last executing test programs: 2m42.896167634s ago: executing program 3 (id=59): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000ac1414bb000000001800000000000c0000000000070000000a01200200"/48], 0x30}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200c1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0xf0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m42.439233704s ago: executing program 3 (id=60): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r7, 0x29, 0xce, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r9, 0x0, 0x0}, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="449ae4d3", @ANYRES32=r0, @ANYRESDEC=r10], 0x17c}}, 0x4004040) 2m41.24828259s ago: executing program 3 (id=61): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) ftruncate(r0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000900000085100000fdffffff95"], &(0x7f00000004c0)='GPL\x00', 0x9, 0xff1, &(0x7f0000000c80)=""/4081, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) syz_read_part_table(0x1074, &(0x7f0000000000)="$eJzs0LFNxFAQBNDxYWxOICCkEUogIqEIMoqAJpBoiZAe6IJg0Z4xiPwkJ+8F9nj/WFr9sKnLqZ/T8jFnzN0S36umdZzkNMm+w3W3fg9uPs/WxtUaqp4e+j28vZ58VVXSndvcny/n05zs/hb4ifuP5y5W7TKOh9+7WsnFnOrBy3AYDv+2f5yPexsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsI3vAAAA//9JoRN1") 2m41.120372671s ago: executing program 3 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000000000000000000000bbfc010000000000000000000000000001000107144e2300050200000073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000e7ffffffffff040000000000000000000000000000001f00000000000000feffffffffffffff0200000002000000070000002abd7000043500000a0001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160000100000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m40.876221932s ago: executing program 3 (id=64): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x0) (async) 2m39.470573047s ago: executing program 3 (id=65): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x85}}]}, 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0x118, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @algo_auth_trunc={0x57, 0x14, {{'sha384-generic\x00'}, 0x58, 0x200, "0e16853ba33df8f763ab45"}}]}, 0x118}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sync() sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db91"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x8, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 2m23.839366753s ago: executing program 32 (id=65): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x85}}]}, 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0x118, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @algo_auth_trunc={0x57, 0x14, {{'sha384-generic\x00'}, 0x58, 0x200, "0e16853ba33df8f763ab45"}}]}, 0x118}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sync() sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db91"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x8, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 1m14.219655343s ago: executing program 0 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x128, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xf8, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xdc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_IPT={0x9c, 0x2, 0x0, 0x0, {{0x100, 0x9, 0x319}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x5e, 0x5, "404ed3d434fb1f48a30cc0474d3c5260844ef8d653aa690f08733679c0f9bd6e29e13b09adea5ceb607c74a62934f395f716bdc5b2d344210a255c16f0fddd15bf1303af3d0414041b90743b0add6ab90d0ba1b39a9b13161873"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7c}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001cc0)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x8000}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="ff7f8300f5fafffffffe7228e2bcdc7a62903e7a06ef7f533c045d8ec0ff4be08cd93f8096dc65501befc3f91acdcb000000000000001f046f4a595f5edbd246dcbdef56b3e0fb1e3ed0b0d49619a901b0c194efd789db02894cce15e39c49de80a84f47cfb0a3cd4b42042e0c3779b5a58ce9bad31c4924022d89c70db4c64d22f74858b64f11"], 0x8b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x30}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xb}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000640)={r7, 0x1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e00dd815", @ANYRES16=r8, @ANYBLOB="04002cbd7000fcdbdf250500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900faffffff1e000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e2}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/199, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m12.341743699s ago: executing program 0 (id=216): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11) 1m10.541610269s ago: executing program 0 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0xffffffff}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x0, 0x13, 0x0}) 1m10.224064127s ago: executing program 0 (id=220): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af", 0x1}], 0x1}}], 0x1, 0x4000000) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect$uac1(0x2, 0xce, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8f3e0ce2e691d3a, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x40, 0x10, 0x65, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x6a}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x5, 0x2, [0x5, 0x8], 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xff}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7ff, 0x8, 0x4, "ae22"}, @as_header={0x7, 0x24, 0x1, 0x3a, 0xc}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x57, 0x4, 0x80, 0x5, "019cb87a1e"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x2e37, 0x6, "e72b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x8, "63b1", "0cf7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x3, 0x23, {0x7, 0x25, 0x1, 0x182, 0x6, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x2, 0x8, 0x5, "efff3f66"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x19, 0x6, 0x8, {0x7, 0x25, 0x1, 0x80, 0x3a, 0x80}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0xe, 0x6, 0x10, 0x98}, 0xb7, &(0x7f0000000280)={0x5, 0xf, 0xb7, 0x2, [@generic={0xffffffffffffff5d, 0x10, 0x3, "58451d291a9964f33613b82a32d22cc7a7e48e0fb0435c2a952ca5d7ca7d1ae27109120c50c08e93c85aac20232b4e3af675edd6339d4e872e50bab9e6088c925975d13aa0d90ea784400d27d83cbc417c3f32eb9d20d70faf0b5d007cb2fadbdd36b1605a8030a1c5b22dd196942cf3d4e1306adeffee03be7aeb9471736c86119f6ef17018e635a69657e4ec865882b6e0c3b198b931ced2a2b3"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4d459ec079710d43781b50d9705bf2d9"}]}, 0x1, [{0x5a, &(0x7f00000000c0)=@string={0x5a, 0x3, "31cfe85cae58abfd0d26056202d02fefa791cc4e38f174e3f0471d758949e990f7ec2dcb34086891b6196cde452c4ad02fb49290f497881136b97e2cbb86d51a461058b6253d7ce35449c5a957c02f6186a87f5892d697bd"}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 1m8.119296963s ago: executing program 0 (id=224): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2030008, &(0x7f0000000100)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r0}}]}, 0xff, 0x574, &(0x7f0000000780)="$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") 1m7.864394586s ago: executing program 0 (id=225): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r1}, 0x18) (async, rerun: 64) sync() (async, rerun: 64) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) (async) syz_emit_ethernet(0x55, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x47, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x9, 0x4, 0x2, 0x1b, 0x7, 0x65, 0xff78, 0x3, 0x2e, 0xdde, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x59, 0x0, 0x0, [0xfffffffe, 0x2000000, 0x8]}]}}, "62047725299374"}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x1000, 0x7) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x0, 0x4000, 0x3}}}}}, 0x0) 51.642267563s ago: executing program 33 (id=225): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r1}, 0x18) (async, rerun: 64) sync() (async, rerun: 64) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) (async) syz_emit_ethernet(0x55, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x47, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x9, 0x4, 0x2, 0x1b, 0x7, 0x65, 0xff78, 0x3, 0x2e, 0xdde, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x59, 0x0, 0x0, [0xfffffffe, 0x2000000, 0x8]}]}}, "62047725299374"}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x1000, 0x7) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x0, 0x4000, 0x3}}}}}, 0x0) 20.357836276s ago: executing program 1 (id=318): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800852, &(0x7f0000000080)={[{@datasum}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@nossd_spread}, {@discard_async}, {@clear_cache}, {@space_cache_v1}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x9ab800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000700)={0x28, 0x2, r3, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6}) pwrite64(r2, &(0x7f0000000100)="ffd686546d120c0e34475fee311fda113deac7a6f572b40a1cae59ca1d886bbf6fac5b56534d8675b10b8b950d52d3c70bbcb751193cf94c60bb0857e7665915467cbcf7b415e5294fe1eb16560b20", 0x4f, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 19.405895251s ago: executing program 5 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r1, &(0x7f0000000100)=""/157, 0x9d, 0x40, &(0x7f0000000040)={0xa, 0x4e21, 0x75f5, @dev={0xfe, 0x80, '\x00', 0x24}, 0x80}, 0x1c) unshare(0x22020400) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x200040) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x107, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000fff}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40002063, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x1}) 19.107901587s ago: executing program 2 (id=322): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r10) 16.805651221s ago: executing program 5 (id=323): r0 = open(&(0x7f0000000000)='./file1\x00', 0x14967e, 0x40) fallocate(r0, 0x0, 0x4000, 0x1001f0) (async) copy_file_range(r0, 0x0, r0, 0x0, 0x101, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="a70119fb85ef59731804765e8b3354"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "e3666af3"}]}}, 0x0}, 0x0) 16.614314068s ago: executing program 2 (id=324): syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000080)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6b6f69382d722c73686f72746e616d653d77696e6e742c636f6465706167653d3933362c73696e39352c73686f72746e616d653d6c6f7707000000000000006e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d7769d566742c73686f72746e616d653d6d697865642c727dd1dd9cc090658e6f6469722c757466383d302c00"/192], 0x81, 0x29b, &(0x7f0000000580)="$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") (async) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000080)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6b6f69382d722c73686f72746e616d653d77696e6e742c636f6465706167653d3933362c73696e39352c73686f72746e616d653d6c6f7707000000000000006e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d7769d566742c73686f72746e616d653d6d697865642c727dd1dd9cc090658e6f6469722c757466383d302c00"/192], 0x81, 0x29b, &(0x7f0000000580)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x101, 0x2d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x986}, 0x4c841) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000280)=@arm64) (async) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000280)=@arm64) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x2e5}], 0x1}}], 0x1, 0x40) (async) sendmmsg$inet(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x2e5}], 0x1}}], 0x1, 0x40) sendto$inet(r8, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 16.47009723s ago: executing program 1 (id=326): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) utimensat(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={{0x77359400}}, 0x100) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000000)={{0x6000, 0x5e2ef36572033f49, 0x0, 0x6, 0x0, 0xa, 0x7f, 0x6, 0x0, 0x81, 0x8}, {0x1, 0xb000, 0xf, 0x9, 0x61, 0x5, 0x4, 0xff, 0x9, 0x0, 0x3, 0xc}, {0x0, 0xdddd0000, 0x3, 0x1, 0x36, 0xa, 0x2, 0xf, 0x7, 0x8, 0x7, 0xe}, {0xdddd0000, 0x2, 0xb, 0x7f, 0x5, 0x7, 0x1, 0x10, 0xc6, 0x5, 0x7c}, {0x8080000, 0xeeee0000, 0x4, 0x9, 0xad, 0xa0, 0x14, 0x4, 0xe0, 0x0, 0x2}, {0xf000, 0x10000, 0xd, 0x4, 0x16, 0x2, 0x9, 0x5, 0xa, 0x7, 0x3, 0x4}, {0x4, 0xdddd0000, 0xc, 0x6, 0x4, 0x6, 0x8, 0x10, 0x0, 0x8, 0x4, 0x2b}, {0x1, 0x8000000, 0x0, 0x4b, 0x3, 0x3, 0x0, 0x1, 0x8, 0x0, 0xd, 0xb6}, {0x100000}, {0x1, 0x2}, 0x80010000, 0x0, 0x0, 0x160b0, 0x2, 0x1, 0x8080000, 0x0, [0x8fc0, 0x401, 0x101, 0xaefc]}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8400, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x110, r1, 0x0) r8 = socket(0x1e, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@deltaction={0x54, 0x31, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62b5}}]}]}, 0x54}}, 0x1) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r8, &(0x7f0000000380)=@abs, 0xffffffffffffff39) 14.544036252s ago: executing program 2 (id=328): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e26, 0x2001, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 13.494828924s ago: executing program 5 (id=329): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x1, 0x632, &(0x7f0000001280)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) (async) umount2(&(0x7f0000000040)='./file0\x00', 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x1, 0x632, &(0x7f0000001280)="$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") (async) 13.415269702s ago: executing program 2 (id=330): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @value=r0}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x81, 0x1, 0x1, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x18, 0x33, {0x8, 0xffffffff}, 0xd0, 0x6}}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000080)="ce6d22ff1237606aa8df69487ed7965ed16c33cb052d493a97da98211d874e0034f40e7d554c5e4bce2f4d60f2da9cdbb9ed63e4f22daf3a3980cfc8c8211e6eef39f317ec1d84ea85e671943433266f3ca7409dd423b3b78d4373d12e41", 0x5e}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021bbc32f96900000904250000ff0104000904"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="380000002100000829bd7000ffdbdf250a20200cfd00000510000000050015"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001a0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 13.223893938s ago: executing program 1 (id=331): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1c8, 0x2a8, 0x2a8, 0x1c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3, 0x2000000, 0x0, 0x1]}, {0xffffffffffffffff, [], 0x0, 0x6}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x1, 0x6, 0x7, 0x5, 0x6], 0x6}, {0x0, [0x4, 0x4, 0x1, 0x0, 0x2], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 13.051638793s ago: executing program 1 (id=332): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11) 12.822567894s ago: executing program 5 (id=333): prlimit64(0x0, 0x1, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x1000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000500)=@t={0x81, 0x8, 0xf, 0x6, @generic=0x9a}) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000012c0)=""/102394, 0x18ffa) bpf$PROG_LOAD(0x5, 0x0, 0x53) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010022, 0x0) (async) recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010022, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00010000b9d4dd1aefd4a0fff14d72082f45077e1e6e6fb51494e494af4600d0384a722921", @ANYRES16=r0, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.691991633s ago: executing program 4 (id=334): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xa, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r3, 0x11, 0x460e, 0x3) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000002000/0x2000)=nil}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0xfffffff1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1f}}, [@jmp={0x5, 0x0, 0x6, 0x9, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0x0, '\x00', r5}, 0x94) 10.490200841s ago: executing program 1 (id=335): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) io_setup(0x1a, 0x0) userfaultfd(0x1) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="9c821d3d679ba3b407e9c1fe7cb889bdb00cb1256d15aa99661d1b810c076cad078051666298efe1183f895167e2e721c533da9678f9ff7d1796be0758d92cffa0f2fbaaf7cfa0ccc346694dbc7715b46d1826216580e5848aadb27fd79dd231da3610ea9518d4c12daa25dce99bc3374238f671b4b982c775c1e5d68aede0ac82e51a74e28f8002fd142c5d54f101bf2c6e6e57b3ec09353c76c082a129a05b08a194eff376f20ef351a84b5c9227e643ac2929c151a143c5d5bb5722fe06a70ef5a142f6bc63540f3c8b357a57eb829c6c3e22767fa9298b9a4c82eeed6c9b0439b32c75a106", 0xe7, 0xfffffffffffff014, 0x0, 0x2}, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffd, r4, &(0x7f0000000480)="357c66ba4376c62b4be70ee68ef1ef93b382", 0x12, 0xfffffffffffffff9, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000540)="95e247dbe87c55287888a59679ae2abbb401008a5b45dd040b44a44c58a75904de8d7513c753dfe4790a3ee40f5b1abc68d278edc8e024cf03c74f8590a9139ded56cf56cf660315e57a0feb71c55b60bb5a8a8aeb0935ab1e2083a83c1fe5f6299735ba84d7a83a5c8f92cc4d2055da566ebafcfacedfdf02d824ddcc5910dc3ccc", 0x82, 0x1}]) io_submit(0x0, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 8.359871779s ago: executing program 1 (id=336): socket(0x15, 0x800, 0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)=@usbdevfs_driver={0x10, 