last executing test programs: 29m52.107648101s ago: executing program 0 (id=3471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000280)) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x143b02) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40018}, 0x800) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 29m50.908757475s ago: executing program 0 (id=3474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000ec01d00000000000000050008000d000000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r2}, 0x38) 29m44.187076318s ago: executing program 0 (id=3489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000280)) getpid() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x143b02) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40018}, 0x800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 29m42.999934781s ago: executing program 0 (id=3492): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 29m42.04921999s ago: executing program 0 (id=3494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x2b) ioctl$SNDCTL_DSP_RESET(r4, 0x80044dff, 0x1000000000000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x7f}) gettid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, 0x0) preadv(r8, &(0x7f0000001240)=[{0x0}], 0x1, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r9, 0x227b, &(0x7f00000000c0)=0x1) readv(r9, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1) 29m40.291715465s ago: executing program 0 (id=3498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000ec01d00000000000000050008000d000000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r2}, 0x38) 29m24.970003227s ago: executing program 32 (id=3498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000ec01d00000000000000050008000d000000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r2}, 0x38) 4m24.796364981s ago: executing program 3 (id=6637): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) select(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0xf4e54000) 4m22.947915947s ago: executing program 3 (id=6642): bpf$PROG_LOAD(0x5, 0x0, 0xff7a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x151a, &(0x7f0000001980)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x151f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0) r5 = dup(0xffffffffffffffff) inotify_rm_watch(r5, r4) inotify_rm_watch(0xffffffffffffffff, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m20.236011459s ago: executing program 3 (id=6644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) 4m19.552000302s ago: executing program 3 (id=6645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) wait4(0x0, 0x0, 0x1, 0x0) 4m19.271603678s ago: executing program 3 (id=6647): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socketpair(0x21, 0x1, 0xb, &(0x7f0000000000)) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb0e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000200), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4m16.836851615s ago: executing program 3 (id=6651): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 4m0.715865397s ago: executing program 33 (id=6651): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 3m2.369502066s ago: executing program 4 (id=6756): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) 3m1.210091628s ago: executing program 4 (id=6757): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x144, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe11}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000940)="a9074965c9e0f8e8db57", 0xa}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r5, &(0x7f0000000180)="6985bc3e5de8fe91a5eaa35b02afb6", 0xf, 0x3b00, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2m59.100545809s ago: executing program 4 (id=6761): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) select(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0xf4e54000) 2m57.335123933s ago: executing program 4 (id=6764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) syz_fuse_handle_req(r6, &(0x7f00000043c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab6c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efe0200000022d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6b70baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34ca6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2000552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d646200", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x401, {0x1, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x8, 0x0, 0x7, 0x200000000001, 0x1000, 0x0, 0x7fff, 0x8000, 0x0, r8, 0xee00, 0xb099, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000006500)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x40890) 2m55.818077153s ago: executing program 4 (id=6766): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) 2m51.548428745s ago: executing program 4 (id=6771): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x5, 0x1fc, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) unshare(0x42000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c40)) ioctl$TUNGETVNETLE(r4, 0x800454dd, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000e80)}, 0x20) 2m35.690315182s ago: executing program 34 (id=6771): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x5, 0x1fc, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) unshare(0x42000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c40)) ioctl$TUNGETVNETLE(r4, 0x800454dd, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000e80)}, 0x20) 18.622586408s ago: executing program 2 (id=7063): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) 17.568055229s ago: executing program 2 (id=7066): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) dup3(r3, r5, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 15.96739956s ago: executing program 2 (id=7070): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x400002, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x356, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 13.744721434s ago: executing program 2 (id=7074): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = syz_open_dev$mouse(0x0, 0x0, 0x10101) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x3, 0xffff, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1, 0x8000, 0x8, 0x4, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x478, 0x0, 0x0, 0x0, 0x74, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x10, 0x7f}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) socketpair(0x29, 0x6, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 13.500033138s ago: executing program 2 (id=7075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000180)={'ip6gretap0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0xfdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.461167208s ago: executing program 2 (id=7080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000040)=0x70, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sigaltstack(0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 9.059742645s ago: executing program 6 (id=7084): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 8.540027774s ago: executing program 1 (id=7086): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x2, 0x0) eventfd(0x2000100) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x6, 0xc4, 0x0, 0x1000, 0xc00000}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x91) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.122543612s ago: executing program 5 (id=7087): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x21000, 0x3a, 0x1000, 0x3a, 0xc, 0x5, 0x2}, 0x1c) 6.976972185s ago: executing program 6 (id=7088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$FICLONE(r3, 0x40049409, r1) 6.803991568s ago: executing program 5 (id=7089): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) dup3(r3, r5, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 6.72359622s ago: executing program 1 (id=7090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlink(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 6.537301984s ago: executing program 6 (id=7091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 6.486185574s ago: executing program 5 (id=7092): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073010600000000009500009c06000000e1f9386e9df76af0d4cea09b70be1a7de3f6eca03596d7551d5c44a6448865c48e8561f4309a1f0a3d08d44d97512914279f5ef44a0f7c3702f1a87bb9b3aa425318d91ab738bd046e627c4fd1b5ce46c37375b15fc354802e39470f454d09e9959bdfa1ebac1a60715b31724ae833ce57de9902d5c21c29f2b3d5a6666c2aca3fb6c2b1cef3b56b4af450c7600507003547c6dd73a887b74dc30049ca1b0c0000cd718a77958a5aa89c7b95c20d034bb6f60bcfc0c801de03128956334706322949a008f37dcde60685fc2706dfb02d471b0167cf2f5e9c10ff3e75fbf8206f7a6d9e87e0bb6998556a88c4d6e62e71a8cb07ea02c2bbb4433a56edcec31fdeb1e9be3482573c2948282f9c911737b192ee73d653333916ac1b6d7dcdf55f72f69a74ae292645775a402a4e8f4f9058977e8599b6ee923bf27b0d30e3d391f6abc007c1c17c83fab7df47f9132ddbf9b182f5f4b1e669bd53726e4ec05ebe51"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xa}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 4.625181971s ago: executing program 6 (id=7093): getgroups(0x4, &(0x7f0000000080)=[0x0, 0xee01, 0xee00, 0xee00]) r1 = timerfd_create(0x0, 0x80800) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) read(r1, &(0x7f00000003c0)=""/222, 0xde) mkdir(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000700)={[{@acl}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@noload}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@sysvgroups}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x26bcaeb15148fbba) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) 4.62101075s ago: executing program 1 (id=7094): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001780)={0x3, 0x0, [{0x3000, 0x3, &(0x7f0000000040)=""/3}, {0x5000, 0x28, &(0x7f00000002c0)=""/40}, {0x0, 0x0, 0xfffffffffffffffe}]}) 4.235831908s ago: executing program 1 (id=7095): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0x40, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0xfffffca2) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'pimreg0\x00', {0x5}}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, &(0x7f0000000140)='grpquota') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/../file0\x00'}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r6 = dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x7, [0x4000, 0x8, 0xc5c7, 0xf, 0x5, 0x9, 0xf800]}, 0x16) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) 2.265727787s ago: executing program 6 (id=7096): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x2}, 0x8) r0 = syz_open_dev$vcsn(0x0, 0x4, 0x448000) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r3, 0x0, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.908984293s ago: executing program 5 (id=7097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) madvise(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.306655955s ago: executing program 1 (id=7098): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800800014140000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x1) creat(0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 976.045101ms ago: executing program 5 (id=7099): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) open(0x0, 0x80ff, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) dup3(r3, r5, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 901.165703ms ago: executing program 5 (id=7100): pipe(&(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x42, 0x400000, @mcast2, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2e0842, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffe) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e657b8220ca193c9de9030c3c7175ae0132383bf66bd1ea5bd07a8092f5c1c356ef81ebc8a3ed11284c75e4991ca84a0eda6ac4148ace258f78bc2340c45834bc28c93523f00c13f7bda920d040647a60c2f548c6d1556573b", 0x5a}, {&(0x7f00000002c0)="ee3714aa7756572d12ad", 0xa}], 0x2}}], 0x2, 0xc0) sendto$inet(r5, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) 104.379439ms ago: executing program 1 (id=7101): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(&(0x7f0000000540)='ocfs2\x00', 0x1) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) r3 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r3) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 6 (id=7102): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) kernel console output (not intermixed with test programs): he newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2885.799292][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2885.811075][T30292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2885.841591][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2885.868626][T30292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2885.903688][T30292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2885.993953][T30292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.003568][T30292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.161056][T30292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2886.276713][T30499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6717'. [ 2887.665382][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2887.695528][T26920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.716466][T26920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.802135][T26915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.844355][T26915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.893988][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2888.568127][T30521] QAT: Device 197 not found [ 2890.218240][T30527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6722'. [ 2890.644229][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2891.460754][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2892.111347][T30546] loop5: detected capacity change from 0 to 16 [ 2893.282932][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2893.302711][T30546] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 2893.871357][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/296.tmp-b7:5' failed: Read-only file system [ 2894.160361][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2894.454206][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/296.tmp-b7:5' failed: Read-only file system [ 2894.580670][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2894.636299][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/296.tmp-b7:5' failed: Read-only file system [ 2894.901113][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/296.tmp-b7:5' failed: Read-only file system [ 2895.865725][T30565] QAT: Device 197 not found [ 2896.403177][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2896.581857][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2897.128502][T22786] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2897.323696][T22786] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 2897.337845][T22786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2897.350009][T22786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 2897.364025][T22786] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 2897.377048][T22786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2897.392896][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2897.411954][T22786] usb 2-1: config 0 descriptor?? [ 2897.418407][T30574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2897.614437][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2897.850221][T27479] Bluetooth: hci0: command 0x1003 tx timeout [ 2897.857529][T24113] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2898.183814][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.206870][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.371381][T22786] uclogic 0003:5543:0005.0015: No inputs registered, leaving [ 2898.495343][T22786] uclogic 0003:5543:0005.0015: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 2898.533039][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2898.628927][T22786] usb 2-1: USB disconnect, device number 123 [ 2898.673900][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2899.612591][T30579] lo speed is unknown, defaulting to 1000 [ 2899.692194][T30583] fido_id[30583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2899.723475][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/295.tmp-b7:2' failed: Read-only file system [ 2899.814276][T30593] loop2: detected capacity change from 0 to 512 [ 2899.916859][T30593] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.6740: iget: bad extended attribute block 1 [ 2900.050222][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/298.tmp-b7:2' failed: Read-only file system [ 2900.089114][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 2900.178304][T30593] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6740: couldn't read orphan inode 15 (err -117) [ 2900.239901][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/298.tmp-b7:2' failed: Read-only file system [ 2900.257962][T30593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2900.283409][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 2901.260444][T30595] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 2901.388276][T23009] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2901.955240][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2902.304426][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/298.tmp-b7:2' failed: Read-only file system [ 2902.632124][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/298.tmp-b7:2' failed: Read-only file system [ 2902.683613][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2902.725761][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/299.tmp-b7:2' failed: Read-only file system [ 2903.114219][T30618] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.6745'. [ 2904.182258][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2904.457771][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/299.tmp-b7:2' failed: Read-only file system [ 2904.716503][T30624] syz.5.6746: attempt to access beyond end of device [ 2904.716503][T30624] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2904.835549][T30624] syz.5.6746: attempt to access beyond end of device [ 2904.835549][T30624] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2904.871948][T30624] Mount JFS Failure: -5 [ 2905.088038][T30624] jfs_mount failed w/return code = -5 [ 2905.162820][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/299.tmp-b7:2' failed: Read-only file system [ 2906.098989][T30640] tipc: Enabling of bearer rejected, failed to enable media [ 2906.764561][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2906.994392][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2907.054025][T29014] udevd[29014]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2907.164385][T30645] lo speed is unknown, defaulting to 1000 [ 2907.252034][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2907.655060][T15789] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2908.059425][T15789] usb 6-1: device descriptor read/64, error -71 [ 2908.296046][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2908.388950][T15789] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2908.547782][T15789] usb 6-1: device descriptor read/64, error -71 [ 2908.681737][T15789] usb usb6-port1: attempt power cycle [ 2908.732439][T30658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6756'. [ 2909.203083][T15789] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2909.248016][T15789] usb 6-1: device descriptor read/8, error -71 [ 2909.442207][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2909.557297][T15789] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2909.610183][T15789] usb 6-1: device descriptor read/8, error -71 [ 2909.740888][T15789] usb usb6-port1: unable to enumerate USB device [ 2909.742320][T23009] block device autoloading is deprecated and will be removed. [ 2910.172496][T29014] udevd[29014]: setting mode of /dev/loop2 to 060660 failed: Read-only file system [ 2910.187852][T29014] udevd[29014]: setting owner of /dev/loop2 to uid=0, gid=6 failed: Read-only file system [ 2912.280653][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2912.386949][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2912.438957][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2912.461281][T29014] udevd[29014]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2913.471914][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2914.836514][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2914.936731][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2916.189096][T15789] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2916.420982][T30700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6766'. [ 2916.614602][T15789] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 2916.767869][T15789] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2916.792113][T15789] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2916.813892][T15789] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2916.833356][T15789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.297260][T15789] usb 6-1: Product: syz [ 2918.301504][T15789] usb 6-1: Manufacturer: syz [ 2918.306217][T15789] usb 6-1: SerialNumber: syz [ 2918.780081][T15789] usb 6-1: can't set config #220, error -71 [ 2918.838800][T15789] usb 6-1: USB disconnect, device number 6 [ 2919.028614][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2920.002149][T28449] udevd[28449]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 2920.089679][T30717] lo speed is unknown, defaulting to 1000 [ 2921.075450][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/297.tmp-b7:5' failed: Read-only file system [ 2921.698319][T30729] loop5: detected capacity change from 0 to 16 [ 2922.061596][T30729] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 2922.980184][T30728] loop5: detected capacity change from 0 to 256 [ 2923.044672][T30728] FAT-fs (loop5): Directory bread(block 64) failed [ 2923.051387][T30728] FAT-fs (loop5): Directory bread(block 65) failed [ 2923.058254][T30728] FAT-fs (loop5): Directory bread(block 66) failed [ 2923.064814][T30728] FAT-fs (loop5): Directory bread(block 67) failed [ 2923.071518][T30728] FAT-fs (loop5): Directory bread(block 68) failed [ 2923.078090][T30728] FAT-fs (loop5): Directory bread(block 69) failed [ 2923.084682][T30728] FAT-fs (loop5): Directory bread(block 70) failed [ 2923.091272][T30728] FAT-fs (loop5): Directory bread(block 71) failed [ 2923.097993][T30728] FAT-fs (loop5): Directory bread(block 72) failed [ 2923.104552][T30728] FAT-fs (loop5): Directory bread(block 73) failed [ 2923.134584][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/301.tmp-b7:5' failed: Read-only file system [ 2923.526187][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/301.tmp-b7:5' failed: Read-only file system [ 2923.583491][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/301.tmp-b7:5' failed: Read-only file system [ 2923.714045][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2923.727025][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 2923.781758][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 2923.822192][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 2923.897531][T22786] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2923.898464][T30719] lo speed is unknown, defaulting to 1000 [ 2924.089421][T22786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2924.107341][T15789] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2924.115596][T22786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2924.147441][T22786] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2924.156572][T22786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2924.188567][T22786] usb 6-1: config 0 descriptor?? [ 2924.312476][T15789] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 2924.343223][T15789] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2924.371175][T15789] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2924.395084][T15789] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2924.414714][T15789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2924.433377][T15789] usb 2-1: Product: syz [ 2924.442186][T15789] usb 2-1: Manufacturer: syz [ 2924.451424][T15789] usb 2-1: SerialNumber: syz [ 2924.700488][T15789] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 2924.713438][T15789] usb 2-1: No valid video chain found. [ 2924.749387][T15789] usb 2-1: USB disconnect, device number 124 [ 2924.812372][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2924.827442][T22786] usb 6-1: string descriptor 0 read error: -22 [ 2925.232640][T30759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6779'. [ 2925.440603][T22786] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 2925.618953][T22786] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 2925.727451][T22786] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 2925.766673][T22786] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 2925.789356][T22786] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 2925.837718][T22786] usb 6-1: USB disconnect, device number 7 [ 2925.948780][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2926.315046][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/304.tmp-b7:5' failed: Read-only file system [ 2929.098150][T24113] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2929.163225][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/304.tmp-b7:5' failed: Read-only file system [ 2929.426825][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2931.266289][T30796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6787'. [ 2931.321701][T30793] loop5: detected capacity change from 0 to 16 [ 2931.669428][T30793] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 2931.803448][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/305.tmp-b7:5' failed: Read-only file system [ 2932.251193][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/305.tmp-b7:5' failed: Read-only file system [ 2932.346109][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2932.388639][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/305.tmp-b7:5' failed: Read-only file system [ 2932.534763][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/306.tmp-b7:5' failed: Read-only file system [ 2932.866145][T30805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6790'. [ 2932.985414][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/306.tmp-b7:5' failed: Read-only file system [ 2933.535228][T18958] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2933.762770][T18958] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 2933.794347][T18958] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2933.834492][T18958] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2933.871635][T18958] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2933.887230][T18958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.905654][T18958] usb 3-1: Product: syz [ 2933.910163][T18958] usb 3-1: Manufacturer: syz [ 2933.914818][T18958] usb 3-1: SerialNumber: syz [ 2934.340779][T18958] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 2934.459022][T18958] usb 3-1: No valid video chain found. [ 2934.691262][T18958] usb 3-1: USB disconnect, device number 12 [ 2934.952357][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2936.083437][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2936.139474][T30822] syz.1.6794: attempt to access beyond end of device [ 2936.139474][T30822] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2936.201090][T30822] syz.1.6794: attempt to access beyond end of device [ 2936.201090][T30822] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2936.214788][T30822] Mount JFS Failure: -5 [ 2936.219557][T30822] jfs_mount failed w/return code = -5 [ 2936.837363][T30502] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2937.059382][T30502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2937.080312][T30502] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2937.125369][T30502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2937.162173][T30502] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2937.172580][T30502] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2937.185699][T30502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.205790][T26913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2937.239638][T24113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2937.246301][T30502] usb 3-1: config 0 descriptor?? [ 2937.339192][T24113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2937.349218][T24113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2937.362236][T24113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2937.371967][T24113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2937.387889][T24113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2937.601947][T30835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6797'. [ 2937.891735][T30828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2938.038254][T30828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2938.074911][ C1] vkms_vblank_simulate: vblank timer overrun [ 2938.145739][T26913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2938.218593][T30832] lo speed is unknown, defaulting to 1000 [ 2938.262744][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/306.tmp-b7:5' failed: Read-only file system [ 2938.329365][T30502] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 2938.336754][T30502] hdpvr 3-1:0.0: device init failed [ 2938.343091][T30502] hdpvr: probe of 3-1:0.0 failed with error -12 [ 2938.353774][T30502] usb 3-1: USB disconnect, device number 13 [ 2938.386835][T26913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2938.607059][T26913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2938.816123][T30847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6799'. [ 2939.511947][T24113] Bluetooth: hci0: command tx timeout [ 2939.607183][T26913] tipc: Left network mode [ 2939.630056][T28447] udevd[28447]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2939.793268][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/306.tmp-b7:5' failed: Read-only file system [ 2940.327408][ T5859] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2940.892129][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/306.tmp-b7:5' failed: Read-only file system [ 2940.952082][ T5859] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2940.970699][ T5859] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2940.990861][ T5859] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2941.253517][ T5859] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2941.277370][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2941.285783][ T5859] usb 2-1: Product: syz [ 2941.290258][ T5859] usb 2-1: Manufacturer: syz [ 2941.295110][ T5859] usb 2-1: SerialNumber: syz [ 2941.668572][T24113] Bluetooth: hci0: command tx timeout [ 2941.757689][ T5859] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2941.768131][ T5859] usb 2-1: No valid video chain found. [ 2941.983031][ T5859] usb 2-1: USB disconnect, device number 125 [ 2942.096045][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/306.tmp-b7:5' failed: Read-only file system [ 2942.143296][T30869] loop5: detected capacity change from 0 to 128 [ 2942.160690][T30868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6805'. [ 2942.243286][T30869] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2942.280256][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/307.tmp-b7:5' failed: Read-only file system [ 2942.300138][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 2942.341681][T30869] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2942.375712][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/307.tmp-b7:5' failed: Read-only file system [ 2942.392159][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 2942.406703][T30869] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.6805: No space for directory leaf checksum. Please run e2fsck -D. [ 2942.447243][T30869] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.6805: Directory block failed checksum [ 2942.500863][T30869] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.6805: No space for directory leaf checksum. Please run e2fsck -D. [ 2942.545559][T30869] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.6805: checksumming directory block 0 [ 2942.884546][T30292] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2943.784565][T24113] Bluetooth: hci0: command tx timeout [ 2943.832735][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/307.tmp-b7:5' failed: Read-only file system [ 2943.848376][T30877] bridge0: port 3(vlan2) entered blocking state [ 2943.854894][T30877] bridge0: port 3(vlan2) entered disabled state [ 2943.858424][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/307.tmp-b7:5' failed: Read-only file system [ 2943.861573][T30877] vlan2: entered allmulticast mode [ 2943.877816][T30877] bridge0: entered allmulticast mode [ 2943.915596][T30877] vlan2: left allmulticast mode [ 2943.920709][T30877] bridge0: left allmulticast mode [ 2943.943697][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2944.231413][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2944.595768][T30889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6808'. [ 2945.331681][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2945.406204][T30832] chnl_net:caif_netlink_parms(): no params data found [ 2945.817327][T24113] Bluetooth: hci0: command tx timeout [ 2945.857053][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/300.tmp-b7:2' failed: Read-only file system [ 2946.254186][T30902] loop2: detected capacity change from 0 to 16 [ 2946.297066][T30902] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 2946.417553][T30902] loop2: detected capacity change from 0 to 256 [ 2946.592669][T30902] FAT-fs (loop2): Directory bread(block 64) failed [ 2946.599633][T30902] FAT-fs (loop2): Directory bread(block 65) failed [ 2946.607209][T30902] FAT-fs (loop2): Directory bread(block 66) failed [ 2946.613919][T30902] FAT-fs (loop2): Directory bread(block 67) failed [ 2946.621447][T30902] FAT-fs (loop2): Directory bread(block 68) failed [ 2946.628228][T30902] FAT-fs (loop2): Directory bread(block 69) failed [ 2946.635639][T30902] FAT-fs (loop2): Directory bread(block 70) failed [ 2946.642443][T30902] FAT-fs (loop2): Directory bread(block 71) failed [ 2946.649881][T30902] FAT-fs (loop2): Directory bread(block 72) failed [ 2946.656634][T30902] FAT-fs (loop2): Directory bread(block 73) failed [ 2946.892295][T30832] bridge0: port 1(bridge_slave_0) entered blocking state [ 2946.970268][T30832] bridge0: port 1(bridge_slave_0) entered disabled state [ 2947.016981][T30832] bridge_slave_0: entered allmulticast mode [ 2947.097344][T30832] bridge_slave_0: entered promiscuous mode [ 2947.133910][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/309.tmp-b7:2' failed: Read-only file system [ 2947.305678][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/309.tmp-b7:2' failed: Read-only file system [ 2947.401225][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/309.tmp-b7:2' failed: Read-only file system [ 2947.925506][T26913] hsr_slave_0: left promiscuous mode [ 2948.002477][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/311.tmp-b7:2' failed: Read-only file system [ 2948.037289][T26913] hsr_slave_1: left promiscuous mode [ 2948.045212][T26913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2948.068105][T26913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2948.217454][T26913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2948.235120][T26913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2948.528761][T26913] bridge_slave_1: left allmulticast mode [ 2948.623366][T26913] bridge_slave_1: left promiscuous mode [ 2948.771114][T26913] bridge0: port 2(bridge_slave_1) entered disabled state [ 2948.883179][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/311.tmp-b7:2' failed: Read-only file system [ 2949.023387][T26913] bridge_slave_0: left allmulticast mode [ 2949.055040][T26913] bridge_slave_0: left promiscuous mode [ 2949.079759][T26913] bridge0: port 1(bridge_slave_0) entered disabled state [ 2949.100500][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/312.tmp-b7:2' failed: Read-only file system [ 2949.187793][T26913] veth1_macvtap: left promiscuous mode [ 2949.194825][T26913] veth0_macvtap: left promiscuous mode [ 2949.205488][T26913] veth1_vlan: left promiscuous mode [ 2949.211139][T26913] veth0_vlan: left promiscuous mode [ 2949.237097][T30918] loop2: detected capacity change from 0 to 1024 [ 2949.273112][T30918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2949.319412][T30918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2949.367305][T22786] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2949.406935][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/313.tmp-b7:2' failed: Read-only file system [ 2949.442814][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 2949.563712][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/313.tmp-b7:2' failed: Read-only file system [ 2949.604687][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 2949.728011][T22786] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.805453][T22786] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2949.878286][T22786] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2950.203410][T22786] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2950.225747][T22786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.282166][T22786] usb 2-1: Product: syz [ 2950.292557][T22786] usb 2-1: Manufacturer: syz [ 2950.317180][T22786] usb 2-1: SerialNumber: syz [ 2950.425942][T23009] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2950.511840][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/313.tmp-b7:2' failed: Read-only file system [ 2950.564113][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/313.tmp-b7:2' failed: Read-only file system [ 2950.619876][T22786] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2950.626335][T22786] usb 2-1: No valid video chain found. [ 2950.652232][T22786] usb 2-1: USB disconnect, device number 126 [ 2950.874759][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2951.616125][T30925] loop2: detected capacity change from 0 to 40427 [ 2951.618304][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6817'. [ 2951.723519][T30925] F2FS-fs (loop2): invalid crc value [ 2951.776062][T30925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2951.878888][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 2952.000584][T30925] F2FS-fs (loop2): Start checkpoint disabled! [ 2952.140726][T30925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2952.564103][T26913] team0 (unregistering): Port device team_slave_1 removed [ 2952.632132][T21688] kworker/u4:2: attempt to access beyond end of device [ 2952.632132][T21688] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2952.761882][T21688] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2952.791253][T21688] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2952.799269][T21688] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2952.973519][T26913] team0 (unregistering): Port device team_slave_0 removed [ 2953.122168][T26913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2953.317802][T26913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2954.381641][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/316.tmp-b7:2' failed: Read-only file system [ 2955.518756][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/316.tmp-b7:2' failed: Read-only file system [ 2955.562355][T26913] bond0 (unregistering): Released all slaves [ 2955.694323][T30832] bridge0: port 2(bridge_slave_1) entered blocking state [ 2955.702063][T30832] bridge0: port 2(bridge_slave_1) entered disabled state [ 2955.709651][T30832] bridge_slave_1: entered allmulticast mode [ 2955.716846][T30832] bridge_slave_1: entered promiscuous mode [ 2955.824989][T30832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2955.878329][T30832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2955.970806][T30832] team0: Port device team_slave_0 added [ 2956.003086][T30832] team0: Port device team_slave_1 added [ 2956.033449][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2956.131893][T30832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2956.138242][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2956.140826][T30832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2956.180817][T30832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2956.293104][T30832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2956.302809][T30832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2956.366844][T30832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2956.439053][T30958] lo speed is unknown, defaulting to 1000 [ 2957.225666][T30832] hsr_slave_0: entered promiscuous mode [ 2957.269632][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/316.tmp-b7:2' failed: Read-only file system [ 2957.301093][T30832] hsr_slave_1: entered promiscuous mode [ 2957.301976][T30832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2957.302088][T30832] Cannot create hsr debugfs directory [ 2957.620933][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2957.645697][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/316.tmp-b7:2' failed: Read-only file system [ 2958.786157][T30972] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6827'. [ 2958.885967][T30832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2958.939537][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2958.959561][T30832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2958.986827][T30832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2959.040561][T30832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2959.062188][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/316.tmp-b7:2' failed: Read-only file system [ 2959.381325][T30984] loop2: detected capacity change from 0 to 16 [ 2959.399288][T30984] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 2959.465069][T28449] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2959.475387][T30984] loop2: detected capacity change from 0 to 256 [ 2959.519581][T30984] FAT-fs (loop2): Directory bread(block 64) failed [ 2959.526209][T30984] FAT-fs (loop2): Directory bread(block 65) failed [ 2959.533248][T30984] FAT-fs (loop2): Directory bread(block 66) failed [ 2959.539917][T30984] FAT-fs (loop2): Directory bread(block 67) failed [ 2959.546633][T30984] FAT-fs (loop2): Directory bread(block 68) failed [ 2959.553333][T30984] FAT-fs (loop2): Directory bread(block 69) failed [ 2959.560103][T30984] FAT-fs (loop2): Directory bread(block 70) failed [ 2959.566793][T30984] FAT-fs (loop2): Directory bread(block 71) failed [ 2959.573556][T30984] FAT-fs (loop2): Directory bread(block 72) failed [ 2959.576900][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system [ 2959.580823][T30984] FAT-fs (loop2): Directory bread(block 73) failed [ 2959.593171][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.611269][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.776025][T30832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2959.797006][T30987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6830'. [ 2959.945660][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system [ 2959.995800][T30832] 8021q: adding VLAN 0 to HW filter on device team0 [ 2960.103243][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system [ 2960.152333][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/317.tmp-b7:2' failed: Read-only file system [ 2960.174603][T29528] bridge0: port 1(bridge_slave_0) entered blocking state [ 2960.178508][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/319.tmp-b7:2' failed: Read-only file system [ 2960.181925][T29528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2960.207007][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/319.tmp-b7:2' failed: Read-only file system [ 2960.230058][T29528] bridge0: port 2(bridge_slave_1) entered blocking state [ 2960.237311][T29528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2960.289449][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/319.tmp-b7:2' failed: Read-only file system [ 2960.869689][T30832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2961.098754][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/320.tmp-b7:2' failed: Read-only file system [ 2962.244008][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/320.tmp-b7:2' failed: Read-only file system [ 2962.604014][T31010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6834'. [ 2963.284199][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2963.465755][T30832] veth0_vlan: entered promiscuous mode [ 2963.524239][T30832] veth1_vlan: entered promiscuous mode [ 2963.558021][T31015] loop2: detected capacity change from 0 to 512 [ 2963.587278][T31015] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 2963.613822][T31015] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 2963.631467][T31015] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 2963.645298][T30832] veth0_macvtap: entered promiscuous mode [ 2963.661723][T31015] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 2963.688953][T31015] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 2963.746841][T31015] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2963.929017][T30832] veth1_macvtap: entered promiscuous mode [ 2964.274747][T31015] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.6836: bg 0: block 34: padding at end of block bitmap is not set [ 2964.319459][T31015] Quota error (device loop2): write_blk: dquota write failed [ 2964.330378][T31015] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 2964.343605][T31015] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.6836: Failed to acquire dquot type 1 [ 2964.345023][T30832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2964.395104][T30832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2964.395265][T31015] EXT4-fs (loop2): 1 truncate cleaned up [ 