last executing test programs: 21m49.268883307s ago: executing program 32 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 21m48.760702392s ago: executing program 33 (id=18): pread64(0xffffffffffffffff, 0x0, 0x0, 0x2b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 16m48.29865479s ago: executing program 34 (id=683): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) mount$9p_rdma(&(0x7f00000013c0), 0x0, 0x0, 0x800, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 14m4.439783326s ago: executing program 35 (id=932): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") ftruncate(0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigqueueinfo(0x0, 0x41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) 9m55.518555837s ago: executing program 36 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x1407, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40844) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) socket$netlink(0x10, 0x3, 0x12) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_ATTR(r5, &(0x7f0000005340)={0x78, 0x0, 0x0, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, 0x0, 0x0, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582", @ANYRESDEC=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m44.959924158s ago: executing program 7 (id=1320): mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x242580, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000f27c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000f47c0)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000440)=0x2000000, &(0x7f0000000480)=r5}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000000), 0x0}, 0x20) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000200)=0x7, 0x4) openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x15, 0x16}, 0x18) 9m44.067452504s ago: executing program 7 (id=1322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x3, 0x7a2d, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0) syz_io_uring_setup(0x2f9f, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x4, 0x1}, 0x0, &(0x7f0000000040)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) io_uring_enter(r4, 0x7f5d, 0x4000000, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = signalfd4(r2, 0x0, 0x0, 0x80800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, &(0x7f0000000480)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40845) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) fcntl$setownex(r0, 0xf, &(0x7f0000000840)={0x2}) 9m36.682893255s ago: executing program 7 (id=1332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e8013"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6", 0x19}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 9m28.629099992s ago: executing program 7 (id=1341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x800b, &(0x7f0000000140)=ANY=[], 0xf, 0xb7, &(0x7f0000000440)="$eJzs1y9OA0EUBvDHgoCgMIQEgV7DHTgDJwAEAgxBQZr0Cr1Ir9IjrK+oWNs0fc3sbtI/N2j7+4mZfN9k3Ih5s+X0cVJH5Dgi64efeW79/v1/XUVZ376Dk1TFTbdfR8TTXckRi5f+7CL63LSjj6a9PLya+X6bWR4OAABwFKp43s/rHIrVMAV24T5eP8uPf6cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+bAAAA//8wajXB") syz_usb_connect(0x5, 0x5f, &(0x7f0000000840)=ANY=[@ANYBLOB="12011001e9ae8540c4109f81ef9b0102030109024d00012008d00909042fa702056639000a24010100010201020c2402e451e8e663f23f080009240302030304050709210600ff01223e02090502020800050c050223090507104000050c09"], 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 9m24.536130303s ago: executing program 7 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = getuid() setresuid(0x0, r1, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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") r2 = creat(&(0x7f0000000040)='./file2\x00', 0x100) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) flock(0xffffffffffffffff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) fchdir(r7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0xfffffffffffffe64) sendto$inet6(r3, &(0x7f00000003c0)="b1", 0x1, 0x400c0d4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x104010, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e8a3d", @ANYRESHEX=r2, @ANYBLOB=',wfd', @ANYRESHEX=r3, @ANYBLOB=',access=any,cache=loose,msize=0x0000000000010000,nodevmap,loose,debug=0x0000000000000008,cache=loose,fsuuid=c1c899ba-e95R-a624-bd20-47P49fbf,mask=MAY_EXEC,\x00']) 9m16.581946007s ago: executing program 7 (id=1360): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x400, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36348c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1717f19a67a534064b7236a6660000000000"], 0x1, 0x190, &(0x7f0000000e40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYRES32=r3]) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 9m1.012359598s ago: executing program 37 (id=1360): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x400, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36348c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1717f19a67a534064b7236a6660000000000"], 0x1, 0x190, &(0x7f0000000e40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYRES32=r3]) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 7m22.520613364s ago: executing program 6 (id=1700): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close(0x3) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 7m22.42730653s ago: executing program 6 (id=1701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x3}, 0x1c) 7m20.836232801s ago: executing program 6 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_b, @broadcast, @from_mac=@broadcast, {0xa, 0x3}}, 0x46, 0x6, {0x0, 0x6, @default_ap_ssid}, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x9890]}]}, 0x50}}, 0x40) 7m20.608994027s ago: executing program 6 (id=1711): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) 7m20.31606845s ago: executing program 6 (id=1714): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="bc", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x61, 0x0, 0x0) 7m18.912215242s ago: executing program 6 (id=1721): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000023f3201"], 0x138) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 7m18.326688304s ago: executing program 38 (id=1721): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000023f3201"], 0x138) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 6m40.636329484s ago: executing program 9 (id=1903): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200000, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x5, 0xbac, &(0x7f00000017c0)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x4000000) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x40, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m40.008211481s ago: executing program 9 (id=1906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7ff, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) 6m39.543075442s ago: executing program 9 (id=1910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000400)="0f01c991bad7d20000c4c2c5ae65ce0fc7bb0f000000f30f7ebf00080000660f3880344e48b800880000000000000f23d00f21f835200000090f23f8660f3880744a0a66baf80cf8ae9baf8cef66bafc0c66b8000066ef0f01c3", 0x5a}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m38.996072211s ago: executing program 9 (id=1914): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="f0", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 6m38.539002593s ago: executing program 9 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x4e, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0xa, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6m37.894068104s ago: executing program 9 (id=1927): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, 0x0, 0x4f) 6m36.955298896s ago: executing program 39 (id=1927): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, 0x0, 0x4f) 5m29.447764397s ago: executing program 3 (id=2216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x40002, 0x0, 0x3b, 0x0, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/59, 0x3b, 0x2, 0x31}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5m29.113867255s ago: executing program 3 (id=2217): add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 5m24.477163553s ago: executing program 3 (id=2228): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) write$UHID_CREATE2(r1, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x118) 5m23.372083296s ago: executing program 2 