0xffff185f, &(0x7f0000000480)}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0xa, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0xd3}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @remote}}}], 0x20}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2000002d) close(r10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 8.272044807s ago: executing program 2 (id=337): socket(0x15, 0x800, 0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)=@usbdevfs_driver={0x10, 0xffff185f, &(0x7f0000000480)}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0xa, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0xd3}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @remote}}}], 0x20}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2000002d) close(r10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 6.339757499s ago: executing program 2 (id=338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000804}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CALIPSO\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x4095) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x328, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x11}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x82, 0xfc, "832df80623d267f314f7e5941be241f3c2e0bfea62566b50028cf1a876a8e9032adabaeb47c4c8d856711039cd2999dfa8e0864d7f4581cc6807b84ab3bc7537da3a59b2220625d6c6eb72c091e4839d6fc551785bc1670b8608322c13e86e4c040ccac5b073aa3911fa8bf1a5bc32786eb14d82b614c8957259d7367234"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8001}], @NL80211_ATTR_IE={0x274, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x3}}, @mesh_chsw={0x76, 0x6, {0x3, 0x1, 0x36, 0xffff}}, @dsss={0x3, 0x1, 0xc}, @perr={0x84, 0x95, {0x3d, 0x9, [{{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0xc}, {{}, @device_a, 0x1, @void, 0x3}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0xe}, {{}, @device_a, 0x3, @void, 0x3}, {{0x0, 0x1}, @broadcast, 0x80, @value=@device_b, 0x16}, {{}, @device_a, 0x10, @void, 0x2c}, {{}, @device_a, 0x9, @void, 0x3f}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_a, 0x591a, @value=@device_b, 0x2c}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x25, @val="547e568162ea8bb65b9ab22e5d4e1c80"}}, @ssid={0x0, 0x10, @random="e7166b9f4eddd77199d32752315b5585"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @perr={0x84, 0xfc, {0x2, 0x10, [{{0x0, 0x1}, @device_a, 0x80000000, @value=@broadcast, 0x20}, {{}, @broadcast, 0x62, @void, 0x1e}, {{}, @device_a, 0x100, @void, 0xd}, {{}, @device_a, 0x2, @void, 0x32}, {{0x0, 0x1}, @broadcast, 0x10000, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @broadcast, 0xc76, @value=@broadcast, 0x39}, {{0x0, 0x1}, @device_b, 0x7ff, @value=@broadcast, 0x31}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x32}, {{}, @device_a, 0x1, @void, 0x1b}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x9}, {{}, @device_b, 0x81, @void, 0x2c}, {{}, @device_b, 0x0, @void, 0x16}, {{}, @device_b, 0x7fff, @void, 0x2a}, {{}, @device_a, 0x7ff, @void, 0x3f}, {{}, @device_b, 0x2, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x63, @value=@broadcast, 0x8}]}}, @random={0x2, 0x98, "70b08888bf2644d1b7f8627dee6787b39eabfb075badf4315907e1d0e9ec3c2e6d98d59f3b21b1833bb7b7b79a31d01f935db984978d764848a1bf54ec5ddc25b64763bad83f85f678320cca4bb8b8eae7dae1a3b2a56fe4bedd9c6d6ad19ec4f3171d5a4a2fccabda9692294427edefe15f697340b4edf0e8ab3b879a13f013fa207bdeed0b52da19daa7378ee6de0ef26230ccad94c648"}]}]}, 0x328}}, 0x800) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf0, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d9bb353}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x459a6fbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x105b1252}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x395c6376}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fbd3f0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x886f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8717e90}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x145a3957}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7159}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ed308f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1a7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69b2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc86a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bc66522}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12a846b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54f6f12b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000854) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000a00)={[0xa, 0xffffffffffff6486, 0x6, 0x3, 0x8, 0x5, 0x1, 0x6, 0x4, 0xf5e, 0x7, 0x4ea, 0x6, 0x8, 0x7, 0x8], 0x41000, 0x10011}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan3\x00'}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r4, 0x40045109, &(0x7f0000000b00)=0x5) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8004) sendmsg$nl_route(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@ipmr_delroute={0x54, 0x19, 0x20, 0x70bd2b, 0x25dfdbfe, {0x80, 0x80, 0x20, 0x7, 0x0, 0x3, 0x0, 0x5, 0x2600}, [@RTA_SRC={0x8, 0x2, @local}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_SRC={0x8, 0x2, @private=0xa010102}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_TABLE={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x80001) sendmsg$sock(r2, &(0x7f0000001080)={&(0x7f0000000dc0)=@rc, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e40)="026bd8aa31e08e826023dc0ff59b4c5a2c67abf28dd3c3a4263b3013d410cecc9636f94bcc120375aa834e6fcb2680b71337571aa2df943ae1efca9a552cf151d8abea46a734276dca40be0eb9a75f45ccd6e39d63e56f5658afb8f9250f7712ac7cb97ae60da90adf473c78a2bae63fa3b5e1820bcd35d6b3a6733b5e7c274026048067feb7c57a73c28e5c18543c20d26329dbe9c63d6466fb64e761c5c9f322d645c4cf62a4b8cfafacb1ff72db5304d40788a2", 0xb5}, {&(0x7f0000000f00)="c790dd291b006a1bb74faeeed0aea2d1b4165c0508e08143dc0404e6d51f05b300362497386ef186acde6afd6f7fb54f44218081bac4b65ebb63a68dd81797b5587f22a7f294d5f5c270d33f3f234638057853b17a0205ce5a31c803ad4a217119b497995f99fb74e21f6b454ad5612826b3b0c5640a3edb08f715ae5bae64feba9ea6f74c231145325ec4091163a907ce26f7607be15968582e91f568556fb313dfb207ac08fc049e2c690d35466c06ce54c494c4e5fdbbda4d304d8bc7f6ed43a774196032876cfded5e2e21b428b5fbc0e9c4142ef8613a4f6f26bb2a6ec1afe31438", 0xe4}], 0x2, &(0x7f0000001040)}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5e07, 0x6c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x400}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4723}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f00000011c0)=0x1) r8 = syz_clone3(&(0x7f0000001400)={0x80080, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280), {0x1e}, &(0x7f00000012c0)=""/163, 0xa3, &(0x7f0000001380)=""/12, &(0x7f00000013c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r4}}, 0x58) setpriority(0x3, r8, 0x1) getpid() r9 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) pread64(r9, &(0x7f0000001480)=""/214, 0xd6, 0xfff) pselect6(0x40, &(0x7f0000001580)={0x9, 0x8, 0x7, 0x5, 0x132000000, 0x8, 0xd2, 0x2c}, &(0x7f00000015c0)={0x1, 0x8, 0x2, 0x7fff, 0x7595, 0x7fffffff, 0x7, 0xa}, &(0x7f0000001600)={0x9, 0x1000, 0xd, 0x6, 0x1, 0x8, 0x1000, 0x7}, &(0x7f0000001640)={0x0, 0x989680}, &(0x7f00000016c0)={&(0x7f0000001680)={[0x3]}, 0x8}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000001700)) 6.257667586s ago: executing program 5 (id=339): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x5, 0x4e8, &(0x7f00000005c0)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_clone(0x800, &(0x7f0000001fc0)="c345745286744d75996b3a15a1c7cf9dd514a84a41180a098f4dd3df7d1e86778638939817fc6ec5b03c6b706c11c41d71c8ac587b04c3c6f14e614c6be17e8caa26758948ed07ff17f19cab9771e0fb9041a0a5d5e2ab25fa65a727f237acbe595a4ee975ebcb7014654257f9c2cc715a9805c9e54bdacf72452f3b289d4c173d3a1d3499fb635bf70f667e1312def19f96f577b64868c4da87be3dd4b21e36ffab62af1483fc31a6f18e41be43273185dc83cb0271cea8db6ac86dba276b00cfcf96568f232d78c2bef209314535cf1473525a386ce160", 0xd8, &(0x7f00000020c0), &(0x7f0000002100), &(0x7f0000002140)="2f0af004adfcfd3e1284d00b6f5cf6ef36613841f1162bba8544ea56e6a341568bbcc0e708867a8cea7dc492b5823b2de1da33939f3b7fa47ca8734c860a64b7c974d3cb20276cb928f0095b44df587eaa0d9ee12f04a334e98c30ff0635e9f58becdadba14e084d71106e0ea52862cf6a7fb558e4fa92a15434eb3a3bcf11a7f4e746159c9eabd86aef1fce479b6d9011babaf1887a3891083bf25d41123e0c68e3b1cecc") r2 = getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, r2, 0x0, 0x1ff, 'syz0\x00', 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002240)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002280)={0x80000, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0), {0x27}, &(0x7f0000001e00)=""/161, 0xa1, &(0x7f0000001ec0)=""/196, &(0x7f0000002200)=[r1, r2, r4, 0x0], 0x4, {r5}}, 0x58) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0xa000, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) setreuid(0xee01, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000001d00)={0x2, 0x1, &(0x7f0000001ac0)=""/246, &(0x7f0000001bc0)=""/114, &(0x7f0000001c40)=""/187, 0x100000}) 6.031740976s ago: executing program 4 (id=340): stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000880)={[{@gid={'gid', 0x3d, r1}}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@uid={'uid', 0x3d, r0}}, {@file_umask={'file_umask', 0x3d, 0x1}}, {@file_umask={'file_umask', 0x3d, 0x3ff}}, {}, {@part={'part', 0x3d, 0x200000000000004}}, {@umask={'umask', 0x3d, 0x1}}]}, 0x2, 0x36d, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x8043, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/82, 0x52) 5.375989374s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000001680)={0x20071026}, 0x0) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000a00)=0xd0) sendmsg$DEVLINK_CMD_RATE_SET(r2, 0x0, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x8) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x981) ioctl$BLKCRYPTOPREPAREKEY(r4, 0xc040128b, &(0x7f0000000100)={&(0x7f0000000240)="19a1306c420062777db73777f5b4f75d5732f578fef12cd66e6e92a49dff046f20cf3c5b84d10b05654ea09a80addf5db9d2d84a53071738598b12c694cde936f5055a2c1037a963eecf085f93614ce675", 0x51, &(0x7f0000000440)=""/110, 0x6e}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x39, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x24) 5.144134564s ago: executing program 5 (id=342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xe, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0xec9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='fsi_master_acf_poll_response_busy\x00', r0, 0x0, 0x10}, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00001000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ffd}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000000)) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_usb_disconnect(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 4.079956109s ago: executing program 4 (id=343): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11) 1.540053114s ago: executing program 4 (id=344): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) io_setup(0x1a, 0x0) userfaultfd(0x1) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="9c821d3d679ba3b407e9c1fe7cb889bdb00cb1256d15aa99661d1b810c076cad078051666298efe1183f895167e2e721c533da9678f9ff7d1796be0758d92cffa0f2fbaaf7cfa0ccc346694dbc7715b46d1826216580e5848aadb27fd79dd231da3610ea9518d4c12daa25dce99bc3374238f671b4b982c775c1e5d68aede0ac82e51a74e28f8002fd142c5d54f101bf2c6e6e57b3ec09353c76c082a129a05b08a194eff376f20ef351a84b5c9227e643ac2929c151a143c5d5bb5722fe06a70ef5a142f6bc63540f3c8b357a57eb829c6c3e22767fa9298b9a4c82eeed6c9b0439b32c75a106", 0xe7, 0xfffffffffffff014, 0x0, 0x2}, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffd, r4, &(0x7f0000000480)="357c66ba4376c62b4be70ee68ef1ef93b382", 0x12, 0xfffffffffffffff9, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000540)="95e247dbe87c55287888a59679ae2abbb401008a5b45dd040b44a44c58a75904de8d7513c753dfe4790a3ee40f5b1abc68d278edc8e024cf03c74f8590a9139ded56cf56cf660315e57a0feb71c55b60bb5a8a8aeb0935ab1e2083a83c1fe5f6299735ba84d7a83a5c8f92cc4d2055da566ebafcfacedfdf02d824ddcc5910dc3ccc", 0x82, 0x1}]) io_submit(0x0, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 0s ago: executing program 4 (id=345): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x3, 0x100, 0x7971e33c, 0x80000001, 0x6, {0x2, 0x2, 0x3, 0x5, 0xf4, 0xc9e, 0x0, 0x9, 0x8001, 0xc000, 0x7, r2, r3, 0x9, 0x8}}, {0x1, 0x400, 0x1, 0x200, '.'}}]}, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000140)={[{@bsdgroups}, {@uqnoenforce}, {@uqnoenforce}, {@gquota}, {@dax_never}, {@pqnoenforce}, {@uquota}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\(-^'}}, {@euid_gt={'euid>', r2}}, {@subj_role={'subj_role', 0x3d, '!+9@'}}, {@flag='lazytime'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '&\\'}}]}, 0x4, 0x9655, &(0x7f000001c300)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x7fffffff, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x0, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x1, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x8001, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x3f, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1004, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x100008, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xfffffffd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x8, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x200, 0x7fffffff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0xb, 0x9, 0x3, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fdatasync(r15) kernel console output (not intermixed with test programs): 0] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.043807][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.055921][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.126251][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.203424][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.233558][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.240817][ T2874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.279255][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.286547][ T2874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.366887][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.402045][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.438843][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.450968][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.483457][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.499044][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.506418][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.544250][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.551543][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.566908][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.574087][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.596431][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.603880][ T2874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.615226][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.651318][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.658642][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.691442][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.698700][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.901875][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.044082][ T5767] veth0_vlan: entered promiscuous mode [ 81.088696][ T5767] veth1_vlan: entered promiscuous mode [ 81.112868][ T5766] Bluetooth: hci2: command tx timeout [ 81.115728][ T5775] Bluetooth: hci0: command tx timeout [ 81.180428][ T5767] veth0_macvtap: entered promiscuous mode [ 81.195550][ T5775] Bluetooth: hci3: command tx timeout [ 81.197237][ T5766] Bluetooth: hci1: command tx timeout [ 81.239172][ T5767] veth1_macvtap: entered promiscuous mode [ 81.316773][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.350264][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.373522][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.391019][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.400907][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.410379][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.419753][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.481259][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.493227][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.621917][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.651313][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.686737][ T5768] veth0_vlan: entered promiscuous mode [ 81.694825][ T5763] veth0_vlan: entered promiscuous mode [ 81.712655][ T5763] veth1_vlan: entered promiscuous mode [ 81.718934][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.724959][ T5768] veth1_vlan: entered promiscuous mode [ 81.731623][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.808853][ T5763] veth0_macvtap: entered promiscuous mode [ 81.823893][ T5770] veth0_vlan: entered promiscuous mode [ 81.843609][ T5763] veth1_macvtap: entered promiscuous mode [ 81.879250][ T5770] veth1_vlan: entered promiscuous mode [ 81.918628][ T5768] veth0_macvtap: entered promiscuous mode [ 81.940710][ T5768] veth1_macvtap: entered promiscuous mode [ 