2964.405326][T30832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2964.424098][T30832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2964.445991][T30832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2964.459726][T31015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2964.489059][T30832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2964.527419][T30832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2964.538226][T30832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2964.550485][T30832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2964.562848][T30832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2964.588566][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/321.tmp-b7:2' failed: Read-only file system [ 2964.602071][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 2964.636591][T30832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.650485][T30832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.661631][T30832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.673610][T30832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.761560][T22786] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2965.192360][T29525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2965.222980][T29525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2965.308080][T29520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2965.321179][T29520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2965.478872][T23009] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2965.541384][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/321.tmp-b7:2' failed: Read-only file system [ 2965.602039][T22786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2965.633813][T22786] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2965.667473][T22786] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2965.675800][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/321.tmp-b7:2' failed: Read-only file system [ 2965.697602][T22786] usb 2-1: Manufacturer: syz [ 2965.704978][T22786] usb 2-1: config 0 descriptor?? [ 2965.725931][T22786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2965.752585][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2965.957877][T30502] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2966.078126][T19231] usb 2-1: USB disconnect, device number 127 [ 2966.129086][T31033] loop6: detected capacity change from 0 to 16 [ 2966.149892][T31033] erofs: (device loop6): erofs_read_superblock: cannot find valid erofs superblock [ 2966.469777][T30502] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2966.505109][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/323.tmp-b7:6' failed: Read-only file system [ 2966.507393][T30502] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2966.527751][T30502] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2966.538585][T30502] usb 3-1: config 220 has no interface number 1 [ 2966.545853][T30502] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2966.553181][T30502] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2966.564011][T30502] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2966.573766][T30502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2966.581726][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/323.tmp-b7:6' failed: Read-only file system [ 2966.582384][T30502] usb 3-1: Product: syz [ 2966.598167][T30502] usb 3-1: Manufacturer: syz [ 2966.602986][T30502] usb 3-1: SerialNumber: syz [ 2966.673314][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/323.tmp-b7:6' failed: Read-only file system [ 2966.718722][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/323.tmp-b7:6' failed: Read-only file system [ 2966.859343][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2966.881915][T30502] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 2966.895725][T30502] usb 3-1: No valid video chain found. [ 2966.917565][T30502] usb 3-1: USB disconnect, device number 14 [ 2969.696332][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2970.181458][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2970.464808][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2970.567420][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2970.817512][T31060] syz.2.6846: attempt to access beyond end of device [ 2970.817512][T31060] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2970.834918][T31060] syz.2.6846: attempt to access beyond end of device [ 2970.834918][T31060] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2970.852891][T31060] Mount JFS Failure: -5 [ 2970.857578][T31060] jfs_mount failed w/return code = -5 [ 2970.951919][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/308.tmp-b7:5' failed: Read-only file system [ 2971.396344][T31064] loop5: detected capacity change from 0 to 256 [ 2971.469027][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2971.503871][T31065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6842'. [ 2971.516490][T31064] xt_hashlimit: size too large, truncated to 1048576 [ 2971.529814][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/325.tmp-b7:5' failed: Read-only file system [ 2972.541143][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2972.625529][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2973.473658][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/325.tmp-b7:5' failed: Read-only file system [ 2973.526803][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/325.tmp-b7:5' failed: Read-only file system [ 2973.697278][T18958] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2974.143667][T18958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2974.167853][T18958] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2974.180025][T18958] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2974.190137][T18958] usb 3-1: Manufacturer: syz [ 2974.207492][ T5859] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2974.253444][T31090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6854'. [ 2974.363002][T18958] usb 3-1: config 0 descriptor?? [ 2974.554317][ T5859] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 2974.625956][ T5859] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2974.940198][T18958] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2974.950175][ T5859] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2974.965433][ T5859] usb 7-1: config 220 has no interface number 1 [ 2974.982258][ T5859] usb 7-1: config 220 interface 0 has no altsetting 0 [ 2974.992651][ T5859] usb 7-1: config 220 interface 76 has no altsetting 0 [ 2975.005304][ T5859] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2975.015167][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2975.024322][ T5859] usb 7-1: Product: syz [ 2975.048307][ T5859] usb 7-1: Manufacturer: syz [ 2975.053132][ T5859] usb 7-1: SerialNumber: syz [ 2975.307458][T18958] usb 3-1: USB disconnect, device number 15 [ 2975.317343][ T5859] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 2975.326342][ T5859] usb 7-1: No valid video chain found. [ 2976.205963][ T5859] usb 7-1: USB disconnect, device number 2 [ 2976.370309][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system [ 2976.462498][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2976.685941][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2976.735617][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2976.830677][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system [ 2977.006563][T31109] loop5: detected capacity change from 0 to 512 [ 2977.018943][T27479] Bluetooth: hci4: command 0x0406 tx timeout [ 2977.078191][T31112] syz.6.6859: attempt to access beyond end of device [ 2977.078191][T31112] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2977.105585][T31112] syz.6.6859: attempt to access beyond end of device [ 2977.105585][T31112] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2977.183040][T31112] Mount JFS Failure: -5 [ 2977.193062][T31112] jfs_mount failed w/return code = -5 [ 2977.283020][T31109] EXT4-fs (loop5): 1 orphan inode deleted [ 2977.300027][T31109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2977.317687][T31109] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2977.317803][T29509] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2977.806107][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/327.tmp-b7:5' failed: Read-only file system [ 2977.806596][T29509] EXT4-fs error (device loop5): ext4_release_dquot:6976: comm kworker/u4:7: Failed to release dquot type 1 [ 2977.819709][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 2977.874663][T30292] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2977.980330][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/327.tmp-b7:5' failed: Read-only file system [ 2978.001131][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 2978.195340][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/327.tmp-b7:5' failed: Read-only file system [ 2978.246278][T31123] netlink: 'syz.1.6862': attribute type 16 has an invalid length. [ 2978.254787][T31123] netlink: 'syz.1.6862': attribute type 17 has an invalid length. [ 2978.269991][T31123] infiniband syz1: set active [ 2978.275337][T31123] infiniband syz1: set active [ 2978.919282][T31123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2979.560857][T31137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6864'. [ 2979.758042][ T5859] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2980.247461][ T5859] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2980.255813][ T5859] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2980.367184][ T5859] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2980.426965][ T5859] usb 3-1: config 220 has no interface number 1 [ 2980.437932][ T5859] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2980.444981][ T5859] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2980.496164][ T5859] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2980.521914][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.582465][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6863'. [ 2980.642203][ T5859] usb 3-1: Product: syz [ 2980.712065][ T5859] usb 3-1: Manufacturer: syz [ 2980.733198][ T5859] usb 3-1: SerialNumber: syz [ 2981.208806][ T5859] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 2981.215440][ T5859] usb 3-1: No valid video chain found. [ 2981.269948][ T5859] usb 3-1: USB disconnect, device number 16 [ 2981.297439][T15789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2981.489714][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2981.543943][T15789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2981.555811][T15789] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2981.570539][T15789] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2981.580160][T15789] usb 2-1: Manufacturer: syz [ 2981.620337][T15789] usb 2-1: config 0 descriptor?? [ 2981.631410][T15789] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2981.883089][T30771] usb 2-1: USB disconnect, device number 2 [ 2981.891801][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2981.946157][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2981.970983][T31155] fuse: Bad value for 'fd' [ 2982.184380][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2983.044591][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2983.233752][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2983.496897][T31172] syz.5.6875: attempt to access beyond end of device [ 2983.496897][T31172] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2983.538401][T31172] syz.5.6875: attempt to access beyond end of device [ 2983.538401][T31172] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2983.668703][T31172] Mount JFS Failure: -5 [ 2983.691422][T31172] jfs_mount failed w/return code = -5 [ 2983.863628][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2984.499709][T31186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6877'. [ 2985.202542][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2985.352440][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2985.480304][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2985.847244][T30502] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2986.049444][T31205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6880'. [ 2986.063341][T30502] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 2986.089792][T30502] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.152265][T30502] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2986.208989][T30502] usb 7-1: config 220 has no interface number 1 [ 2986.255302][T30502] usb 7-1: config 220 interface 0 has no altsetting 0 [ 2986.290929][T30502] usb 7-1: config 220 interface 76 has no altsetting 0 [ 2986.329877][T30502] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2986.373862][T30502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.403936][T30502] usb 7-1: Product: syz [ 2986.421936][T30502] usb 7-1: Manufacturer: syz [ 2986.436925][T30502] usb 7-1: SerialNumber: syz [ 2986.631685][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2986.681773][T28447] udevd[28447]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2986.705295][T31210] fuse: Bad value for 'fd' [ 2986.724109][T30502] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 2986.738108][T30502] usb 7-1: No valid video chain found. [ 2986.765327][T30502] usb 7-1: USB disconnect, device number 3 [ 2987.420874][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2987.704572][T31220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6886'. [ 2988.427360][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2988.460493][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2988.603392][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2988.867788][T18958] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2989.075296][T18958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2989.102116][T18958] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2989.112622][T18958] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2989.126975][T18958] usb 2-1: Manufacturer: syz [ 2989.247019][T31232] syz.2.6889: attempt to access beyond end of device [ 2989.247019][T31232] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2989.248201][T18958] usb 2-1: config 0 descriptor?? [ 2989.287552][T31232] syz.2.6889: attempt to access beyond end of device [ 2989.287552][T31232] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2989.289015][T18958] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2989.316587][T31232] Mount JFS Failure: -5 [ 2989.327588][T31232] jfs_mount failed w/return code = -5 [ 2989.365334][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2989.422149][T28447] udevd[28447]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2989.649717][T18958] usb 2-1: USB disconnect, device number 3 [ 2990.592180][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2990.629052][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2990.720879][T31245] fuse: Bad value for 'fd' [ 2991.320472][T31254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6893'. [ 2991.787899][ T5859] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2992.043415][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2992.150720][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2992.154351][ T5859] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2992.196241][ T5859] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2992.239110][ T5859] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2992.255206][ T5859] usb 3-1: config 220 has no interface number 1 [ 2992.262438][ T5859] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2992.273758][ T5859] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2992.285561][ T5859] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2992.316777][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.326271][ T5859] usb 3-1: Product: syz [ 2992.357252][ T5859] usb 3-1: Manufacturer: syz [ 2992.362179][ T5859] usb 3-1: SerialNumber: syz [ 2992.392917][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2992.501121][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2992.598161][ T5859] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 2992.604620][ T5859] usb 3-1: No valid video chain found. [ 2992.752627][T31272] syz.6.6903: attempt to access beyond end of device [ 2992.752627][T31272] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2992.762642][ T5859] usb 3-1: USB disconnect, device number 17 [ 2992.768185][T31272] syz.6.6903: attempt to access beyond end of device [ 2992.768185][T31272] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2992.785457][T31272] Mount JFS Failure: -5 [ 2992.789993][T31272] jfs_mount failed w/return code = -5 [ 2993.376557][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2993.468005][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2993.589594][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2994.144771][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2994.618259][T31290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6908'. [ 2995.012711][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2995.291425][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2995.607690][T15789] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2996.443301][T31301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6911'. [ 2996.519297][T15789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2996.578920][T15789] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2996.591132][T15789] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2996.600444][T15789] usb 6-1: Manufacturer: syz [ 2996.608206][T15789] usb 6-1: config 0 descriptor?? [ 2996.722533][T15789] usb 6-1: can't set config #0, error -71 [ 2996.762596][T15789] usb 6-1: USB disconnect, device number 8 [ 2996.995103][T31309] syz.6.6914: attempt to access beyond end of device [ 2996.995103][T31309] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2997.013169][T31309] syz.6.6914: attempt to access beyond end of device [ 2997.013169][T31309] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2997.026405][T31309] Mount JFS Failure: -5 [ 2997.030973][T31309] jfs_mount failed w/return code = -5 [ 2997.628053][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 2997.733412][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 2997.807748][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2998.066839][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 2998.127293][T15789] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2998.351310][T15789] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 2998.382396][T15789] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2998.402239][T15789] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 2998.415596][T15789] usb 7-1: config 220 has no interface number 1 [ 2998.423791][T15789] usb 7-1: config 220 interface 0 has no altsetting 0 [ 2999.417965][T31328] overlayfs: failed to resolve './file1': -2 [ 2999.818249][T15789] usb 7-1: config 220 interface 76 has no altsetting 0 [ 2999.993583][T31333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6920'. [ 3000.135996][T15789] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3000.183887][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3000.199217][T15789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3000.250502][T15789] usb 7-1: Product: syz [ 3000.254758][T15789] usb 7-1: Manufacturer: syz [ 3000.301245][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3000.318288][T15789] usb 7-1: SerialNumber: syz [ 3000.604444][T15789] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 3000.621036][T15789] usb 7-1: No valid video chain found. [ 3000.746246][T15789] usb 7-1: USB disconnect, device number 4 [ 3001.332833][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3001.629218][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/324.tmp-b7:6' failed: Read-only file system [ 3001.687513][T15789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3001.921412][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3001.948583][T31351] loop6: detected capacity change from 0 to 512 [ 3001.956520][T31351] EXT4-fs: Ignoring removed nobh option [ 3002.000501][T31351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3002.008258][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/329.tmp-b7:6' failed: Read-only file system [ 3002.017338][T31351] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3002.158714][T15789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3002.262027][T15789] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3002.355618][T31358] syz.5.6926: attempt to access beyond end of device [ 3002.355618][T31358] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3002.372626][T31358] syz.5.6926: attempt to access beyond end of device [ 3002.372626][T31358] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3002.387566][T31358] Mount JFS Failure: -5 [ 3002.393026][T31358] jfs_mount failed w/return code = -5 [ 3002.467277][T15789] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3002.490379][T15789] usb 2-1: Manufacturer: syz [ 3002.534454][T15789] usb 2-1: config 0 descriptor?? [ 3002.865865][T15789] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3003.076675][T15789] usb 2-1: USB disconnect, device number 4 [ 3003.252437][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3003.370112][T28447] udevd[28447]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3003.559797][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6928'. [ 3004.499232][T30832] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3004.547743][ C0] vkms_vblank_simulate: vblank timer overrun [ 3004.596622][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/329.tmp-b7:6' failed: Read-only file system [ 3004.783485][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/329.tmp-b7:6' failed: Read-only file system [ 3005.326071][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6932'. [ 3006.341924][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/330.tmp-b7:6' failed: Read-only file system [ 3006.502502][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3007.205359][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3007.228473][ T5859] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 3007.275875][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3007.341520][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3007.483540][ T5859] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 3007.552333][ T5859] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3007.575456][ T5859] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3007.586194][ T5859] usb 7-1: config 220 has no interface number 2 [ 3007.593174][ T5859] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3007.612508][ T5859] usb 7-1: config 220 interface 0 has no altsetting 0 [ 3007.632469][ T5859] usb 7-1: config 220 interface 76 has no altsetting 0 [ 3007.639670][ T5859] usb 7-1: config 220 interface 1 has no altsetting 0 [ 3007.698020][T31405] syz.2.6938: attempt to access beyond end of device [ 3007.698020][T31405] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3007.706525][ T5859] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3007.723100][T31405] syz.2.6938: attempt to access beyond end of device [ 3007.723100][T31405] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3007.736694][T31405] Mount JFS Failure: -5 [ 3007.741509][T31405] jfs_mount failed w/return code = -5 [ 3007.769332][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3007.835454][ T5859] usb 7-1: Product: syz [ 3007.853657][ T5859] usb 7-1: Manufacturer: syz [ 3007.878110][ T5859] usb 7-1: SerialNumber: syz [ 3008.530272][ T5859] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 3008.536792][ T5859] usb 7-1: No valid video chain found. [ 3008.587589][ T5859] usb 7-1: USB disconnect, device number 5 [ 3008.606043][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3009.012808][T31418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6941'. [ 3009.676465][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/330.tmp-b7:6' failed: Read-only file system [ 3009.786211][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3009.994432][ T5840] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3011.250847][T31430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6944'. [ 3011.264402][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/330.tmp-b7:6' failed: Read-only file system [ 3012.144486][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3012.406989][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3012.933960][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3013.175208][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3013.704602][T31456] syz.5.6950: attempt to access beyond end of device [ 3013.704602][T31456] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3013.729536][T31456] syz.5.6950: attempt to access beyond end of device [ 3013.729536][T31456] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3013.747621][T31456] Mount JFS Failure: -5 [ 3013.752151][T31456] jfs_mount failed w/return code = -5 [ 3014.003942][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3014.199764][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/330.tmp-b7:6' failed: Read-only file system [ 3014.257295][T15789] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3014.547996][T31465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6953'. [ 3014.598471][T15789] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 3014.659777][T15789] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3014.743916][T15789] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3014.885482][T15789] usb 2-1: config 220 has no interface number 2 [ 3014.991515][T15789] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3015.043933][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3015.085810][T15789] usb 2-1: config 220 interface 0 has no altsetting 0 [ 3015.124422][T15789] usb 2-1: config 220 interface 76 has no altsetting 0 [ 3015.133308][T15789] usb 2-1: config 220 interface 1 has no altsetting 0 [ 3015.250301][T15789] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3015.302157][T15789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3015.311949][T31468] loop6: detected capacity change from 0 to 256 [ 3015.322987][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/330.tmp-b7:6' failed: Read-only file system [ 3015.400294][T15789] usb 2-1: Product: syz [ 3015.436197][T15789] usb 2-1: Manufacturer: syz [ 3015.495571][T15789] usb 2-1: SerialNumber: syz [ 3015.569404][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3015.910011][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/331.tmp-b7:6' failed: Read-only file system [ 3015.917237][T15789] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 3016.638772][T15789] usb 2-1: No valid video chain found. [ 3016.762297][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/331.tmp-b7:6' failed: Read-only file system [ 3016.794969][T15789] usb 2-1: USB disconnect, device number 5 [ 3017.130798][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/331.tmp-b7:6' failed: Read-only file system [ 3017.217821][T28444] udevd[28444]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3017.433129][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3018.227390][T31491] netlink: 'syz.5.6958': attribute type 16 has an invalid length. [ 3018.235307][T31491] netlink: 'syz.5.6958': attribute type 17 has an invalid length. [ 3018.622033][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6960'. [ 3018.678499][T31491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3018.812558][T30771] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3019.698798][T31504] syz.2.6964: attempt to access beyond end of device [ 3019.698798][T31504] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3019.718722][T31504] syz.2.6964: attempt to access beyond end of device [ 3019.718722][T31504] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3019.732788][T31504] Mount JFS Failure: -5 [ 3019.739684][T31504] jfs_mount failed w/return code = -5 [ 3020.208203][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3020.421244][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3020.531596][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6965'. [ 3021.227796][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.234301][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.284255][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3021.366701][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3021.549112][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3021.672696][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3021.717527][T30771] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3021.851527][T31514] xt_limit: Overflow, try lower: 65536/2147483648 [ 3021.942558][T30771] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 3021.955316][T30771] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3021.977443][T30771] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3022.007266][T30771] usb 3-1: config 220 has no interface number 2 [ 3022.024118][T30771] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3022.043260][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3022.067444][T30771] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3022.087244][T30771] usb 3-1: config 220 interface 76 has no altsetting 0 [ 3022.102432][T30771] usb 3-1: config 220 interface 1 has no altsetting 0 [ 3022.120659][T30771] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3022.137199][T30771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3022.156933][T30771] usb 3-1: Product: syz [ 3022.161679][T30771] usb 3-1: Manufacturer: syz [ 3022.166352][T30771] usb 3-1: SerialNumber: syz [ 3022.213519][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3022.373637][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6971'. [ 3022.527803][T30771] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 3022.534325][T30771] usb 3-1: No valid video chain found. [ 3022.652773][T28447] udevd[28447]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3022.663286][T30771] usb 3-1: USB disconnect, device number 19 [ 3023.338462][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3023.588094][T30771] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 3023.814043][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6976'. [ 3024.608782][T31548] syz.5.6977: attempt to access beyond end of device [ 3024.608782][T31548] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3024.611329][T30771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3024.637845][T31548] syz.5.6977: attempt to access beyond end of device [ 3024.637845][T31548] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3024.651363][T31548] Mount JFS Failure: -5 [ 3024.655663][T31548] jfs_mount failed w/return code = -5 [ 3024.677772][T30771] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3024.697474][T30771] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3024.705790][T30771] usb 7-1: Manufacturer: syz [ 3024.723095][T30771] usb 7-1: config 0 descriptor?? [ 3025.051549][T30771] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 3025.172421][T30771] usb 7-1: USB disconnect, device number 6 [ 3025.503134][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3025.781104][T31559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6981'. [ 3025.873351][T31560] Cannot find add_set index 2 as target [ 3025.945037][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3026.112255][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3026.269055][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3026.273149][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3026.530903][T15789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3026.688658][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6986'. [ 3026.771812][T15789] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 3026.858280][T15789] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3026.988493][T15789] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3027.135859][T15789] usb 2-1: config 220 has no interface number 2 [ 3027.200395][T15789] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3027.252954][T15789] usb 2-1: config 220 interface 0 has no altsetting 0 [ 3027.284720][T15789] usb 2-1: config 220 interface 76 has no altsetting 0 [ 3027.314053][T15789] usb 2-1: config 220 interface 1 has no altsetting 0 [ 3027.364415][T15789] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3027.380567][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3027.420256][T15789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3027.468110][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3027.470049][T15789] usb 2-1: Product: syz [ 3027.490152][T15789] usb 2-1: Manufacturer: syz [ 3027.495078][T15789] usb 2-1: SerialNumber: syz [ 3027.729144][T15789] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 3027.735619][T15789] usb 2-1: No valid video chain found. [ 3027.827648][T15789] usb 2-1: USB disconnect, device number 6 [ 3028.756923][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3028.759649][T31480] udevd[31480]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3028.967325][T31596] syz.2.6990: attempt to access beyond end of device [ 3028.967325][T31596] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3028.992373][T31596] syz.2.6990: attempt to access beyond end of device [ 3028.992373][T31596] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3029.007535][T31596] Mount JFS Failure: -5 [ 3029.013321][T31596] jfs_mount failed w/return code = -5 [ 3029.359156][T31601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6992'. [ 3030.095188][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3031.629164][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3031.692366][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/322.tmp-b7:2' failed: Read-only file system [ 3031.922278][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3031.972612][T31619] loop2: detected capacity change from 0 to 16 [ 3033.408616][T31619] erofs: (device loop2): mounted with root inode @ nid 36. [ 3033.425666][T31619] syz.2.6997: attempt to access beyond end of device [ 3033.425666][T31619] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 3034.855196][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/333.tmp-b7:2' failed: Read-only file system [ 3034.888530][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3035.068062][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3035.173160][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/333.tmp-b7:2' failed: Read-only file system [ 3035.195849][T31628] loop2: detected capacity change from 0 to 512 [ 3035.260795][T31629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6998'. [ 3035.973544][ T5840] usb 2-1: device descriptor read/all, error -71 [ 3036.015158][T31628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3036.032791][T31628] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3036.058668][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3036.105984][T28447] udevd[28447]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3036.151438][T31637] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 3036.165821][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/333.tmp-b7:2' failed: Read-only file system [ 3036.192572][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3036.421099][T31641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7002'. [ 3036.771969][T30771] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3036.790526][T23009] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3037.046741][T31645] lo speed is unknown, defaulting to 1000 [ 3037.885363][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3038.802884][T31650] syz.6.7006: attempt to access beyond end of device [ 3038.802884][T31650] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3038.816253][T31650] syz.6.7006: attempt to access beyond end of device [ 3038.816253][T31650] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3038.829535][T31650] Mount JFS Failure: -5 [ 3038.833704][T31650] jfs_mount failed w/return code = -5 [ 3038.842718][T30771] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 3038.851307][T30771] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3038.853116][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/335.tmp-b7:2' failed: Read-only file system [ 3038.860386][T30771] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3038.860414][T30771] usb 6-1: config 220 has no interface number 2 [ 3038.860488][T30771] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3038.860517][T30771] usb 6-1: config 220 interface 0 has no altsetting 0 [ 3038.860537][T30771] usb 6-1: config 220 interface 76 has no altsetting 0 [ 3038.860556][T30771] usb 6-1: config 220 interface 1 has no altsetting 0 [ 3038.865578][T30771] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3038.940949][T30771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.951792][T30771] usb 6-1: Product: syz [ 3038.956201][T30771] usb 6-1: Manufacturer: syz [ 3038.966868][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/335.tmp-b7:2' failed: Read-only file system [ 3038.993867][T30771] usb 6-1: SerialNumber: syz [ 3039.152323][T30771] usb 6-1: can't set config #220, error -71 [ 3039.190515][T30771] usb 6-1: USB disconnect, device number 10 [ 3039.262007][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3039.304975][T28447] udevd[28447]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 3039.323325][T31480] udevd[31480]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3039.531584][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3039.933737][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3041.127685][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 3041.204369][T31677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7012'. [ 3041.377624][T30771] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3041.962701][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 3042.474471][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7014'. [ 3043.499285][T30771] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3043.522768][T30771] usb 6-1: can't read configurations, error -71 [ 3043.725945][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 3043.884074][T28447] udevd[28447]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 3043.911322][T31693] syz.1.7016: attempt to access beyond end of device [ 3043.911322][T31693] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3043.967496][T18958] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3044.183129][T18958] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 3044.193170][T18958] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3044.202857][T18958] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3044.207814][T31696] loop5: detected capacity change from 0 to 1024 [ 3044.213544][T18958] usb 3-1: config 220 has no interface number 2 [ 3044.227460][T18958] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3044.241674][T18958] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3044.248817][T18958] usb 3-1: config 220 interface 76 has no altsetting 0 [ 3044.256446][T18958] usb 3-1: config 220 interface 1 has no altsetting 0 [ 3044.265074][T31693] syz.1.7016: attempt to access beyond end of device [ 3044.265074][T31693] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3044.297033][T18958] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3044.308657][T18958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.309235][T31696] EXT4-fs: Ignoring removed nobh option [ 3044.316869][T18958] usb 3-1: Product: syz [ 3044.327208][T18958] usb 3-1: Manufacturer: syz [ 3044.331964][T18958] usb 3-1: SerialNumber: syz [ 3044.341636][T31693] Mount JFS Failure: -5 [ 3044.346098][T31696] EXT4-fs: inline encryption not supported [ 3044.361155][T31696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3044.565863][T31693] jfs_mount failed w/return code = -5 [ 3044.585970][T31696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3044.621611][T31480] udevd[31480]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3044.654463][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/337.tmp-b7:5' failed: Read-only file system [ 3044.681201][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 3044.725797][T18958] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 3044.737531][T18958] usb 3-1: No valid video chain found. [ 3044.773920][T18958] usb 3-1: USB disconnect, device number 20 [ 3044.829532][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/337.tmp-b7:5' failed: Read-only file system [ 3044.880150][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 3044.901584][T31701] lo speed is unknown, defaulting to 1000 [ 3044.952821][T30292] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3045.331367][T31707] netlink: 'syz.1.7020': attribute type 16 has an invalid length. [ 3045.339624][T31707] netlink: 'syz.1.7020': attribute type 17 has an invalid length. [ 3045.366285][T31707] infiniband syz1: set active [ 3045.495448][T31707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3045.890322][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/337.tmp-b7:5' failed: Read-only file system [ 3046.018426][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/337.tmp-b7:5' failed: Read-only file system [ 3046.122545][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 3046.622763][T31718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7022'. [ 3046.675075][T31719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7024'. [ 3047.622367][T31732] syz.5.7025[31732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3047.622517][T31732] syz.5.7025[31732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3049.192699][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3050.431254][T28447] udevd[28447]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3050.811238][T28263] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3050.898974][T31743] syz.5.7029: attempt to access beyond end of device [ 3050.898974][T31743] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3050.925649][T31743] syz.5.7029: attempt to access beyond end of device [ 3050.925649][T31743] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3050.940404][T31743] Mount JFS Failure: -5 [ 3050.946227][T31743] jfs_mount failed w/return code = -5 [ 3051.147406][T28263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3051.159588][T28263] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3051.172592][T28263] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3051.325977][T28263] usb 3-1: Manufacturer: syz [ 3051.354256][T28263] usb 3-1: config 0 descriptor?? [ 3051.376457][T28263] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3051.461857][T28263] usb 3-1: USB disconnect, device number 21 [ 3051.542997][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 3051.596711][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3051.889285][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3052.281207][T31756] loop2: detected capacity change from 0 to 128 [ 3052.341358][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/339.tmp-b7:2' failed: Read-only file system [ 3052.414015][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/339.tmp-b7:2' failed: Read-only file system [ 3052.755745][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3052.931298][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3053.308146][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7036'. [ 3053.511498][T22590] infiniband syz1: set down [ 3053.561135][ C1] vkms_vblank_simulate: vblank timer overrun [ 3053.658475][T27479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3053.698389][T26932] smc: removing ib device syz1 [ 3053.706816][T27479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3053.718124][T28263] infiniband syz1: ib_query_port failed (-19) [ 3053.723766][T27479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3053.740797][T27479] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3053.748974][T27479] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3053.756580][T27479] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3053.846253][T31764] lo speed is unknown, defaulting to 1000 [ 3053.977801][ C1] vkms_vblank_simulate: vblank timer overrun [ 3054.039956][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3054.263582][T31769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7035'. [ 3055.538877][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3055.819220][T27479] Bluetooth: hci1: command tx timeout [ 3056.151567][T31764] chnl_net:caif_netlink_parms(): no params data found [ 3056.337361][T19231] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3056.747592][T19231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3056.768812][T19231] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3056.788375][T19231] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3056.796545][T19231] usb 6-1: Manufacturer: syz [ 3057.501427][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3057.606620][T19231] usb 6-1: config 0 descriptor?? [ 3057.626754][T19231] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3057.856197][T31764] bridge0: port 1(bridge_slave_0) entered blocking state [ 3057.873889][T31764] bridge0: port 1(bridge_slave_0) entered disabled state [ 3057.894248][T19231] usb 6-1: USB disconnect, device number 13 [ 3057.900666][T27479] Bluetooth: hci1: command tx timeout [ 3057.912887][T31764] bridge_slave_0: entered allmulticast mode [ 3057.945113][T31764] bridge_slave_0: entered promiscuous mode [ 3057.963183][T31480] udevd[31480]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3058.015227][T31764] bridge0: port 2(bridge_slave_1) entered blocking state [ 3058.129095][T31791] syz.6.7040: attempt to access beyond end of device [ 3058.129095][T31791] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3058.143914][T31791] syz.6.7040: attempt to access beyond end of device [ 3058.143914][T31791] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3058.163421][T31791] Mount JFS Failure: -5 [ 3058.171296][T31791] jfs_mount failed w/return code = -5 [ 3058.227616][T31764] bridge0: port 2(bridge_slave_1) entered disabled state [ 3058.234985][T31764] bridge_slave_1: entered allmulticast mode [ 3058.638920][T31764] bridge_slave_1: entered promiscuous mode [ 3058.911463][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/338.tmp-b7:5' failed: Read-only file system [ 3058.999515][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3059.043718][T26913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3059.063268][T31794] loop5: detected capacity change from 0 to 512 [ 3059.083491][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/339.tmp-b7:2' failed: Read-only file system [ 3059.149422][T31794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3059.174418][T31764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3059.192628][T31794] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3059.209244][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/339.tmp-b7:2' failed: Read-only file system [ 3059.221118][T31764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3059.244010][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/340.tmp-b7:5' failed: Read-only file system [ 3059.269867][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 3059.381116][T26913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3059.454664][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/340.tmp-b7:5' failed: Read-only file system [ 3059.480561][T31764] team0: Port device team_slave_0 added [ 3059.987521][T27479] Bluetooth: hci1: command tx timeout [ 3059.999774][T26913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3060.102387][T31764] team0: Port device team_slave_1 added [ 3060.253125][ C1] vkms_vblank_simulate: vblank timer overrun [ 3060.280824][T30292] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3060.316976][T26913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3060.389970][T31764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3060.414250][T31764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3060.440333][ C1] vkms_vblank_simulate: vblank timer overrun [ 3060.451651][T31764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3060.502242][T31764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3060.520593][T31764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3060.579901][T31764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3060.686199][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3060.791715][T31812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7044'. [ 3060.816916][T31764] hsr_slave_0: entered promiscuous mode [ 3060.830249][T31764] hsr_slave_1: entered promiscuous mode [ 3060.843333][T31764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3060.854956][T31764] Cannot create hsr debugfs directory [ 3061.082116][T26913] tipc: Left network mode [ 3061.272449][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3061.507901][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3061.601883][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3061.652211][ C1] vkms_vblank_simulate: vblank timer overrun [ 3061.702915][ C1] vkms_vblank_simulate: vblank timer overrun [ 3062.057433][T27479] Bluetooth: hci1: command tx timeout [ 3062.113127][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3063.539136][T31828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7049'. [ 3063.778164][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7046'. [ 3063.861304][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3063.902029][ C1] vkms_vblank_simulate: vblank timer overrun [ 3063.937657][T31176] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3063.942160][T31764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3064.074815][T27479] Bluetooth: hci0: command 0x0406 tx timeout [ 3064.078975][T31838] syz.6.7050: attempt to access beyond end of device [ 3064.078975][T31838] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3064.119605][T31838] syz.6.7050: attempt to access beyond end of device [ 3064.119605][T31838] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3064.140101][T31838] Mount JFS Failure: -5 [ 3064.144402][T31838] jfs_mount failed w/return code = -5 [ 3064.296109][T31176] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3064.319616][T31764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3064.376574][T31176] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3064.406544][T31176] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3064.414833][T31176] usb 6-1: Manufacturer: syz [ 3064.438278][T31176] usb 6-1: config 0 descriptor?? [ 3064.470056][T31176] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3064.674287][T15789] usb 6-1: USB disconnect, device number 14 [ 3064.753559][T31764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3064.766756][T31764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3064.950463][T26913] IPVS: stopping master sync thread 22982 ... [ 3065.051772][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/332.tmp-b7:6' failed: Read-only file system [ 3065.076776][T31846] loop6: detected capacity change from 0 to 512 [ 3065.141103][T31764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3065.150861][T31846] EXT4-fs (loop6): #blocks per group too big: 466944 [ 3065.402523][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/343.tmp-b7:6' failed: Read-only file system [ 3065.431801][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3065.478284][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 3066.214023][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/343.tmp-b7:6' failed: Read-only file system [ 3066.285471][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/343.tmp-b7:6' failed: Read-only file system [ 3066.390078][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/343.tmp-b7:6' failed: Read-only file system [ 3066.423776][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/344.tmp-b7:6' failed: Read-only file system [ 3066.451646][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3066.481402][T31764] 8021q: adding VLAN 0 to HW filter on device team0 [ 3066.648491][T26937] bridge0: port 1(bridge_slave_0) entered blocking state [ 3066.656086][T26937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3066.690450][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7054'. [ 3066.866137][T26937] bridge0: port 2(bridge_slave_1) entered blocking state [ 3066.873458][T26937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3066.974641][T26913] hsr_slave_0: left promiscuous mode [ 3066.984890][T26913] hsr_slave_1: left promiscuous mode [ 3066.991589][T26913] bridge_slave_1: left allmulticast mode [ 3067.000139][T26913] bridge_slave_1: left promiscuous mode [ 3067.013956][T26913] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.039603][T26913] bridge_slave_0: left allmulticast mode [ 3067.059343][T26913] bridge_slave_0: left promiscuous mode [ 3067.076613][T26913] bridge0: port 1(bridge_slave_0) entered disabled state [ 3067.157662][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3067.218106][T26913] veth1_macvtap: left promiscuous mode [ 3067.228681][T26913] veth0_macvtap: left promiscuous mode [ 3067.243160][T26913] veth1_vlan: left promiscuous mode [ 3067.252043][T26913] veth0_vlan: left promiscuous mode [ 3067.282374][T31863] binder: 31862:31863 unknown command 0 [ 3067.299059][T31863] binder: 31862:31863 ioctl c0306201 200000000080 returned -22 [ 3067.444148][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3067.444655][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3067.592324][ C1] vkms_vblank_simulate: vblank timer overrun [ 3067.626828][ C1] vkms_vblank_simulate: vblank timer overrun [ 3067.773461][ C1] vkms_vblank_simulate: vblank timer overrun [ 3067.802370][ T5859] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3067.997182][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 3068.004603][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3068.015495][ T5859] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3068.027208][ T5859] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3068.036445][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3068.056578][ T5859] usb 6-1: config 0 descriptor?? [ 3068.261790][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/344.tmp-b7:6' failed: Read-only file system [ 3068.277663][ T5859] usb 6-1: USB disconnect, device number 15 [ 3068.365258][T31871] loop6: detected capacity change from 0 to 128 [ 3068.422205][T31871] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3068.447842][T31871] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3068.466558][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/345.tmp-b7:6' failed: Read-only file system [ 3068.470842][T31871] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.7058: No space for directory leaf checksum. Please run e2fsck -D. [ 3068.510117][T31871] EXT4-fs error (device loop6): htree_dirblock_to_tree:1083: inode #2: comm syz.6.7058: Directory block failed checksum [ 3068.573215][T31874] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.7058: No space for directory leaf checksum. Please run e2fsck -D. [ 3068.591219][T31874] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.7058: checksumming directory block 0 [ 3068.606855][T31871] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.7058: No space for directory leaf checksum. Please run e2fsck -D. [ 3068.627917][T31871] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.7058: checksumming directory block 0 [ 3068.907653][T31878] syz.2.7059: attempt to access beyond end of device [ 3068.907653][T31878] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3068.922476][T31878] syz.2.7059: attempt to access beyond end of device [ 3068.922476][T31878] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3068.939103][T31878] Mount JFS Failure: -5 [ 3068.951499][T31878] jfs_mount failed w/return code = -5 [ 3069.358121][ C1] vkms_vblank_simulate: vblank timer overrun [ 3069.376909][T26913] team0 (unregistering): Port device team_slave_1 removed [ 3069.792608][T26913] team0 (unregistering): Port device team_slave_0 removed [ 3070.006354][ C1] vkms_vblank_simulate: vblank timer overrun [ 3070.027202][T26913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3070.274115][T26913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3070.576540][T15789] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3070.688301][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7061'. [ 3070.781567][T15789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3070.793993][T15789] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3070.834636][T15789] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3070.842924][T15789] usb 6-1: Manufacturer: syz [ 3070.851780][T15789] usb 6-1: config 0 descriptor?? [ 3070.865329][T15789] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3071.331304][T26913] bond0 (unregistering): Released all slaves [ 3071.492830][T31870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7058'. [ 3071.658799][T31176] usb 6-1: USB disconnect, device number 16 [ 3071.830831][T30832] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3071.933960][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3071.945041][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/345.tmp-b7:6' failed: Read-only file system [ 3071.995065][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/345.tmp-b7:6' failed: Read-only file system [ 3072.341826][T31898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7063'. [ 3072.496806][T31764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3072.582201][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3072.596871][T31764] veth0_vlan: entered promiscuous mode [ 3072.642477][T31764] veth1_vlan: entered promiscuous mode [ 3072.763290][T31764] veth0_macvtap: entered promiscuous mode [ 3072.792397][T31764] veth1_macvtap: entered promiscuous mode [ 3072.825838][T31764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3072.830881][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3072.850375][T31764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3072.864844][T31764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3072.881169][T31764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3072.912201][T31764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3072.927179][T31764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3072.944834][T31764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3072.995209][T31764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3073.012527][T31764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3073.022758][T31764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3073.034349][T31764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3073.045024][T31764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3073.055583][T31764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3073.065300][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3073.068311][T31764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3073.089996][T31764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3073.122175][T31764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3073.137201][T31764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3073.154723][T31764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3073.379831][T26913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3073.414066][T26913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3073.463832][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/346.tmp-b7:6' failed: Read-only file system [ 3073.508146][T21688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3073.524700][T21688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3073.736651][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/346.tmp-b7:6' failed: Read-only file system [ 3074.381812][T31921] syz.1.7069: attempt to access beyond end of device [ 3074.381812][T31921] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3074.419995][T31921] syz.1.7069: attempt to access beyond end of device [ 3074.419995][T31921] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3074.434211][T31921] Mount JFS Failure: -5 [ 3074.440018][T31921] jfs_mount failed w/return code = -5 [ 3074.721793][T28449] udevd[28449]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3075.054700][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/346.tmp-b7:6' failed: Read-only file system [ 3076.129352][T31934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7070'. [ 3076.721892][T31938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7073'. [ 3076.816363][T31927] loop6: detected capacity change from 0 to 40427 [ 3076.840557][T31927] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 3076.848983][T31927] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3076.912284][T31927] F2FS-fs (loop6): Found nat_bits in checkpoint [ 3076.972247][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3076.985307][T31943] netlink: 'syz.2.7074': attribute type 12 has an invalid length. [ 3077.007283][T19231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3077.071146][T31927] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 3077.074929][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/347.tmp-b7:6' failed: Read-only file system [ 3077.094125][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system [ 3077.100526][T31927] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 3077.136523][T29014] udevd[29014]: symlink '../../loop2' '/dev/disk/by-diskseq/341.tmp-b7:2' failed: Read-only file system [ 3077.156380][T31927] fscrypt (loop6, inode 3): Error -61 getting encryption context [ 