dump: [ 1238.990729][ C1] task:rcu_preempt state:R running task stack:27736 pid:16 ppid:2 flags:0x00004000 [ 1239.001551][ C1] Call Trace: [ 1239.004861][ C1] [ 1239.007828][ C1] __schedule+0x11d1/0x40e0 [ 1239.012373][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1239.018310][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1239.024248][ C1] ? __sched_text_start+0x8/0x8 [ 1239.029139][ C1] ? __mod_timer+0x91e/0xd00 [ 1239.033763][ C1] schedule+0xb9/0x180 [ 1239.037859][ C1] schedule_timeout+0x184/0x2d0 [ 1239.042760][ C1] ? console_conditional_schedule+0x40/0x40 [ 1239.048683][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1239.054796][ C1] ? update_process_times+0x1b0/0x1b0 [ 1239.060202][ C1] ? prepare_to_swait_event+0x335/0x350 [ 1239.065795][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 1239.070705][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1239.075581][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1239.081612][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 1239.086399][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1239.091294][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1239.096530][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1239.101758][ C1] rcu_gp_kthread+0x99/0x3b0 [ 1239.106392][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1239.111545][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1239.117504][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1239.122669][ C1] kthread+0x29d/0x330 [ 1239.126781][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1239.131937][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1239.136555][ C1] ret_from_fork+0x1f/0x30 [ 1239.141035][ C1] [ 1239.144084][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1239.150438][ C1] CPU: 1 PID: 4388 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1239.158010][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1239.168095][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1239.174724][ C1] RIP: 0010:smp_call_function_many_cond+0xea2/0x1290 [ 1239.181571][ C1] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 f6 f6 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 82 f3 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 67 f3 0a [ 1239.201206][ C1] RSP: 0018:ffffc90004e9f800 EFLAGS: 00000293 [ 1239.207310][ C1] RAX: ffffffff81778839 RBX: dffffc0000000000 RCX: ffff88801df5bc00 [ 1239.215303][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1239.223395][ C1] RBP: ffffc90004e9f960 R08: ffffffff90aff247 R09: 1ffffffff215fe48 [ 1239.231384][ C1] R10: dffffc0000000000 R11: fffffbfff215fe49 R12: 1ffff110171c8601 [ 1239.239379][ C1] R13: ffff8880b8f3bbc0 R14: 0000000000000000 R15: ffff8880b8e43008 [ 1239.247376][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1239.256327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1239.262936][ C1] CR2: 00007fff83629568 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1239.270949][ C1] Call Trace: [ 1239.274256][ C1] [ 1239.277212][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1239.282716][ C1] ? text_poke_sync+0x20/0x20 [ 1239.287487][ C1] ? smp_call_function_many+0x30/0x30 [ 1239.292888][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1239.298376][ C1] ? text_poke+0x90/0x90 [ 1239.302648][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1239.308838][ C1] ? text_poke_loc_init+0x10f/0x5b0 [ 1239.314094][ C1] ? text_poke_sync+0x20/0x20 [ 1239.318812][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 1239.323955][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 1239.329444][ C1] text_poke_bp_batch+0x2b7/0x850 [ 1239.334531][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 1239.340631][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 1239.345880][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 1239.352088][ C1] text_poke_finish+0x16/0x30 [ 1239.356812][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 1239.362824][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 1239.368831][ C1] static_key_enable+0x16/0x20 [ 1239.373632][ C1] toggle_allocation_gate+0xba/0x470 [ 1239.378945][ C1] ? show_object+0xa0/0xa0 [ 1239.383395][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1239.389417][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1239.394840][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1239.400073][ C1] ? process_one_work+0x7b0/0x1160 [ 1239.405242][ C1] process_one_work+0x8a2/0x1160 [ 1239.410235][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1239.415907][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1239.420965][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1239.426555][ C1] ? kthread_data+0x4b/0xc0 [ 1239.431106][ C1] worker_thread+0xaa2/0x1270 [ 1239.435827][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1239.441766][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1239.446844][ C1] kthread+0x29d/0x330 [ 1239.450965][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1239.456023][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1239.460668][ C1] ret_from_fork+0x1f/0x30 [ 1239.465133][ C1]