82.009743][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.245505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.255809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.553478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.654933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.664250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.757289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.767005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.738794][ T5766] Bluetooth: hci0: command tx timeout [ 83.744464][ T5775] Bluetooth: hci2: command tx timeout [ 83.744682][ T5773] Bluetooth: hci3: command tx timeout [ 83.750168][ T5766] Bluetooth: hci1: command tx timeout [ 83.761606][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.775408][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.795061][ T5770] veth0_macvtap: entered promiscuous mode [ 83.948303][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.964582][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.993172][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.012995][ T5770] veth1_macvtap: entered promiscuous mode [ 84.050735][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.080722][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.105472][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.125509][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.147559][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.182379][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.215733][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.224628][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.255580][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.302877][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.326141][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.356039][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.375726][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.395561][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.415787][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.443966][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.481042][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.505522][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.525568][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.555810][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.577042][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.604825][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.635519][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.644283][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.665495][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.721221][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.751884][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.786587][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.815628][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.832752][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.848985][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.893961][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.909823][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.925052][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.934803][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943923][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.345970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.522145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.531348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.528748][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.552951][ T5773] Bluetooth: hci3: command tx timeout [ 86.558472][ T5779] Bluetooth: hci2: command tx timeout [ 86.564010][ T5779] Bluetooth: hci1: command tx timeout [ 86.566447][ T5775] Bluetooth: hci0: command tx timeout [ 86.739218][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.763229][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.878025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.907684][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.911860][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.925828][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.068585][ T5870] syz.0.1[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.100833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132652][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.188660][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.200058][ T788] cfg80211: failed to load regulatory.db [ 87.222506][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.247737][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.266441][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.801902][ T5877] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 89.821318][ T5878] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 95.417434][ T5891] loop1: detected capacity change from 0 to 32768 [ 97.036123][ T5891] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.6 (5891) [ 97.116418][ T5891] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.127398][ T5891] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.147961][ T5891] BTRFS info (device loop1): turning on sync discard [ 97.155265][ T5891] BTRFS info (device loop1): use no compression [ 97.175543][ T5891] BTRFS info (device loop1): force clearing of disk cache [ 97.184780][ T5891] BTRFS info (device loop1): max_inline at 4096 [ 97.201610][ T5891] BTRFS info (device loop1): disabling free space tree [ 97.882295][ T5891] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 97.886402][ T5891] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 97.934940][ T5891] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 97.977643][ T5891] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 98.002598][ T5891] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 98.106465][ T5891] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 98.252971][ T5891] BTRFS error (device loop1): open_ctree failed: -12 [ 99.022166][ T5918] loop0: detected capacity change from 0 to 32768 [ 99.046625][ T5918] ======================================================= [ 99.046625][ T5918] WARNING: The mand mount option has been deprecated and [ 99.046625][ T5918] and is ignored by this kernel. Remove the mand [ 99.046625][ T5918] option from the mount to silence this warning. [ 99.046625][ T5918] ======================================================= [ 99.160217][ T5918] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 99.240268][ T5918] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.397607][ T5926] loop1: detected capacity change from 0 to 32768 [ 99.487617][ T5926] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.801492][ T5831] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.833365][ T5939] loop2: detected capacity change from 0 to 2048 [ 99.862151][ T5832] hid-generic 0005:0005:079A.0001: hidraw0: BLUETOOTH HID v0.04 Device [syz0] on aa:aa:aa:aa:aa:aa [ 99.865473][ T5926] XFS (loop1): Ending clean mount [ 99.883135][ T5939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.087901][ T5831] usb 1-1: device descriptor read/64, error -71 [ 100.098626][ T5926] XFS (loop1): Quotacheck needed: Please wait. [ 100.255690][ T5764] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.256019][ T5926] XFS (loop1): Quotacheck: Done. [ 100.390704][ T5831] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 100.565154][ T5952] syz.1.15 (5952): /proc/5925/oom_adj is deprecated, please use /proc/5925/oom_score_adj instead. [ 100.585832][ T5831] usb 1-1: device descriptor read/64, error -71 [ 100.720167][ T5831] usb usb1-port1: attempt power cycle [ 100.749826][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.210224][ T5763] ocfs2: Unmounting device (7,0) on (node local) [ 101.526091][ T5832] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.740268][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.768353][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.805953][ T5832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 101.844485][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.856912][ T5832] usb 4-1: SerialNumber: syz [ 101.951109][ T5832] usb 4-1: 0:2 : does not exist [ 102.140813][ T5957] loop1: detected capacity change from 0 to 32768 [ 102.184775][ T5957] (syz.1.18,5957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.252268][ T5957] (syz.1.18,5957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.375317][ T5957] JBD2: Ignoring recovery information on journal [ 102.422543][ T27] usb 4-1: USB disconnect, device number 2 [ 102.587515][ T5957] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 103.651904][ T5963] loop0: detected capacity change from 0 to 32768 [ 103.681033][ T5963] (syz.0.22,5963,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherŸÏ?¢íÔŽUSx£˜ency=full" or missing value [ 103.715109][ T5963] (syz.0.22,5963,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 103.751716][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.113779][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 106.492483][ T5983] nbd0: detected capacity change from 0 to 8589934655 [ 106.493803][ T5986] netlink: 108 bytes leftover after parsing attributes in process `syz.3.26'. [ 106.642248][ T5985] loop1: detected capacity change from 0 to 4096 [ 106.644627][ T5775] block nbd0: Receive control failed (result -104) [ 107.624294][ T5992] loop1: detected capacity change from 0 to 1764 [ 107.687115][ T5764] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.815587][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.944557][ T5988] loop3: detected capacity change from 0 to 32768 [ 107.992628][ T5764] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.139264][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 108.177110][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.195744][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.418239][ T6008] netlink: 'syz.2.32': attribute type 11 has an invalid length. [ 108.426424][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 108.456457][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.474094][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.553793][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.674593][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.887492][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.947450][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.028364][ T9] usb 2-1: config 0 descriptor?? [ 109.271334][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.367241][ T9] usb 2-1: USB disconnect, device number 2 [ 109.393362][ T6004] loop0: detected capacity change from 0 to 40427 [ 109.424341][ T6004] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.437198][ T9] usblp0: removed [ 109.442231][ T6004] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.131724][ T6004] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.333957][ T6004] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.352057][ T6004] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.426451][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.615930][ T9] usb 2-1: device descriptor read/64, error -71 [ 110.824928][ T6037] Can't find a SQUASHFS superblock on nullb0 [ 111.003303][ T6039] Zero length message leads to an empty skb [ 111.316428][ T6044] loop2: detected capacity change from 0 to 256 [ 111.328974][ T6044] exfat: Unknown parameter 'defcontext' [ 111.651912][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'. [ 111.675748][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.899315][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 111.922318][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.966064][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.995598][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 112.029163][ T27] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 112.034930][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.055512][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.095893][ T27] usb 3-1: config 0 descriptor?? [ 112.120660][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.159731][ T6039] loop3: detected capacity change from 0 to 40427 [ 112.167591][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.198498][ T6039] F2FS-fs (loop3): invalid crc value [ 112.210207][ T6039] F2FS-fs (loop3): invalid crc value [ 112.224366][ T6039] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 112.234726][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.265932][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.339889][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.365626][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.375980][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.422777][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.475741][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.514075][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.532701][ T27] kye 0003:0458:501B.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 112.585654][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.586809][ T27] kye 0003:0458:501B.0002: unknown main item tag 0x0 [ 112.632319][ T27] kye 0003:0458:501B.0002: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 112.636499][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.655822][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.694633][ T27] kye 0003:0458:501B.0002: tablet-enabling feature report not found [ 112.703118][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.705391][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.729660][ T27] kye 0003:0458:501B.0002: tablet enabling failed [ 112.745542][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.806003][ T27] usb 3-1: USB disconnect, device number 2 [ 112.816211][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.825602][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.859357][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.865960][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.896042][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.905392][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.913280][ T9] usb 2-1: config 0 descriptor?? [ 112.989593][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.065698][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.090198][ T6050] loop0: detected capacity change from 0 to 32768 [ 113.118555][ T6050] (syz.0.43,6050,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 113.151362][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.181149][ T6050] (syz.0.43,6050,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 113.208043][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.226329][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.269764][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.287894][ T6050] (syz.0.43,6050,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 113.295945][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.348538][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.392255][ T6050] JBD2: Ignoring recovery information on journal [ 113.465998][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.479784][ T6039] loop3: detected capacity change from 0 to 32768 [ 113.521176][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.556489][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.574348][ T6050] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.610376][ T6039] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 113.611694][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.634891][ T6063] loop2: detected capacity change from 0 to 512 [ 113.642513][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.647915][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.652045][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.675129][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.719774][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.727970][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.736156][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.744462][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.809444][ T6039] XFS (loop3): Ending clean mount [ 113.820569][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.867131][ T28] audit: type=1804 audit(1767532354.431:2): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.41" name="/newroot/11/file0/file0" dev="loop3" ino=1065 res=1 errno=0 [ 113.881574][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.898746][ T6069] dvmrp8: entered allmulticast mode [ 113.918763][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.987351][ T6063] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.014943][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.103378][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.142602][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.158372][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.176546][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.178168][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.207700][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.238222][ T5770] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 114.249162][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.284167][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.292523][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.301399][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.309290][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.323468][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.330403][ T5763] ocfs2: Unmounting device (7,0) on (node local) [ 