3077.210009][T19231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3077.236199][T19231] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3077.256391][T19231] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3077.275906][T19231] usb 2-1: Manufacturer: syz [ 3077.296808][T19231] usb 2-1: config 0 descriptor?? [ 3077.304431][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/347.tmp-b7:6' failed: Read-only file system [ 3077.451592][T19231] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3077.465136][T28447] udevd[28447]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3077.485593][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system [ 3077.684151][ T5840] usb 2-1: USB disconnect, device number 9 [ 3077.725232][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3077.965283][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/347.tmp-b7:6' failed: Read-only file system [ 3077.993871][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/347.tmp-b7:6' failed: Read-only file system [ 3078.508923][T31965] netlink: 'syz.6.7079': attribute type 4 has an invalid length. [ 3078.516865][T31965] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.7079'. [ 3081.725404][T31979] syz.5.7081: attempt to access beyond end of device [ 3081.725404][T31979] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3081.754746][T31979] syz.5.7081: attempt to access beyond end of device [ 3081.754746][T31979] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3081.770276][T31979] Mount JFS Failure: -5 [ 3081.777151][T31979] jfs_mount failed w/return code = -5 [ 3081.894159][T31981] loop6: detected capacity change from 0 to 512 [ 3081.974362][T31981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 3082.187821][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/349.tmp-b7:6' failed: Read-only file system [ 3082.197537][T31981] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 3082.201700][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 3082.409326][T31981] EXT4-fs (loop6): 1 truncate cleaned up [ 3082.416428][T31981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3082.438966][T31987] xt_hashlimit: size too large, truncated to 1048576 [ 3082.466933][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.473527][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.501594][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/349.tmp-b7:6' failed: Read-only file system [ 3082.514572][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 3083.427441][ T28] audit: type=1804 audit(1759302660.629:34): pid=31990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7084" name="/newroot/61/file2/file1" dev="loop6" ino=15 res=1 errno=0 [ 3083.537851][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3083.664220][T30832] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3083.749675][T27479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3083.764422][T27479] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3083.776347][T27479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3083.790572][T27479] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3083.798648][T27479] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3083.806108][T27479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3083.852104][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3083.954201][T29014] udevd[29014]: symlink '../../loop6' '/dev/disk/by-diskseq/349.tmp-b7:6' failed: Read-only file system [ 3083.978195][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/349.tmp-b7:6' failed: Read-only file system [ 3084.006391][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/350.tmp-b7:6' failed: Read-only file system [ 3085.495208][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3085.917348][T24113] Bluetooth: hci2: command tx timeout [ 3085.971822][T26932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3086.034539][T31995] lo speed is unknown, defaulting to 1000 [ 3086.450227][T32023] loop6: detected capacity change from 0 to 1024 [ 3086.463190][T32023] EXT4-fs: Ignoring removed oldalloc option [ 3086.470012][T32023] EXT4-fs: Ignoring removed bh option [ 3086.751892][T32023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3086.933253][T32023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3087.112816][ T28] audit: type=1800 audit(1759302664.229:35): pid=32023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7093" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 3087.396210][T26932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.445914][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 3087.558688][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 3088.067318][T24113] Bluetooth: hci2: command tx timeout [ 3088.079838][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 3088.096025][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 3088.455320][T30832] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3088.496795][T26932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3088.513157][T32030] syz.1.7095: attempt to access beyond end of device [ 3088.513157][T32030] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 3088.538618][T32030] syz.1.7095: attempt to access beyond end of device [ 3088.538618][T32030] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 3088.552295][T32030] Mount JFS Failure: -5 [ 3088.556723][T32030] jfs_mount failed w/return code = -5 [ 3089.033077][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 3089.085496][T29014] udevd[29014]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3089.120716][T26932] team0: Port device netdevsim0 removed [ 3089.140942][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/351.tmp-b7:6' failed: Read-only file system [ 3089.150229][T26932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3089.183272][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/352.tmp-b7:6' failed: Read-only file system [ 3089.652388][T28449] udevd[28449]: symlink '../../loop5' '/dev/disk/by-diskseq/342.tmp-b7:5' failed: Read-only file system [ 3090.187162][T24113] Bluetooth: hci2: command tx timeout [ 3090.564938][T31995] chnl_net:caif_netlink_parms(): no params data found [ 3090.642312][T28449] udevd[28449]: symlink '../../loop6' '/dev/disk/by-diskseq/352.tmp-b7:6' failed: Read-only file system [ 3090.961821][T31995] bridge0: port 1(bridge_slave_0) entered blocking state [ 3090.980649][T31995] bridge0: port 1(bridge_slave_0) entered disabled state [ 3090.989695][T31995] bridge_slave_0: entered allmulticast mode [ 3091.001388][T31995] bridge_slave_0: entered promiscuous mode [ 3091.048116][T31995] bridge0: port 2(bridge_slave_1) entered blocking state [ 3091.055755][T31995] bridge0: port 2(bridge_slave_1) entered disabled state [ 3091.066238][T31995] bridge_slave_1: entered allmulticast mode [ 3091.081891][T31995] bridge_slave_1: entered promiscuous mode [ 3091.139394][T31995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3091.190254][T31995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3091.339984][T31995] team0: Port device team_slave_0 added [ 3091.393083][T31995] team0: Port device team_slave_1 added [ 3091.491018][T31995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3091.521346][T31995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3091.556021][T31995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3091.678260][T31995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3091.686929][T31995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3091.715187][T31995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3091.953386][T31995] hsr_slave_0: entered promiscuous mode [ 3091.964297][T31995] hsr_slave_1: entered promiscuous mode [ 3091.993798][T31995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3092.032846][T31995] Cannot create hsr debugfs directory [ 3092.091569][T26932] bond0: (slave wlan1): Releasing backup interface [ 3092.132546][T26932] ------------[ cut here ]------------ [ 3092.139111][T26932] WARNING: CPU: 0 PID: 26932 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 3092.150419][T26932] Modules linked in: [ 3092.154439][T26932] CPU: 0 PID: 26932 Comm: kworker/u4:33 Not tainted syzkaller #0 [ 3092.162238][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3092.172369][T26932] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3092.177427][T26932] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 3092.184310][T26932] Code: 7c 2d 00 00 74 08 48 89 df e8 78 a5 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 a1 83 00 e8 3c 5a 92 f7 <0f> 0b eb c5 48 c7 c1 9c b4 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 3092.204643][T26932] RSP: 0018:ffffc900050f7548 EFLAGS: 00010293 [ 3092.211046][T26932] RAX: ffffffff89f33d64 RBX: ffff88805cc81598 RCX: ffff8880288c8000 [ 3092.218822][T24113] Bluetooth: hci2: command tx timeout [ 3092.220535][T26932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3092.233092][T26932] RBP: 0000000000000000 R08: ffffffff8e4a7fef R09: 1ffffffff1c94ffd [ 3092.241535][T26932] R10: dffffc0000000000 R11: fffffbfff1c94ffe R12: ffff88805cc82c08 [ 3092.249931][T26932] R13: 1ffff1100b9902b3 R14: ffff88805cc823c0 R15: dffffc0000000000 [ 3092.258273][T26932] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3092.267761][T26932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3092.274387][T26932] CR2: 000000110c453f6c CR3: 000000006eaab000 CR4: 00000000003506f0 [ 3092.282918][T26932] Call Trace: [ 3092.286257][T26932] [ 3092.289862][T26932] ? trace_drv_return_void+0x1c0/0x1c0 [ 3092.295661][T26932] unregister_netdevice_many_notify+0x1257/0x1810 [ 3092.302527][T26932] ? lock_chain_count+0x20/0x20 [ 3092.307741][T26932] ? unregister_netdevice_many+0x20/0x20 [ 3092.313421][T26932] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3092.319688][T26932] ? __lock_acquire+0x7c80/0x7c80 [ 3092.325111][T26932] unregister_netdevice_queue+0x324/0x360 [ 3092.330968][T26932] ? list_netdevice+0x730/0x730 [ 3092.336333][T26932] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3092.342269][T26932] _cfg80211_unregister_wdev+0x16b/0x580 [ 3092.348113][T26932] ieee80211_remove_interfaces+0x496/0x680 [ 3092.353987][T26932] ? ieee80211_do_stop+0x1db0/0x1db0 [ 3092.359576][T26932] ? rcu_is_watching+0x15/0xb0 [ 3092.364415][T26932] ieee80211_unregister_hw+0x5d/0x2a0 [ 3092.370080][T26932] mac80211_hwsim_del_radio+0x274/0x450 [ 3092.375751][T26932] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 3092.381692][T26932] hwsim_exit_net+0x585/0x640 [ 3092.386607][T26932] ? hwsim_init_net+0x90/0x90 [ 3092.391721][T26932] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 3092.397668][T26932] cleanup_net+0x6f4/0xb90 [ 3092.402111][T26932] ? ops_free_list+0x3b0/0x3b0 [ 3092.406985][T26932] ? _raw_spin_unlock_irq+0x23/0x50 [ 3092.412258][T26932] ? process_scheduled_works+0x957/0x15b0 [ 3092.418121][T26932] ? process_scheduled_works+0x957/0x15b0 [ 3092.423876][T26932] process_scheduled_works+0xa45/0x15b0 [ 3092.429515][T26932] ? assign_work+0x400/0x400 [ 3092.434132][T26932] ? assign_work+0x39e/0x400 [ 3092.438887][T26932] worker_thread+0xa55/0xfc0 [ 3092.443519][T26932] kthread+0x2fa/0x390 [ 3092.447677][T26932] ? pr_cont_work+0x560/0x560 [ 3092.452390][T26932] ? kthread_blkcg+0xd0/0xd0 [ 3092.457010][T26932] ret_from_fork+0x48/0x80 [ 3092.461708][T26932] ? kthread_blkcg+0xd0/0xd0 [ 3092.466329][T26932] ret_from_fork_asm+0x11/0x20 [ 3092.471275][T26932] [ 3092.474315][T26932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3092.481600][T26932] CPU: 0 PID: 26932 Comm: kworker/u4:33 Not tainted syzkaller #0 [ 3092.489346][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3092.499414][T26932] Workqueue: netns cleanup_net [ 3092.504201][T26932] Call Trace: [ 3092.507515][T26932] [ 3092.510468][T26932] dump_stack_lvl+0x16c/0x230 [ 3092.515178][T26932] ? show_regs_print_info+0x20/0x20 [ 3092.520401][T26932] ? load_image+0x3b0/0x3b0 [ 3092.524925][T26932] panic+0x2c0/0x710 [ 3092.528886][T26932] ? bpf_jit_dump+0xd0/0xd0 [ 3092.533412][T26932] ? ret_from_fork_asm+0x11/0x20 [ 3092.538371][T26932] __warn+0x2e0/0x470 [ 3092.542372][T26932] ? ieee80211_link_release_channel+0x154/0x180 [ 3092.548632][T26932] ? ieee80211_link_release_channel+0x154/0x180 [ 3092.554886][T26932] report_bug+0x2be/0x4f0 [ 3092.559296][T26932] ? ieee80211_link_release_channel+0x154/0x180 [ 3092.565573][T26932] ? ieee80211_link_release_channel+0x154/0x180 [ 3092.571856][T26932] ? ieee80211_link_release_channel+0x156/0x180 [ 3092.578133][T26932] handle_bug+0xcf/0x120 [ 3092.582425][T26932] exc_invalid_op+0x1a/0x50 [ 3092.586965][T26932] asm_exc_invalid_op+0x1a/0x20 [ 3092.591844][T26932] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 3092.598719][T26932] Code: 7c 2d 00 00 74 08 48 89 df e8 78 a5 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 a1 83 00 e8 3c 5a 92 f7 <0f> 0b eb c5 48 c7 c1 9c b4 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 3092.618930][T26932] RSP: 0018:ffffc900050f7548 EFLAGS: 00010293 [ 3092.625012][T26932] RAX: ffffffff89f33d64 RBX: ffff88805cc81598 RCX: ffff8880288c8000 [ 3092.633033][T26932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3092.641029][T26932] RBP: 0000000000000000 R08: ffffffff8e4a7fef R09: 1ffffffff1c94ffd [ 3092.649011][T26932] R10: dffffc0000000000 R11: fffffbfff1c94ffe R12: ffff88805cc82c08 [ 3092.657005][T26932] R13: 1ffff1100b9902b3 R14: ffff88805cc823c0 R15: dffffc0000000000 [ 3092.665025][T26932] ? ieee80211_link_release_channel+0x154/0x180 [ 3092.671294][T26932] ? ieee80211_link_release_channel+0x154/0x180 [ 3092.677551][T26932] ? trace_drv_return_void+0x1c0/0x1c0 [ 3092.683029][T26932] unregister_netdevice_many_notify+0x1257/0x1810 [ 3092.689465][T26932] ? lock_chain_count+0x20/0x20 [ 3092.694333][T26932] ? unregister_netdevice_many+0x20/0x20 [ 3092.700006][T26932] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3092.705783][T26932] ? __lock_acquire+0x7c80/0x7c80 [ 3092.710842][T26932] unregister_netdevice_queue+0x324/0x360 [ 3092.716584][T26932] ? list_netdevice+0x730/0x730 [ 3092.721467][T26932] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3092.727232][T26932] _cfg80211_unregister_wdev+0x16b/0x580 [ 3092.732917][T26932] ieee80211_remove_interfaces+0x496/0x680 [ 3092.738758][T26932] ? ieee80211_do_stop+0x1db0/0x1db0 [ 3092.744083][T26932] ? rcu_is_watching+0x15/0xb0 [ 3092.748901][T26932] ieee80211_unregister_hw+0x5d/0x2a0 [ 3092.754294][T26932] mac80211_hwsim_del_radio+0x274/0x450 [ 3092.759873][T26932] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 3092.765451][T26932] hwsim_exit_net+0x585/0x640 [ 3092.770144][T26932] ? hwsim_init_net+0x90/0x90 [ 3092.774832][T26932] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 3092.780678][T26932] cleanup_net+0x6f4/0xb90 [ 3092.785117][T26932] ? ops_free_list+0x3b0/0x3b0 [ 3092.789915][T26932] ? _raw_spin_unlock_irq+0x23/0x50 [ 3092.795192][T26932] ? process_scheduled_works+0x957/0x15b0 [ 3092.800952][T26932] ? process_scheduled_works+0x957/0x15b0 [ 3092.806712][T26932] process_scheduled_works+0xa45/0x15b0 [ 3092.812310][T26932] ? assign_work+0x400/0x400 [ 3092.816922][T26932] ? assign_work+0x39e/0x400 [ 3092.821543][T26932] worker_thread+0xa55/0xfc0 [ 3092.826190][T26932] kthread+0x2fa/0x390 [ 3092.830277][T26932] ? pr_cont_work+0x560/0x560 [ 3092.834974][T26932] ? kthread_blkcg+0xd0/0xd0 [ 3092.839572][T26932] ret_from_fork+0x48/0x80 [ 3092.844000][T26932] ? kthread_blkcg+0xd0/0xd0 [ 3092.848619][T26932] ret_from_fork_asm+0x11/0x20 [ 3092.853410][T26932] [ 3092.856772][T26932] Kernel Offset: disabled [ 3092.861314][T26932] Rebooting in 86400 seconds..