114.332058][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.354246][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.375805][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.396371][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.505098][ T6052] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.900000][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 114.908380][ T6079] loop2: detected capacity change from 0 to 8 [ 114.925794][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.951480][ T6079] squashfs image failed sanity check [ 114.982937][ T9] usb 2-1: USB disconnect, device number 5 [ 115.278906][ T6086] loop2: detected capacity change from 0 to 128 [ 115.282315][ T6086] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 115.300993][ T6086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.706283][ T6082] tty tty20: ldisc open failed (-12), clearing slot 19 [ 115.849524][ T6085] loop3: detected capacity change from 0 to 4096 [ 116.075025][ T6085] NILFS (loop3): invalid segment: Checksum error in segment payload [ 116.106478][ T6085] NILFS (loop3): trying rollback from an earlier position [ 116.213231][ T6085] NILFS (loop3): recovery complete [ 117.422198][ T6126] loop1: detected capacity change from 0 to 16 [ 117.452929][ T6126] erofs: (device loop1): mounted with root inode @ nid 36. [ 117.547179][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 120.494712][ T6152] loop2: detected capacity change from 0 to 32768 [ 120.514896][ T6152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.63 (6152) [ 120.580372][ T6152] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.591176][ T6152] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 120.600180][ T6152] BTRFS info (device loop2): enabling ssd optimizations [ 120.607636][ T6152] BTRFS info (device loop2): using spread ssd allocation scheme [ 120.615395][ T6152] BTRFS info (device loop2): setting nodatasum [ 120.621788][ T6152] BTRFS info (device loop2): using free space tree [ 120.702735][ T6152] BTRFS info (device loop2): auto enabling async discard [ 121.178191][ T6171] netlink: 'syz.3.65': attribute type 2 has an invalid length. [ 121.209101][ T6171] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 121.254736][ T6170] netlink: 'syz.3.65': attribute type 2 has an invalid length. [ 121.296534][ T6170] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 121.335335][ T28] audit: type=1326 audit(1767532361.891:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.373012][ T5768] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.426148][ T28] audit: type=1326 audit(1767532361.891:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.470352][ T28] audit: type=1326 audit(1767532361.931:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.495105][ T28] audit: type=1326 audit(1767532361.931:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.518146][ T28] audit: type=1326 audit(1767532361.931:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.540873][ T28] audit: type=1326 audit(1767532361.971:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.564369][ T28] audit: type=1326 audit(1767532361.981:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.599932][ T28] audit: type=1326 audit(1767532361.981:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.623154][ T28] audit: type=1326 audit(1767532361.991:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.647191][ T28] audit: type=1326 audit(1767532361.991:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d838f749 code=0x7ffc0000 [ 121.735888][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.964339][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 121.979262][ T9] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 121.993490][ T6177] loop2: detected capacity change from 0 to 2048 [ 122.009481][ T9] usb 2-1: config 0 has no interface number 0 [ 122.047529][ T9] usb 2-1: config 0 interface 250 altsetting 229 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 122.065037][ T9] usb 2-1: config 0 interface 250 has no altsetting 0 [ 122.100676][ T9] usb 2-1: New USB device found, idVendor=0eb0, idProduct=3457, bcdDevice=32.8e [ 122.135823][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.170907][ T9] usb 2-1: Product: syz [ 122.179280][ T9] usb 2-1: Manufacturer: syz [ 122.184372][ T9] usb 2-1: SerialNumber: syz [ 122.227348][ T9] usb 2-1: config 0 descriptor?? [ 122.455355][ T6175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.484216][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.502347][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.579768][ T9] cxacru 2-1:0.250: cxacru_bind: interface has incorrect endpoints [ 122.591632][ T9] cxacru 2-1:0.250: usbatm_usb_probe: bind failed: -19! [ 122.609040][ T9] usb 2-1: USB disconnect, device number 6 [ 122.685290][ T6184] loop2: detected capacity change from 0 to 64 [ 123.866035][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.919456][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.065200][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 124.074761][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.088726][ T9] usb 1-1: Product: syz [ 124.093240][ T9] usb 1-1: Manufacturer: syz [ 124.102022][ T9] usb 1-1: SerialNumber: syz [ 124.114639][ T9] usb 1-1: config 0 descriptor?? [ 124.127968][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.138915][ T5868] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 124.151116][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.161310][ T6191] loop2: detected capacity change from 0 to 40427 [ 124.165055][ T5868] usb 2-1: config 0 descriptor?? [ 124.202918][ T6191] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.271953][ T6191] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.658009][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 124.683454][ T9] usb 1-1: Please update to version 0.2 or newer [ 124.780915][ T9] usb 1-1: USB disconnect, device number 5 [ 124.862029][ T5868] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 125.069762][ T5868] lenovo 0003:17EF:6047.0003: Failed to switch F7/9/11 mode: -71 [ 125.092362][ T5868] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71 [ 125.116210][ T5868] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 125.134573][ T5868] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 125.174871][ T5868] usb 2-1: USB disconnect, device number 7 [ 125.587354][ T6214] process 'syz.0.75' launched './file0' with NULL argv: empty string added [ 126.127916][ T6215] loop0: detected capacity change from 0 to 32768 [ 126.209536][ T6215] JBD2: Can't enable checksumming v2 and v3 at the same time! [ 126.226248][ T6215] (syz.0.75,6215,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 126.270473][ T6215] (syz.0.75,6215,0):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 126.309115][ T6215] (syz.0.75,6215,0):ocfs2_check_volume:2488 ERROR: status = -22 [ 126.350447][ T6215] (syz.0.75,6215,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 126.407839][ T6215] (syz.0.75,6215,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 126.992279][ T6221] loop2: detected capacity change from 0 to 40427 [ 127.017099][ T6221] F2FS-fs (loop2): heap/no_heap options were deprecated [ 127.038851][ T6221] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 127.070605][ T6221] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77e8c [ 127.120531][ T6221] F2FS-fs (loop2): invalid crc value [ 127.136023][ T6221] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 127.182727][ T6221] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.279124][ T6221] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 127.321388][ T6221] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 127.372335][ T6221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.422188][ T6221] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 127.443793][ T6221] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 127.460191][ T6221] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 127.553487][ T5768] syz-executor: attempt to access beyond end of device [ 127.553487][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 127.610509][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 127.656182][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 128.182600][ T6229] loop1: detected capacity change from 0 to 32768 [ 128.457754][ T6229] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 129.071410][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 129.286934][ T6261] loop2: detected capacity change from 0 to 128 [ 130.113584][ T6265] 9pnet_fd: Insufficient options for proto=fd [ 131.343878][ T6272] loop2: detected capacity change from 0 to 1024 [ 131.755885][ T6274] syz.2.88 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.792945][ T6274] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 132.670277][ T36] hfsplus: b-tree write err: -5, ino 3 [ 133.013465][ T6277] loop1: detected capacity change from 0 to 256 [ 133.037777][ T6277] exfat: Deprecated parameter 'utf8' [ 133.127777][ T6277] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 133.293263][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.300554][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.446682][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 133.446700][ T28] audit: type=1326 audit(1767532374.001:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1378f749 code=0x7ffc0000 [ 133.453595][ T6282] 9pnet_fd: Insufficient options for proto=fd [ 133.515666][ T28] audit: type=1326 audit(1767532374.001:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1378f749 code=0x7ffc0000 [ 133.565560][ T28] audit: type=1326 audit(1767532374.011:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe1378df90 code=0x7ffc0000 [ 133.601924][ T6283] loop1: detected capacity change from 0 to 4096 [ 133.615515][ T28] audit: type=1326 audit(1767532374.011:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe1378df90 code=0x7ffc0000 [ 133.648572][ T28] audit: type=1326 audit(1767532374.011:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1378f749 code=0x7ffc0000 [ 133.681170][ T5764] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.722921][ T28] audit: type=1326 audit(1767532374.011:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbe1378f749 code=0x7ffc0000 [ 133.784431][ T28] audit: type=1326 audit(1767532374.161:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1378f749 code=0x7ffc0000 [ 133.824975][ T28] audit: type=1326 audit(1767532374.161:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1378f749 code=0x7ffc0000 [ 133.874728][ T6278] loop2: detected capacity change from 0 to 32768 [ 135.440008][ T6278] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.591093][ T6278] XFS (loop2): Ending clean mount [ 135.652180][ T6278] XFS (loop2): Quotacheck needed: Please wait. [ 135.744357][ T6278] XFS (loop2): Quotacheck: Done. [ 135.806069][ T6278] capability: warning: `syz.2.89' uses deprecated v2 capabilities in a way that may be insecure [ 136.180694][ T6295] loop1: detected capacity change from 0 to 32768 [ 136.438157][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.117061][ T10] block nbd0: Possible stuck request ffff888021a88000: control (read@0,1024B). Runtime 30 seconds [ 137.133845][ T10] block nbd0: Possible stuck request ffff888021a88200: control (read@1024,1024B). Runtime 30 seconds [ 137.145080][ T10] block nbd0: Possible stuck request ffff888021a88400: control (read@2048,2048B). Runtime 30 seconds [ 137.300857][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.311470][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.321102][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.335953][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.348221][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.355952][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.435684][ T5811] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 137.502995][ T6329] loop1: detected capacity change from 0 to 164 [ 137.635883][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 137.651790][ T5811] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.664898][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.685517][ T5811] usb 3-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 137.694897][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.719908][ T5811] usb 3-1: config 0 descriptor?? [ 138.129354][ T5811] hid (null): usage index exceeded [ 138.143247][ T5811] wacom 0003:056A:0335.0004: ignoring exceeding usage max [ 138.885866][ T5811] wacom 0003:056A:0335.0004: ignoring exceeding usage max [ 138.901397][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 138.916192][ T5811] wacom 0003:056A:0335.0004: usage index exceeded [ 138.922966][ T5811] wacom 0003:056A:0335.0004: item 0 1 2 2 parsing failed [ 138.931500][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.945961][ T5811] wacom 0003:056A:0335.0004: parse failed [ 139.545791][ T5811] wacom: probe of 0003:056A:0335.0004 failed with error -22 [ 139.555073][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.560816][ T5811] usb 3-1: USB disconnect, device number 3 [ 139.563416][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.582576][ T5779] Bluetooth: hci4: command tx timeout [ 139.849137][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.924524][ T6325] loop0: detected capacity change from 0 to 40427 [ 139.943982][ T6325] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 140.020632][ T6325] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 140.031119][ T6325] F2FS-fs (loop0): Image doesn't support compression [ 140.041990][ T6325] F2FS-fs (loop0): invalid crc value [ 140.083748][ T6325] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.170635][ T6325] F2FS-fs (loop0): Start checkpoint disabled! [ 140.204212][ T6325] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 140.351523][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.395170][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.420615][ T6322] bridge_slave_0: entered allmulticast mode [ 140.445699][ T6322] bridge_slave_0: entered promiscuous mode [ 140.468065][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.485702][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.493153][ T6322] bridge_slave_1: entered allmulticast mode [ 140.519831][ T6322] bridge_slave_1: entered promiscuous mode [ 140.622544][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.632917][ T5832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.669837][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.796920][ T6322] team0: Port device team_slave_0 added [ 140.816590][ T6322] team0: Port device team_slave_1 added [ 140.948636][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.967095][ T6354] loop2: detected capacity change from 0 to 32768 [ 140.973796][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.023996][ T6354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.106 (6354) [ 141.041158][ T6356] loop0: detected capacity change from 0 to 1024 [ 141.062462][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.087050][ T6354] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.119415][ T6354] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.133527][ T6354] BTRFS info (device loop2): turning on flush-on-commit [ 141.153228][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.180718][ T6354] BTRFS info (device loop2): max_inline at 4096 [ 141.196100][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.235938][ T6354] BTRFS info (device loop2): enabling disk space caching [ 141.261435][ T6354] BTRFS info (device loop2): turning off barriers [ 141.271740][ T6354] BTRFS info (device loop2): disabling tree log [ 141.286253][ T6354] BTRFS info (device loop2): enabling ssd optimizations [ 141.293286][ T6354] BTRFS info (device loop2): force clearing of disk cache [ 141.301055][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.335602][ T6354] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.353579][ T6354] BTRFS info (device loop2): use zstd compression, level 3 [ 141.366228][ T6354] BTRFS info (device loop2): max_inline at 0 [ 141.372398][ T6354] BTRFS info (device loop2): disk space caching is enabled [ 141.504818][ T6322] hsr_slave_0: entered promiscuous mode [ 141.545361][ T6322] hsr_slave_1: entered promiscuous mode [ 141.551420][ T6354] BTRFS info (device loop2): rebuilding free space tree [ 141.587762][ T6322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.597052][ T6322] Cannot create hsr debugfs directory [ 141.655232][ T6378] loop1: detected capacity change from 0 to 2048 [ 141.666546][ T5779] Bluetooth: hci4: command tx timeout [ 141.741713][ T6354] BTRFS info (device loop2): disabling free space tree [ 141.767666][ T6354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.807761][ T6378] NILFS (loop1): invalid segment: Magic number mismatch [ 141.815030][ T6378] NILFS (loop1): trying rollback from an earlier position [ 141.834936][ T6378] NILFS (loop1): recovery complete [ 141.846334][ T6354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.855654][ T6379] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.149042][ T6354] BTRFS info (device loop2): checking UUID tree [ 142.906617][ T6322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.929191][ T6322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.967460][ T6322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.981792][ T2874] hfsplus: b-tree write err: -5, ino 4 [ 143.010177][ T6322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.094182][ T6392] loop0: detected capacity change from 0 to 136 [ 143.194258][ T6392] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 143.371974][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.408180][ T6397] loop0: detected capacity change from 0 to 64 [ 143.462148][ T6322] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.518171][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.525323][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.571563][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.586079][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.618541][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.625923][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.748808][ T5779] Bluetooth: hci4: command tx timeout [ 144.390516][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.713277][ T6411] loop1: detected capacity change from 0 to 4096 [ 144.804729][ T6414] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.864423][ T6411] warning: `syz.1.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.888802][ T6411] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.020497][ T6401] loop0: detected capacity change from 0 to 40427 [ 145.067830][ T6401] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 145.091376][ T6401] F2FS-fs (loop0): Image doesn't support compression [ 145.144695][ T6401] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xeffa [ 145.183880][ T6401] F2FS-fs (loop0): invalid crc value [ 145.202756][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 145.223064][ T6401] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x458d/0x6c20 [ 145.237391][ T6407] loop2: detected capacity change from 0 to 32768 [ 145.276447][ T6401] F2FS-fs (loop0): Failed to initialize F2FS node manager (-12) [ 145.314726][ T6407] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.368367][ T6322] veth0_vlan: entered promiscuous mode [ 145.416314][ T5868] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.430133][ T28] audit: type=1326 audit(1767532385.981:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.467473][ T6407] XFS (loop2): Ending clean mount [ 145.473547][ T28] audit: type=1326 audit(1767532385.991:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.488625][ T6322] veth1_vlan: entered promiscuous mode [ 145.575703][ T28] audit: type=1326 audit(1767532385.991:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.645819][ T28] audit: type=1326 audit(1767532385.991:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.677098][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 145.678381][ T28] audit: type=1326 audit(1767532385.991:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.699679][ T6322] veth0_macvtap: entered promiscuous mode [ 145.726046][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.756020][ T5868] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 145.781052][ T6322] veth1_macvtap: entered promiscuous mode [ 145.789944][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.813985][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.824452][ T5868] usb 2-1: config 0 descriptor?? [ 145.830629][ T5779] Bluetooth: hci4: command tx timeout [ 145.846428][ T28] audit: type=1326 audit(1767532385.991:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.870970][ T5868] usb 2-1: bad CDC descriptors [ 145.888585][ T28] audit: type=1326 audit(1767532385.991:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.920265][ T28] audit: type=1326 audit(1767532385.991:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.924865][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.943974][ T28] audit: type=1326 audit(1767532385.991:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 145.944024][ T28] audit: type=1326 audit(1767532385.991:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x7fc00000 [ 146.028610][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.046377][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.057825][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.069215][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.080218][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.090762][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.101726][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.123347][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.136006][ T5832] usb 2-1: USB disconnect, device number 8 [ 146.252783][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.294893][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.306496][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.324154][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.334447][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.345159][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.356359][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.367874][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.392099][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.400799][ T6434] tipc: Started in network mode [ 146.415558][ T6434] tipc: Node identity 4, cluster identity 4711 [ 146.423053][ T6434] tipc: Node number set to 4 [ 146.463389][ T6322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.486550][ T6322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.496041][ T6322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.505043][ T6322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.946667][ T49] wlan1: Trigger new scan to find an IBSS to join [ 148.028886][ T6445] loop0: detected capacity change from 0 to 512 [ 148.073159][ T6445] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.118: iget: bad i_size value: 38620345925642 [ 148.113289][ T6445] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.118: couldn't read orphan inode 15 (err -117) [ 148.146622][ T6445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.186416][ T6445] kAFS: Can only specify source 'none' with -o dyn [ 148.346711][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.354688][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.445695][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.453597][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.615022][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.852022][ T6455] loop0: detected capacity change from 0 to 16 [ 148.877561][ T6455] erofs: Unknown parameter '&' [ 148.883480][ T6457] xt_ipcomp: unknown flags 12 [ 148.936491][ T6455] overlayfs: failed to resolve './file0/file2': -2 [ 149.241312][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.435703][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 149.450675][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.472244][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.508048][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.514848][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 149.560965][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.591289][ T27] usb 2-1: config 0 descriptor?? [ 149.689300][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 149.940489][ T6453] loop4: detected capacity change from 0 to 4096 [ 150.003607][ T6453] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 150.223838][ T27] wacom 0003:056A:032C.0005: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 150.320941][ T27] usb 2-1: USB disconnect, device number 9 [ 150.327726][ T6472] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 150.538540][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 150.538559][ T28] audit: type=1326 audit(1767532391.101:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.0.125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef698f749 code=0x0 [ 150.558361][ T6473] fido_id[6473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.932211][ T6453] ntfs3: loop4: failed to convert "c46c" to cp861 [ 151.825636][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.451762][ T11] wlan1: Trigger new scan to find an IBSS to join [ 153.049313][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.250610][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 153.277462][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.297963][ T5832] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 153.328581][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.364168][ T5832] usb 5-1: config 0 descriptor?? [ 155.202071][ T6481] loop0: detected capacity change from 0 to 32768 [ 155.215751][ T3507] wlan1: Creating new IBSS network, BSSID be:62:c5:bc:bb:2d [ 155.637764][ T28] audit: type=1800 audit(1767532396.201:78): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file2" dev="loop0" ino=5 res=0 errno=0 [ 155.730242][ T28] audit: type=1800 audit(1767532396.291:79): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 155.754844][ T5832] lenovo 0003:17EF:60A3.0006: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 155.791221][ T6503] loop1: detected capacity change from 0 to 1024 [ 156.003240][ T8] usb 5-1: USB disconnect, device number 2 [ 156.468853][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 157.109735][ T6514] loop4: detected capacity change from 0 to 4096 [ 157.163408][ T6516] loop2: detected capacity change from 0 to 2048 [ 157.186184][ T49] hfsplus: b-tree write err: -5, ino 4 [ 157.190237][ T6516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.999506][ T6528] capability: warning: `syz.0.138' uses 32-bit capabilities (legacy support in use) [ 159.058195][ T6528] program syz.0.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.788404][ T6537] loop2: detected capacity change from 0 to 256 [ 160.827529][ T6537] exfat: Deprecated parameter 'namecase' [ 160.931584][ T6537] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 161.327857][ T6544] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.325570][ T5831] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.505745][ T5831] usb 5-1: device descriptor read/64, error -71 [ 164.775626][ T5831] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.935687][ T5831] usb 5-1: device descriptor read/64, error -71 [ 164.976213][ T6562] loop1: detected capacity change from 0 to 4096 [ 165.066856][ T5831] usb usb5-port1: attempt power cycle [ 166.888407][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.981205][ T5831] usb 5-1: device descriptor read/8, error -71 [ 167.111225][ T6591] loop4: detected capacity change from 0 to 512 [ 167.172998][ T6591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.195874][ T10] block nbd0: Possible stuck request ffff888021a88000: control (read@0,1024B). Runtime 60 seconds [ 167.206975][ T10] block nbd0: Possible stuck request ffff888021a88200: control (read@1024,1024B). Runtime 60 seconds [ 167.218396][ T10] block nbd0: Possible stuck request ffff888021a88400: control (read@2048,2048B). Runtime 60 seconds [ 167.533383][ T6601] ipt_REJECT: ECHOREPLY no longer supported. [ 167.584427][ T6601] loop1: detected capacity change from 0 to 512 [ 167.636928][ T6601] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 167.698527][ T6601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.740261][ T6601] EXT4-fs (loop1): 1 truncate cleaned up [ 167.747821][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.822759][ T6322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.835639][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.836847][ T6601] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.153: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 167.864172][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.966109][ T6601] EXT4-fs (loop1): Remounting filesystem read-only [ 168.087893][ T6601] veth3: entered allmulticast mode [ 168.219691][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.145944][ T6616] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 171.426917][ T6624] sctp: [Deprecated]: syz.2.157 (pid 6624) Use of int in maxseg socket option. [ 171.426917][ T6624] Use struct sctp_assoc_value instead [ 172.973906][ T6624] sctp: [Deprecated]: syz.2.157 (pid 6624) Use of int in maxseg socket option. [ 172.973906][ T6624] Use struct sctp_assoc_value instead [ 173.565030][ T6620] loop0: detected capacity change from 0 to 32768 [ 173.592805][ T6620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.158 (6620) [ 173.649151][ T6620] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.675790][ T6620] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 173.695873][ T6620] BTRFS info (device loop0): force clearing of disk cache [ 173.703255][ T6620] BTRFS info (device loop0): enabling auto defrag [ 173.729879][ T6620] BTRFS info (device loop0): max_inline at 0 [ 173.756318][ T6620] BTRFS info (device loop0): enabling disk space caching [ 173.776521][ T6620] BTRFS info (device loop0): disk space caching is enabled [ 173.975523][ T6620] BTRFS info (device loop0): enabling ssd optimizations [ 174.018481][ T6620] BTRFS info (device loop0): rebuilding free space tree [ 174.067641][ T6620] BTRFS info (device loop0): disabling free space tree [ 174.089468][ T6620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.125568][ T6620] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.449037][ T49] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 174.504960][ T5763] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.818783][ T6636] loop4: detected capacity change from 0 to 32768 [ 174.911063][ T6636] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.972115][ T6654] loop1: detected capacity change from 0 to 32768 [ 175.083467][ T6654] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.482565][ T6683] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 176.272642][ T6636] XFS (loop4): Ending clean mount [ 176.422282][ T6654] XFS (loop1): Ending clean mount [ 176.490201][ T6654] XFS (loop1): Quotacheck needed: Please wait. [ 176.679377][ T6654] XFS (loop1): Quotacheck: Done. [ 178.260248][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.287076][ T6322] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.704354][ T6721] loop4: detected capacity change from 0 to 256 [ 180.776279][ T6721] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.217203][ T6728] sg_read: process 45 (syz.4.171) changed security contexts after opening file descriptor, this is not allowed. [ 181.389312][ T6733] loop4: detected capacity change from 0 to 512 [ 181.427935][ T6733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.495880][ T6733] EXT4-fs (loop4): 1 truncate cleaned up [ 181.502933][ T6733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.782371][ T6733] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 181.854871][ T6733] Illegal XDP return value 4294967274 on prog (id 35) dev syz_tun, expect packet loss! [ 183.935367][ T6738] loop0: detected capacity change from 0 to 32768 [ 184.011536][ T6738] (syz.0.165,6738,0):ocfs2_init_local_system_inodes:492 ERROR: status=-30, sysfile=7, slot=6 [ 184.026021][ T6738] (syz.0.165,6738,1):ocfs2_init_local_system_inodes:501 ERROR: status = -30 [ 184.067798][ T6738] (syz.0.165,6738,1):ocfs2_mount_volume:1814 ERROR: status = -30 [ 184.106618][ T6738] (syz.0.165,6738,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 184.129034][ T6322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.441283][ T6756] mmap: syz.0.177 (6756) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.597556][ T6758] loop4: detected capacity change from 0 to 8 [ 184.688399][ T6758] SQUASHFS error: Unable to read directory block [1d0:0] [ 185.228204][ T146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.474559][ T6767] 9pnet_fd: Insufficient options for proto=fd [ 185.736768][ T6771] kernel read not supported for file /rmdF¼ì (pid: 6771 comm: syz.4.179) [ 185.837066][ T28] audit: type=1800 audit(1767532426.401:80): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.179" name=726D64461716BCEC dev="mqueue" ino=11803 res=0 errno=0 [ 188.733583][ T6784] QAT: Device 9 not found [ 188.832901][ T6784] loop0: detected capacity change from 0 to 1024 [ 189.442195][ T6784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.104757][ T6794] syz.0.184 (6794) used greatest stack depth: 19544 bytes left [ 190.429270][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.959056][ T6788] loop2: detected capacity change from 0 to 32768 [ 193.655225][ T5764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5764) [ 193.740503][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 193.770906][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.188'. [ 193.813688][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 193.835651][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.188'. [ 194.055763][ T6811] loop0: detected capacity change from 0 to 4096 [ 194.704609][ T6817] loop4: detected capacity change from 0 to 8192 [ 194.717875][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.724312][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.772126][ T6817] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "fsmagic=0x0000000000000001" [ 196.089794][ T6819] loop0: detected capacity change from 0 to 32768 [ 196.282638][ T6839] ubi31: attaching mtd0 [ 196.295736][ T6819] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.299117][ T6839] ubi31: scanning is finished [ 196.315169][ T6839] ubi31: empty MTD device detected [ 196.429444][ T6843] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 196.660383][ T6822] loop1: detected capacity change from 0 to 32768 [ 197.032999][ T6822] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.102478][ T6819] XFS (loop0): Ending clean mount [ 197.254153][ T6839] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 197.270096][ T10] block nbd0: Possible stuck request ffff888021a88000: control (read@0,1024B). Runtime 90 seconds [ 197.281486][ T10] block nbd0: Possible stuck request ffff888021a88200: control (read@1024,1024B). Runtime 90 seconds [ 197.292798][ T10] block nbd0: Possible stuck request ffff888021a88400: control (read@2048,2048B). Runtime 90 seconds [ 197.356925][ T6822] XFS (loop1): Ending clean mount [ 197.446810][ T6822] XFS (loop1): Quotacheck needed: Please wait. [ 197.644498][ T5763] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.694751][ T6822] XFS (loop1): Quotacheck: Done. [ 197.905630][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.046317][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.743444][ T5831] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.915533][ T5831] usb 5-1: device descriptor read/64, error -71 [ 200.017794][ T6876] loop1: detected capacity change from 0 to 4096 [ 200.104927][ T6877] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.174348][ T6879] loop2: detected capacity change from 0 to 512 [ 200.185774][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.193517][ T28] audit: type=1800 audit(1767532440.741:81): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.201" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 200.207300][ T6879] EXT4-fs: Ignoring removed i_version option [ 200.270511][ T6879] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 200.284742][ T6879] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 200.304223][ T6879] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 200.343710][ T6879] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 200.357860][ T6879] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 200.366727][ T6879] EXT4-fs (loop2): orphan cleanup on readonly fs [ 200.386002][ T5831] usb 5-1: device descriptor read/64, error -71 [ 200.425973][ T6879] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.203: bg 0: block 34: padding at end of block bitmap is not set [ 200.454256][ T6879] Quota error (device loop2): write_blk: dquota write failed [ 200.495972][ T6879] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 200.506560][ T5831] usb usb5-port1: attempt power cycle [ 200.533707][ T6879] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.203: Failed to acquire dquot type 1 [ 200.557175][ T6879] EXT4-fs (loop2): 1 truncate cleaned up [ 200.618018][ T6879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.797003][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.955215][ T5831] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 201.025608][ T5811] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.218807][ T5831] usb 5-1: device not accepting address 9, error -71 [ 201.237009][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 201.331081][ T6894] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 201.445670][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 201.504612][ T5811] usb 2-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 201.546403][ T5811] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.945655][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 201.953053][ T5766] Bluetooth: hci1: command 0x0406 tx timeout [ 201.959226][ T5766] Bluetooth: hci0: command 0x0406 tx timeout [ 202.297671][ T5811] usb 2-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 202.332092][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.341371][ T6898] syz.0.202 uses obsolete (PF_INET,SOCK_PACKET) [ 202.349028][ T5811] usb 2-1: Product: syz [ 202.353613][ T5811] usb 2-1: Manufacturer: syz [ 202.359263][ T5811] usb 2-1: SerialNumber: syz [ 202.369869][ T5811] usb 2-1: config 0 descriptor?? [ 202.588132][ T6899] loop4: detected capacity change from 0 to 32768 [ 202.639199][ T6899] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.649518][ T6899] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 202.658264][ T6899] BTRFS info (device loop4): using free space tree [ 202.666863][ T6885] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 202.821613][ T6899] BTRFS info (device loop4): enabling ssd optimizations [ 202.828807][ T6899] BTRFS info (device loop4): auto enabling async discard [ 203.090674][ T6914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.318880][ T28] audit: type=1800 audit(1767532443.791:82): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.207" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 204.102120][ T6899] sched: RT throttling activated [ 205.678116][ T8] usb 2-1: USB disconnect, device number 10 [ 205.861357][ T6322] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.859296][ T6951] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 209.140219][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 209.789759][ T6953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.870902][ T6949] loop1: detected capacity change from 0 to 4096 [ 210.126487][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 210.315969][ T5755] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 210.338099][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.385578][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.434253][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.477370][ T8] usb 3-1: config 0 descriptor?? [ 210.515614][ T5755] usb 1-1: Using ep0 maxpacket: 16 [ 210.576791][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.612554][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.653258][ T5755] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 210.702835][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 210.705445][ T5755] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 210.729731][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 210.767878][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.788813][ T8] usb 3-1: USB disconnect, device number 4 [ 210.797284][ T5755] usb 1-1: config 0 descriptor?? [ 210.896856][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.907445][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.143136][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.215'. [ 211.231016][ T5755] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0007/input/input8 [ 211.253325][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.263379][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.292683][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.422640][ T5755] appleir 0003:05AC:8241.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 211.435557][ T8] usb 3-1: device descriptor read/64, error -71 [ 211.524856][ T5755] usb 1-1: USB disconnect, device number 6 [ 211.735629][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.767988][ T6974] fido_id[6974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 211.895783][ T8] usb 3-1: device descriptor read/64, error -71 [ 211.902944][ T6978] loop1: detected capacity change from 0 to 2048 [ 211.915864][ T6978] EXT4-fs: inline encryption not supported [ 211.940182][ T6978] ext2: Unknown parameter 'smackfstransmute' [ 212.030134][ T8] usb usb3-port1: attempt power cycle [ 212.119762][ T6978] loop1: detected capacity change from 0 to 4096 [ 212.139712][ T6978] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.168483][ T6980] loop0: detected capacity change from 0 to 512 [ 212.198201][ T6978] NILFS (loop1): unrecognized mount option "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [ 212.414533][ T6978] loop1: detected capacity change from 0 to 2048 [ 212.475809][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.477905][ T6978] NILFS (loop1): couldn't find nilfs on the device [ 212.540801][ T8] usb 3-1: device descriptor read/8, error -71 [ 212.602388][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 212.645955][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 213.160016][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 213.293439][ T8] usb 3-1: device descriptor read/8, error -71 [ 213.436003][ T8] usb usb3-port1: unable to enumerate USB device [ 215.493455][ T7010] loop1: detected capacity change from 0 to 1024 [ 215.523424][ T7010] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.574642][ T7010] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 215.611950][ T7010] EXT4-fs (loop1): orphan cleanup on readonly fs [ 215.631347][ T7010] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #3: block 3: comm syz.1.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 215.665743][ T7010] Quota error (device loop1): write_blk: dquota write failed [ 215.675039][ T7010] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 215.685237][ T7010] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 215.696147][ T7010] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.234: Failed to acquire dquot type 0 [ 215.708793][ T7010] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 3: comm syz.1.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 215.725716][ T5868] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 215.766197][ T7010] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 215.795515][ T7010] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.234: Failed to acquire dquot type 0 [ 215.856257][ T7010] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.234: Freeing blocks not in datazone - block = 0, count = 4096 [ 215.916687][ T7010] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 3: comm syz.1.234: lblock 3 mapped to illegal pblock 3 (length 1) [ 215.946111][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.964362][ T5868] usb 5-1: not running at top speed; connect to a high speed hub [ 215.984823][ T7010] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 215.985757][ T5868] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.029156][ T5868] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 216.035564][ T7010] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.234: Failed to acquire dquot type 0 [ 216.062684][ T5868] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.093523][ T5868] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 216.124973][ T7010] EXT4-fs (loop1): 1 orphan inode deleted [ 216.146518][ T5868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.155921][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.201609][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.235501][ T5868] usb 5-1: Product: syz [ 216.239787][ T5868] usb 5-1: Manufacturer: syz [ 216.244537][ T5868] usb 5-1: SerialNumber: syz [ 216.267029][ T7014] loop2: detected capacity change from 0 to 1024 [ 216.348679][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.509874][ T7015] hfsplus: xattr searching failed [ 216.524412][ T7015] hfsplus: xattr searching failed [ 216.543101][ T7015] hfsplus: xattr searching failed [ 216.597360][ T3507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.612875][ T5868] usb 5-1: 0:2 : does not exist [ 216.617356][ T7015] hfsplus: xattr searching failed [ 216.695317][ T5868] usb 5-1: USB disconnect, device number 11 [ 216.757351][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.849532][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'. [ 216.870518][ T7021] team0: No ports can be present during mode change [ 217.076567][ T36] hfsplus: bad catalog file entry [ 217.085718][ T36] hfsplus: b-tree write err: -5, ino 3 [ 217.140249][ T7027] syzkaller0: entered promiscuous mode [ 217.185821][ T7027] syzkaller0: entered allmulticast mode [ 217.363472][ T7035] loop4: detected capacity change from 0 to 4096 [ 217.382014][ T7035] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 217.420631][ T7035] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 217.485305][ T7038] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.681617][ T7035] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 217.784316][ T7035] Remounting filesystem read-only [ 217.926563][ T6322] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 217.933416][ T6322] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 217.955477][ T6322] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 217.962612][ T6322] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 217.976765][ T6322] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 217.988888][ T6322] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 218.017699][ T6322] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 218.043042][ T6322] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 218.050812][ T6322] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 218.058987][ T6322] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 218.068265][ T6322] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 218.085510][ T5818] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 218.102425][ T6322] NILFS (loop4): discard dirty page: offset=270336, ino=3 [ 218.119077][ T6322] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 218.424404][ T5818] usb 3-1: device descriptor read/64, error -71 [ 218.574993][ T7049] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 219.745521][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 219.861557][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 219.901555][ T7059] netlink: 'syz.1.246': attribute type 8 has an invalid length. [ 219.912492][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.246'. [ 219.915522][ T5818] usb 3-1: device descriptor read/64, error -71 [ 220.055843][ T5818] usb usb3-port1: attempt power cycle [ 220.153167][ T7059] loop1: detected capacity change from 0 to 256 [ 220.164837][ T7059] FAT-fs (loop1): Unrecognized mount option "utf8:0" or missing value [ 220.483550][ T5818] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.570320][ T5818] usb 3-1: device descriptor read/8, error -71 [ 221.701371][ T7081] loop2: detected capacity change from 0 to 256 [ 221.771503][ T7081] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 221.895696][ T28] audit: type=1800 audit(1767532462.441:83): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 222.256658][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 222.267053][ T5775] CPU: 0 PID: 5775 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 222.274659][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.284932][ T5775] Workqueue: hci3 hci_rx_work [ 222.289845][ T5775] Call Trace: [ 222.293157][ T5775] [ 222.296122][ T5775] dump_stack_lvl+0x16c/0x230 [ 222.301049][ T5775] ? show_regs_print_info+0x20/0x20 [ 222.306304][ T5775] ? load_image+0x3b0/0x3b0 [ 222.310877][ T5775] sysfs_create_dir_ns+0x256/0x280 [ 222.316140][ T5775] ? hci_rx_work+0x43a/0xd80 [ 222.320779][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 222.325590][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 222.330850][ T5775] kobject_add_internal+0x6b8/0xc70 [ 222.336382][ T5775] kobject_add+0x156/0x220 [ 222.340842][ T5775] ? __rwlock_init+0x150/0x150 [ 222.345652][ T5775] ? kobject_init+0x1e0/0x1e0 [ 222.350385][ T5775] ? _raw_spin_unlock+0x28/0x40 [ 222.355274][ T5775] ? get_device_parent+0x366/0x390 [ 222.360520][ T5775] device_add+0x408/0xc20 [ 222.364994][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 222.369979][ T5775] le_conn_complete_evt+0xf36/0x1500 [ 222.375387][ T5775] ? hci_event_packet+0x4a7/0x1210 [ 222.380551][ T5775] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 222.387009][ T5775] ? __copy_skb_header+0xa7/0x550 [ 222.392093][ T5775] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 222.397944][ T5775] ? skb_pull_data+0xfb/0x200 [ 222.402861][ T5775] hci_le_conn_complete_evt+0x187/0x440 [ 222.408487][ T5775] ? hci_remote_host_features_evt+0x160/0x160 [ 222.414739][ T5775] hci_event_packet+0x795/0x1210 [ 222.419736][ T5775] ? bis_list+0x290/0x290 [ 222.424108][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 222.429486][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 222.434745][ T5775] hci_rx_work+0x43a/0xd80 [ 222.439246][ T5775] ? process_scheduled_works+0x957/0x15b0 [ 222.445101][ T5775] process_scheduled_works+0xa45/0x15b0 [ 222.450732][ T5775] ? assign_work+0x400/0x400 [ 222.455557][ T5775] ? assign_work+0x39e/0x400 [ 222.460542][ T5775] worker_thread+0xa55/0xfc0 [ 222.465303][ T5775] kthread+0x2fa/0x390 [ 222.469421][ T5775] ? pr_cont_work+0x560/0x560 [ 222.474134][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 222.478941][ T5775] ret_from_fork+0x48/0x80 [ 222.483572][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 222.488216][ T5775] ret_from_fork_asm+0x11/0x20 [ 222.493060][ T5775] [ 222.499092][ T5775] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 222.513327][ T5775] Bluetooth: hci3: failed to register connection device [ 222.576047][ T7087] loop1: detected capacity change from 0 to 4096 [ 223.566380][ T7091] loop2: detected capacity change from 0 to 32768 [ 223.608246][ T7091] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.664947][ T7091] XFS (loop2): Ending clean mount [ 223.700839][ T7091] XFS (loop2): Quotacheck needed: Please wait. [ 223.805900][ T7091] XFS (loop2): Quotacheck: Done. [ 223.865488][ T7100] loop4: detected capacity change from 0 to 16 [ 223.872286][ T7100] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 223.924404][ T7100] block device autoloading is deprecated and will be removed. [ 223.937159][ T5818] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 224.115198][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.127695][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 224.160081][ T5818] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 224.169031][ T5818] usb 2-1: config 0 has no interface number 0 [ 224.177485][ T5818] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 224.201394][ T5818] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.213755][ T5818] usb 2-1: config 0 interface 196 has no altsetting 0 [ 224.266789][ T5818] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 224.285512][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.293661][ T5818] usb 2-1: Product: syz [ 224.325428][ T5818] usb 2-1: Manufacturer: syz [ 224.330190][ T5818] usb 2-1: SerialNumber: syz [ 224.357050][ T5818] usb 2-1: config 0 descriptor?? [ 224.391822][ T7093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.468189][ T7112] netlink: 88 bytes leftover after parsing attributes in process `syz.4.260'. [ 224.588686][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 224.629018][ T5818] ipheth 2-1:0.196: Unable to find endpoints [ 224.869068][ T7112] loop4: detected capacity change from 0 to 32768 [ 224.918902][ T7112] ea_get: invalid extended attribute [ 224.927576][ T7112] ffff88805c4cbab0: 04 00 00 00 .... [ 224.955989][ T7112] ea_get: invalid extended attribute [ 224.961621][ T7112] ffff88805c4cbab0: 04 00 00 00 .... [ 224.972579][ T7112] ea_get: invalid extended attribute [ 224.978757][ T7112] ffff88805c4cbab0: 04 00 00 00 .... [ 224.997118][ T7117] ea_get: invalid extended attribute [ 225.004902][ T7117] ffff88805c4cbab0: 04 00 00 00 .... [ 225.005748][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 225.191105][ T7121] loop4: detected capacity change from 0 to 2048 [ 225.203889][ T7121] ext4: Unknown parameter '& ' [ 225.215521][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 225.230044][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.251629][ T8] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 225.268638][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.278111][ T5764] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.289502][ T8] usb 3-1: Product: syz [ 225.297175][ T8] usb 3-1: Manufacturer: syz [ 225.312327][ T8] usb 3-1: SerialNumber: syz [ 225.330897][ T8] usb 3-1: config 0 descriptor?? [ 225.754850][ T8] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 225.775571][ T5832] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 225.965087][ T5832] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 225.982387][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.002804][ T5832] usb 5-1: config 0 descriptor?? [ 226.015552][ T8] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 226.032184][ T5832] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 226.096918][ T7133] loop2: detected capacity change from 0 to 1024 [ 226.126014][ T8] gs_usb: probe of 3-1:0.0 failed with error -71 [ 226.148222][ T8] usb 3-1: USB disconnect, device number 13 [ 226.301803][ T12] hfsplus: b-tree write err: -5, ino 4 [ 226.427091][ T8] usb 2-1: USB disconnect, device number 11 [ 226.446631][ T5832] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 226.458760][ T7135] loop2: detected capacity change from 0 to 4096 [ 226.843107][ T7139] loop2: detected capacity change from 0 to 16 [ 226.916079][ T5832] gspca_cpia1: usb_control_msg 02, error -32 [ 226.917124][ T7139] erofs: (device loop2): mounted with root inode @ nid 36. [ 227.045670][ T5832] gspca_cpia1: usb_control_msg 02, error -71 [ 227.051746][ T5832] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 227.084217][ T5832] usb 5-1: USB disconnect, device number 12 [ 227.092185][ T7144] No source specified [ 227.184778][ T7144] loop2: detected capacity change from 0 to 4096 [ 227.199014][ T7144] ntfs: (device loop2): parse_options(): Invalid gid option argument: *ú &" i‰ŸBþáó7SësÙAò×ΑÁ(3"oÚ³mlQ A{' ’ ü'åbè5ÿ‹‘YµrÚkˆ [ 227.220940][ T7144] No source specified [ 227.352157][ T10] block nbd0: Possible stuck request ffff888021a88000: control (read@0,1024B). Runtime 120 seconds [ 227.363328][ T10] block nbd0: Possible stuck request ffff888021a88200: control (read@1024,1024B). Runtime 120 seconds [ 227.374670][ T10] block nbd0: Possible stuck request ffff888021a88400: control (read@2048,2048B). Runtime 120 seconds [ 227.397326][ T7137] loop1: detected capacity change from 0 to 40427 [ 227.412941][ T7137] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 227.562682][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 227.589717][ T7137] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 227.625865][ T7137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 227.710582][ T7153] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 227.913165][ T7137] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.925878][ T7137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.540844][ T28] audit: type=1800 audit(1767532469.101:84): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 228.741695][ T5767] syz-executor: attempt to access beyond end of device [ 228.741695][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 228.779006][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 228.915877][ T7158] loop2: detected capacity change from 0 to 512 [ 228.945847][ T7158] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 228.994717][ T7158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 229.020042][ T7158] EXT4-fs (loop2): orphan cleanup on readonly fs [ 229.045015][ T7158] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.273: bad orphan inode 267 [ 229.048206][ T7161] loop4: detected capacity change from 0 to 128 [ 229.075647][ T7158] EXT4-fs (loop2): Remounting filesystem read-only [ 229.084249][ T7158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 229.127414][ T7158] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.273: dx entry: limit 0 != root limit 125 [ 229.132099][ T7161] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.152803][ T7158] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.273: Corrupt directory, running e2fsck is recommended [ 229.203409][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 229.213624][ T7161] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.568769][ T5775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.579655][ T5775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.665538][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 229.822628][ T5775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.891748][ T5775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.927702][ T5775] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.935766][ T5775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.223223][ T6322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.065693][ T5773] Bluetooth: hci5: command tx timeout [ 232.238430][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 232.461225][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.495809][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.503389][ T7168] bridge_slave_0: entered allmulticast mode [ 232.548196][ T7168] bridge_slave_0: entered promiscuous mode [ 232.579004][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.605673][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.612988][ T7168] bridge_slave_1: entered allmulticast mode [ 232.638545][ T7168] bridge_slave_1: entered promiscuous mode [ 232.793859][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.833526][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.886500][ T28] audit: type=1326 audit(1767532473.451:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.4.277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f166ef8f749 code=0x0 [ 232.886879][ T7191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.278'. [ 233.008306][ T7168] team0: Port device team_slave_0 added [ 233.041427][ T7185] loop1: detected capacity change from 0 to 32768 [ 233.046162][ T7168] team0: Port device team_slave_1 added [ 233.204645][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.221550][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.225600][ T5764] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by udevd (5764) [ 234.651203][ T5773] Bluetooth: hci5: command tx timeout [ 234.680435][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.765761][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 234.782372][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.790135][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.825568][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.996221][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 235.023337][ T7168] hsr_slave_0: entered promiscuous mode [ 235.040077][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.056938][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.073866][ T7168] hsr_slave_1: entered promiscuous mode [ 235.088737][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.097266][ T7168] Cannot create hsr debugfs directory [ 235.108020][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.125307][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.143566][ T8] usb 2-1: Product: syz [ 235.155646][ T8] usb 2-1: Manufacturer: syz [ 235.160568][ T8] usb 2-1: SerialNumber: syz [ 235.366705][ T8] usb 2-1: skipping empty audio interface (v1) [ 235.449909][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 235.498878][ T7210] loop4: detected capacity change from 0 to 256 [ 235.510435][ T8] usb 2-1: USB disconnect, device number 12 [ 235.595606][ T6018] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.660530][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.116757][ T5775] Bluetooth: hci5: command tx timeout [ 237.542939][ T7168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.618498][ T7168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.637308][ T7168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.666673][ T7168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.900136][ T7231] loop2: detected capacity change from 0 to 256 [ 237.985754][ T5811] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 237.988400][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.031875][ T7231] FAT-fs (loop2): Directory bread(block 64) failed [ 238.056253][ T7231] FAT-fs (loop2): Directory bread(block 65) failed [ 238.071518][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.073354][ T7231] FAT-fs (loop2): Directory bread(block 66) failed [ 238.099381][ T7231] FAT-fs (loop2): Directory bread(block 67) failed [ 238.107517][ T7231] FAT-fs (loop2): Directory bread(block 68) failed [ 238.114635][ T7231] FAT-fs (loop2): Directory bread(block 69) failed [ 238.124200][ T7231] FAT-fs (loop2): Directory bread(block 70) failed [ 238.127860][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.136020][ T7231] FAT-fs (loop2): Directory bread(block 71) failed [ 238.138361][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.144933][ T7231] FAT-fs (loop2): Directory bread(block 72) failed [ 238.171414][ T7231] FAT-fs (loop2): Directory bread(block 73) failed [ 238.196646][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 238.208306][ T5811] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.213728][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.223738][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.233085][ T5811] usb 2-1: config 0 has no interface number 0 [ 238.278369][ T5811] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.283001][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.304937][ T7231] syz.2.281: attempt to access beyond end of device [ 238.304937][ T7231] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 238.340936][ T5811] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.383245][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.421175][ T5811] usb 2-1: config 0 descriptor?? [ 238.476787][ T5811] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 240.058283][ T5775] Bluetooth: hci5: command tx timeout [ 240.364866][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.573529][ T7257] loop4: detected capacity change from 0 to 128 [ 240.636724][ T7257] befs: (loop4): invalid magic header [ 241.228211][ T7265] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 241.886371][ T5832] usb 2-1: USB disconnect, device number 13 [ 242.081903][ T7168] veth0_vlan: entered promiscuous mode [ 242.139936][ T7168] veth1_vlan: entered promiscuous mode [ 242.173081][ T7168] veth0_macvtap: entered promiscuous mode [ 242.184543][ T7168] veth1_macvtap: entered promiscuous mode [ 242.279060][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.292325][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.305900][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.348332][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.358814][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.370160][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.380557][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.381665][ T7270] loop1: detected capacity change from 0 to 2048 [ 242.392467][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.410136][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.442727][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.482734][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.491136][ T7273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.524589][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.542371][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.565628][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.595525][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.615436][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.615533][ T5755] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 242.644401][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.655020][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.677995][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.688840][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.700142][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.732733][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.749072][ T7168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.755635][ T5811] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.760253][ T7168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.776618][ T7168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.785775][ T7168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.844730][ T5755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.318476][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 244.336987][ T5755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.357378][ T5811] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 244.376991][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.390161][ T5755] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 244.427304][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.442019][ T5811] usb 3-1: config 0 descriptor?? [ 244.497756][ T5755] usb 5-1: config 0 descriptor?? [ 244.577473][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.597313][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.672303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.696786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.879783][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 244.907266][ T5811] usbhid: probe of 3-1:0.0 failed with error -71 [ 244.943067][ T5811] usb 3-1: USB disconnect, device number 14 [ 247.894371][ T5755] hid-led: probe of 0003:1D34:000A.0008 failed with error -71 [ 248.120184][ T5755] usb 5-1: USB disconnect, device number 13 [ 249.291347][ T7309] loop1: detected capacity change from 0 to 2048 [ 249.381594][ T7309] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 250.354896][ T7310] loop2: detected capacity change from 0 to 1024 [ 250.371924][ T7310] ext2: Bad value for 'mb_optimize_scan' [ 251.201242][ T7305] loop2: detected capacity change from 0 to 512 [ 251.209169][ T7305] EXT4-fs: Ignoring removed orlov option [ 251.214815][ T7305] EXT4-fs: Ignoring removed nobh option [ 251.257002][ T7305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.310444][ T7305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.303: bg 0: block 248: padding at end of block bitmap is not set [ 251.326548][ T7305] Quota error (device loop2): write_blk: dquota write failed [ 251.334171][ T7305] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 251.344352][ T7305] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.303: Failed to acquire dquot type 1 [ 251.359447][ T7305] EXT4-fs (loop2): 1 truncate cleaned up [ 251.366083][ T7305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.379168][ T7305] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.392475][ T7305] EXT4-fs: Ignoring removed orlov option [ 251.398231][ T7305] EXT4-fs: Ignoring removed nobh option [ 251.403852][ T7305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.483358][ T7305] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.303: Abort forced by user [ 251.548276][ T7305] EXT4-fs (loop2): Remounting filesystem read-only [ 251.554872][ T7305] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 251.985846][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.740456][ T7332] program syz.1.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.495503][ T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 254.690052][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.729967][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 254.754877][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.766573][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.796776][ T23] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 254.806355][ T23] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.814388][ T23] usb 6-1: Manufacturer: syz [ 254.827726][ T23] usb 6-1: config 0 descriptor?? [ 254.851615][ T7343] mmap: syz.2.307 (7343): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 255.174410][ T8] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 256.628619][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.635064][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.662827][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.683162][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.693842][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 256.710821][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.723459][ T8] usb 5-1: config 0 descriptor?? [ 256.965486][ T23] rc_core: IR keymap rc-hauppauge not found [ 256.971467][ T23] Registered IR keymap rc-empty [ 256.980693][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.020485][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.030881][ T7355] loop2: detected capacity change from 0 to 256 [ 257.041382][ T7355] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.056528][ T7355] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 257.063255][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 257.083966][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 257.119895][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.128644][ T7355] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 257.146373][ T5818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 257.165849][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.166859][ T8] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 257.216969][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.270351][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.325616][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.337128][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 257.368550][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.385551][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.403187][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.426449][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.430443][ T10] block nbd0: Possible stuck request ffff888021a88000: control (read@0,1024B). Runtime 150 seconds [ 257.441259][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 257.446688][ T10] block nbd0: Possible stuck request ffff888021a88200: control (read@1024,1024B). Runtime 150 seconds [ 257.469885][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.472044][ T10] block nbd0: Possible stuck request ffff888021a88400: control (read@2048,2048B). Runtime 150 seconds [ 257.517293][ T5818] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 257.535567][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.546510][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.595619][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.626726][ T5818] usb 2-1: config 0 descriptor?? [ 257.645804][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 257.728483][ T23] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 257.762541][ T23] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 257.794180][ T23] usb 6-1: USB disconnect, device number 2 [ 259.868458][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 259.874635][ T5818] usbhid: probe of 2-1:0.0 failed with error -71 [ 259.918578][ T8] usb 5-1: reset full-speed USB device number 14 using dummy_hcd [ 259.940659][ T5818] usb 2-1: USB disconnect, device number 14 [ 260.517481][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.320'. [ 260.604097][ T7377] tmpfs: Bad value for 'nr_blocks' [ 260.765035][ T6346] usb 5-1: USB disconnect, device number 14 [ 260.781697][ T7372] loop1: detected capacity change from 0 to 32768 [ 260.808109][ T7372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.318 (7372) [ 260.875954][ T7372] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.904865][ T7372] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 260.931018][ T7372] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 260.950758][ T7372] BTRFS info (device loop1): force zstd compression, level 3 [ 260.959349][ T7372] BTRFS info (device loop1): turning on async discard [ 260.968537][ T7372] BTRFS info (device loop1): force clearing of disk cache [ 260.975628][ T6346] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 260.978463][ T7372] BTRFS info (device loop1): enabling disk space caching [ 260.998391][ T7372] BTRFS info (device loop1): turning off async discard [ 261.032730][ T7372] BTRFS info (device loop1): disk space caching is enabled [ 261.266695][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.275542][ T6346] usb 5-1: Using ep0 maxpacket: 16 [ 261.283013][ T6346] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.292298][ T6346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.303654][ T6346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.319201][ T7372] BTRFS info (device loop1): enabling ssd optimizations [ 263.105611][ T6346] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.119333][ T7372] BTRFS info (device loop1): rebuilding free space tree [ 263.178371][ T6346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.290569][ T6346] usb 5-1: Product: syz [ 263.316113][ T6346] usb 5-1: Manufacturer: syz [ 263.324306][ T7372] BTRFS info (device loop1): disabling free space tree [ 263.345570][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 263.351852][ T6346] usb 5-1: SerialNumber: syz [ 263.390557][ T7372] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.492341][ T7372] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.585740][ T6346] usb 5-1: can't set config #1, error -71 [ 263.634617][ T6346] usb 5-1: USB disconnect, device number 15 [ 263.745822][ T5767] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.335749][ T5832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 265.505544][ T5832] usb 6-1: device descriptor read/64, error -71 [ 266.742833][ T5832] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 266.911969][ T7431] loop5: detected capacity change from 0 to 1024 [ 266.949438][ T7431] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 266.981443][ T7431] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 267.016539][ T7435] Cannot find add_set index 3 as target [ 267.025303][ T7431] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.052360][ T7431] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.329: Freeing blocks not in datazone - block = 0, count = 4096 [ 267.075269][ T7431] EXT4-fs (loop5): 1 orphan inode deleted [ 267.086805][ T7431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.135521][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 267.147923][ T7439] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.329: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 267.351821][ T7168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.395779][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 269.124590][ T7446] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 269.703814][ T23] usb 3-1: config index 0 descriptor too short (expected 48155, got 27) [ 269.712572][ T23] usb 3-1: config 249 has too many interfaces: 50, using maximum allowed: 32 [ 269.721689][ T23] usb 3-1: config 249 has 2 interfaces, different from the descriptor's value: 50 [ 269.731329][ T23] usb 3-1: config 249 has no interface number 1 [ 269.752538][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 269.771272][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.787441][ T23] usb 3-1: Product: syz [ 269.791767][ T23] usb 3-1: Manufacturer: syz [ 269.796524][ T23] usb 3-1: SerialNumber: syz [ 271.864044][ T23] usb 3-1: Could not set interface, error -71 [ 271.945671][ T23] usb 3-1: USB disconnect, device number 15 [ 274.014419][ T7472] loop5: detected capacity change from 0 to 512 [ 274.127796][ T7472] EXT4-fs warning (device loop5): read_mmp_block:115: Error -74 while reading MMP block 13 [ 274.259166][ T7474] loop4: detected capacity change from 0 to 64 [ 274.317932][ T7474] hfs: unable to parse mount options [ 274.441769][ T5764] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.466174][ T7476] netlink: 'syz.5.339': attribute type 10 has an invalid length. [ 274.611553][ T7476] macvlan1: entered allmulticast mode [ 274.659811][ T7476] veth1_vlan: entered allmulticast mode [ 274.733161][ T7476] team0: Port device macvlan1 added [ 276.293334][ T6346] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.001728][ T7500] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 278.658197][ T6346] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 133, setting to 64 [ 278.676814][ T6346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 278.688228][ T6346] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 278.697701][ T6346] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 278.715429][ T6346] usb 6-1: Product: syz [ 278.721157][ T6346] usb 6-1: Manufacturer: syz [ 278.726641][ T6346] usb 6-1: SerialNumber: syz [ 278.734133][ T6346] usb 6-1: config 0 descriptor?? [ 280.147741][ T29] INFO: task syz.3.65:6170 blocked for more than 144 seconds. [ 280.152032][ T6346] usb 6-1: selecting invalid altsetting 0 [ 280.165581][ T29] Not tainted syzkaller #0 [ 280.205561][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.233129][ T29] task:syz.3.65 state:D stack:24392 pid:6170 ppid:5770 flags:0x00004006 [ 280.267687][ T29] Call Trace: [ 280.277965][ T29] [ 280.283320][ T29] __schedule+0x14d2/0x44d0 [ 280.315746][ T23] usb 6-1: USB disconnect, device number 5 [ 280.337553][ T29] ? asan.module_dtor+0x20/0x20 [ 280.360293][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 280.385177][ T29] ? __mutex_trylock_common+0x84/0x250 [ 280.399580][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 280.433208][ T29] schedule+0xbd/0x170 [ 280.442597][ T29] schedule_preempt_disabled+0x13/0x20 [ 280.455441][ T29] __mutex_lock+0x6b7/0xcc0 [ 280.460172][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 280.464985][ T29] ? sync_bdevs+0x1af/0x330 [ 280.472838][ T29] ? mutex_lock_nested+0x20/0x20 [ 280.493772][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 280.501417][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 280.513220][ T29] sync_bdevs+0x1af/0x330 [ 280.523573][ T29] ksys_sync+0xba/0x150 [ 280.541360][ T29] ? sync_filesystem+0x220/0x220 [ 280.553572][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 280.560062][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 280.573102][ T29] __ia32_sys_sync+0xe/0x20 [ 280.578220][ T29] do_syscall_64+0x55/0xb0 [ 280.582790][ T29] ? clear_bhb_loop+0x40/0x90 [ 280.588298][ T29] ? clear_bhb_loop+0x40/0x90 [ 280.600212][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.611527][ T29] RIP: 0033:0x7f20d838f749 [ 280.618461][ T29] RSP: 002b:00007f20d92ea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 280.632822][ T29] RAX: ffffffffffffffda RBX: 00007f20d85e5fa0 RCX: 00007f20d838f749 [ 280.657519][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.677846][ T29] RBP: 00007f20d85e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 280.691887][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.703228][ T29] R13: 00007f20d85e6038 R14: 00007f20d85e5fa0 R15: 00007ffe543e0808 [ 280.723588][ T29] [ 280.733429][ T29] [ 280.733429][ T29] Showing all locks held in the system: [ 280.743047][ T29] 1 lock held by khungtaskd/29: [ 280.751821][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 280.785579][ T29] 2 locks held by getty/5526: [ 280.790448][ T29] #0: ffff88814cd630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 280.807227][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 280.836679][ T29] 2 locks held by syz-executor/5767: [ 280.842175][ T29] 1 lock held by udevd/5777: [ 280.865582][ T29] #0: ffff88802198d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 280.877481][ T29] 1 lock held by syz.3.65/6170: [ 280.882471][ T29] #0: ffff88802198d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 280.905444][ T29] 1 lock held by syz-executor/6322: [ 280.910814][ T29] 1 lock held by syz.0.225/6983: [ 280.925453][ T29] #0: ffff88802198d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 280.944341][ T29] [ 280.955476][ T29] ============================================= [ 280.955476][ T29] [ 280.964441][ T29] NMI backtrace for cpu 1 [ 280.968980][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 280.976998][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.987199][ T29] Call Trace: [ 280.990506][ T29] [ 280.993478][ T29] dump_stack_lvl+0x16c/0x230 [ 280.998204][ T29] ? show_regs_print_info+0x20/0x20 [ 281.003529][ T29] ? load_image+0x3b0/0x3b0 [ 281.008088][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 281.013152][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 281.019519][ T29] ? _printk+0xd0/0x110 [ 281.023716][ T29] ? load_image+0x3b0/0x3b0 [ 281.028250][ T29] ? load_image+0x3b0/0x3b0 [ 281.033034][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 281.039292][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 281.045285][ T29] watchdog+0xf41/0xf80 [ 281.049459][ T29] ? watchdog+0x1e1/0xf80 [ 281.053808][ T29] kthread+0x2fa/0x390 [ 281.057904][ T29] ? hungtask_pm_notify+0x90/0x90 [ 281.062946][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.067546][ T29] ret_from_fork+0x48/0x80 [ 281.072078][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.076801][ T29] ret_from_fork_asm+0x11/0x20 [ 281.081677][ T29] [ 281.086667][ T29] Sending NMI from CPU 1 to CPUs 0: [ 281.091942][ C0] NMI backtrace for cpu 0 [ 281.091953][ C0] CPU: 0 PID: 6718 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 281.091975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.091983][ C0] Workqueue: bat_events batadv_nc_worker [ 281.092002][ C0] RIP: 0010:__lock_acquire+0x120c/0x7c80 [ 281.092022][ C0] Code: b6 04 00 84 c0 0f 85 28 5e 00 00 83 3d 3c a4 82 15 00 0f 84 3e 08 00 00 31 db 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 00 00 <74> 12 48 89 df e8 4a ee 75 00 49 b8 00 00 00 00 00 fc ff df 48 83 [ 281.092034][ C0] RSP: 0018:ffffc90004eaf7c0 EFLAGS: 00000046 [ 281.092045][ C0] RAX: 1ffffffff20ea9ba RBX: ffffffff90754dd0 RCX: ffffffff81670ecd [ 281.092055][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90d945d8 [ 281.092064][ C0] RBP: ffffc90004eafa08 R08: dffffc0000000000 R09: 1ffffffff21b28bb [ 281.092074][ C0] R10: dffffc0000000000 R11: fffffbfff21b28bc R12: 00000000d4cae455 [ 281.092084][ C0] R13: ffff888062523c00 R14: 000000002aee8729 R15: ffff888062524750 [ 281.092095][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 281.092107][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.092117][ C0] CR2: 00007f5a25fb6ad8 CR3: 0000000079bf3000 CR4: 00000000003506f0 [ 281.092132][ C0] Call Trace: [ 281.092137][ C0] [ 281.092154][ C0] ? verify_lock_unused+0x140/0x140 [ 281.092172][ C0] ? verify_lock_unused+0x140/0x140 [ 281.092191][ C0] lock_acquire+0x197/0x410 [ 281.092205][ C0] ? batadv_nc_worker+0xd2/0x610 [ 281.092220][ C0] ? batadv_nc_worker+0xd2/0x610 [ 281.092233][ C0] ? read_lock_is_recursive+0x20/0x20 [ 281.092248][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 281.092265][ C0] ? batadv_nc_worker+0xd2/0x610 [ 281.092278][ C0] batadv_nc_worker+0xef/0x610 [ 281.092291][ C0] ? batadv_nc_worker+0xd2/0x610 [ 281.092305][ C0] ? process_scheduled_works+0x957/0x15b0 [ 281.092322][ C0] process_scheduled_works+0xa45/0x15b0 [ 281.092348][ C0] ? assign_work+0x400/0x400 [ 281.092365][ C0] ? assign_work+0x39e/0x400 [ 281.092381][ C0] worker_thread+0xa55/0xfc0 [ 281.092397][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 281.092413][ C0] ? _raw_spin_unlock+0x40/0x40 [ 281.092426][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 281.092448][ C0] kthread+0x2fa/0x390 [ 281.092460][ C0] ? pr_cont_work+0x560/0x560 [ 281.092476][ C0] ? kthread_blkcg+0xd0/0xd0 [ 281.092488][ C0] ret_from_fork+0x48/0x80 [ 281.092503][ C0] ? kthread_blkcg+0xd0/0xd0 [ 281.092515][ C0] ret_from_fork_asm+0x11/0x20 [ 281.092539][ C0] [ 281.305399][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 281.305416][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 281.305434][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.305444][ T29] Call Trace: [ 281.305452][ T29] [ 281.305459][ T29] dump_stack_lvl+0x16c/0x230 [ 281.305493][ T29] ? show_regs_print_info+0x20/0x20 [ 281.305518][ T29] ? load_image+0x3b0/0x3b0 [ 281.305551][ T29] panic+0x2c0/0x710 [ 281.305569][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 281.305598][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 281.305616][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 281.305639][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 281.305663][ T29] watchdog+0xf80/0xf80 [ 281.305685][ T29] ? watchdog+0x1e1/0xf80 [ 281.305711][ T29] kthread+0x2fa/0x390 [ 281.305728][ T29] ? hungtask_pm_notify+0x90/0x90 [ 281.305749][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.305764][ T29] ret_from_fork+0x48/0x80 [ 281.305783][ T29] ? kthread_blkcg+0xd0/0xd0 [ 281.305799][ T29] ret_from_fork_asm+0x11/0x20 [ 281.305833][ T29] [ 281.309990][ T29] Kernel Offset: disabled [ 281.467019][ T29] Rebooting in 86400 seconds..