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7ed, &(0x7f0000000140)="$eJzs3U9oHPf1APA3smQ7ChiT3w83GMcZ2yk44CgrKVYqAk02q5E8ibQrdlfFppTUxHIQlpOQNLTxJTGFpC2F0lOPaa659dZSaKGHtqdCc+ilt0BOJYX+IyUUVGZ2V5bkXcl/YjlpPp/FO7Mzb+b7ZnY8b2a1MxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCS1mUplPIn5vL50Nh2sNtNsLGwzvje/X2/qbPLUpnYjkuJf7N8fH/+jM+z/r40+VDwdjyOdV0dif9HZH1fuPXTwif8bHupNv01Ct+rYDcYlEW8WSV06v7q6/ModSGQX/eCXNz3Jv9eK57msnrciX6jOZWneaqTTU1OVR8/MttLZfD5rnWu1s4W01syq7UYzPVl7OB2fnp5Ms7FzjaX63Ex1PusNfPyRiUplKn1mbDGrNluN+qPPRKt2Jp+fz+tzZcxE5dtRxDxebIjP5u20nVUX0vTiyury5E6pFkHj/Ubs6Ww/Rx46+OFrH/x9ZbnYIAfNJOlumBPj4xMT41Onp08/XqkMT1QmNg+obBHrETEUUUTckY2Wz5FPdwcOt2GoW/9jPvKox1KcjbTPYyRqMRPNaMRC8fpPI9dFdPXq/5cf/esftmt3Y/3vVfn7r40+HGX9P9p5dXRQ/e+b624+Xo3X40pcivOxGquxHK/c9Yx2eAzd7hySTa/mIot65NGKRuSxENVySNodksZ0TMVUVOK5OBOz0Yo0ZiOP+ciiFeeiFe3Iyi2qFs3IohrtaEQz0jgZtXg40hiP6ZiOyUgji7E4F41YinrMxUxUy7lcjJVyvU9uyfLQPfGLF/744TtF/3rQ+HaLVRzMFUF/2ybounK/bf1fWyuOF7ZGqP9fAHu3G3kH9uJwa9Z69R8AAAD4n5WUn74X5/8j8UDZN5vPZ1+/22kBAAAAn6LyL/9His5I0fdAJMX5f6VP5Pu7nhsAAADw6UjKa+ySiBiNBzt9F2Ml3ozl6PchQEQc3O0UAQAAgNtU/v3/aNEZjXijHNC7XcqA838AAADg8+Z7g+6x/0HvHrutxX3Jr0YiYiS5unj2oeRytYirXt7Tma7b+dr6HNuzh5MD3ZmUnanhK/cmETFcy44kvbtf/mdfp/tR+Xx4eH3yQff6T5rNbROI7RMoX8UP41gn5tiFsnNvd5LhpNPK6Gw+n43VGvNPlLdELP61X3tx5TsRRevfry8cSOLiyury2PMvrV4oc7laTH71cvcGitfdR3GbXNa6ayAe6L/EI+WFGN12RzvtVjYu/1Bn8qHt20w2tvlWHO/EHB/tdEd7Yzpt7i/aHB97Yjyq1QND7exs+7W1DUvfzWJ8fclHbmnJ34oTm966Eyf7ZDGxKYsXr89iYuP6v7F1sSmL01890Wv+xNYs3jn2xtl//baRZJM7ZTF5E1ms7YnYmgXA3XKxvOvPtSp0T1mFPlnrKOp/p+4WxaraCei6gX3tP6+1sn6U0Zt+Q60bjq3VfWh9x3hj1X0tOnXlZCfmZOd4Yvhwn7pytc8e/eWVl3/X3aM/9t5PfvqNo7//WdnuLVW39+LhTky3E/f9ZkCNLZZ5/5aq+m4xxbsD223NTyRxNWLPty6/HIdeff3KIyuXz7+w/MLyixMTk1OVxyqV0xN7u7Ej5RHDNpkC8MW182/sDIzo1ZnksS1n1XFhc929b/0rBWPxfLwUq3EhTpVXG0TEg/3bHd3wNYRTO5y1jm74hZdTMfisbnPsxPWxSQyIndywxr7047Lz8R15OwBgVxzfoQ4ne9dDBx0hJKd2OO/eXMu3nB3H4Frez1fu3KoAgC+MrPlRMtp+O2k288Xnxqenx6vtM1nabNSeTZv5zFyW5vV21qydqdbnsnSx2Wg3ar0PjmeyVtpaWlxsNNvpbKOZxlArP1v+8nva/en3VrZQrbfzWmtxPqu2srTWqLertXY6k7dq6eLS0/N5a3/WLCduLWa1fDavVdt5o562GkvNWjaWpq0s6waeyZppPpPV2/lsXvTW08VmvlBtXo2I+aWFLJ3JWrVmvthudGbYayuvzzaaC+Vsx65f/L/s9voGgM+CV1+/cun86uryK7fW8+dtY5JOz91eRgBgs2vl+m5nAgAAAAAAAAAAAAAADLL+/f+DvZ5i6E6X/Q3FDV0juCd2itkXN3PR4b7buVTxDvTE3s9EGtf3JBFvrhZv5Gckn7vX880nn7w0KObpN+4/c2PziRu9UjbePhCx9+c/6gx5anDwd7v///qM6t32+SaW9P2IuIX1s5b0GfXJWi+NDfbu9n4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPr5bwAAAP//kn1TfQ==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 5m21.817445644s ago: executing program 2 (id=2238): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x14, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x84, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x8000000000000006, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffffd, 0x0, 0x68ff, 0x9, 0x0, 0x3, 0x0, 0x0, 0x2], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m21.315425675s ago: executing program 3 (id=2240): socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffd, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000001600)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x0, 0x8) 5m21.314326406s ago: executing program 2 (id=2241): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1000000, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000200)='(', 0x1, 0xa}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) 5m20.988263714s ago: executing program 2 (id=2243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m18.500588823s ago: executing program 2 (id=2247): mq_open(0x0, 0x40, 0x142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m18.311671985s ago: executing program 3 (id=2248): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004841) io_uring_setup(0x7, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210413, &(0x7f0000000040)=ANY=[], 0x2, 0x227, &(0x7f0000000400)="$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") mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5m18.022236722s ago: executing program 2 (id=2249): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m17.148019466s ago: executing program 3 (id=2251): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m16.374703719s ago: executing program 40 (id=2251): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m2.311344379s ago: executing program 41 (id=2249): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.605386024s ago: executing program 0 (id=2804): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/154, 0x9a) syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x80049367, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x1e, 0x1, 0xfffffbff, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0]}, 0x40) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0xfffffffffffffffe) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) syz_emit_ethernet(0xfe53, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000001100)={0x2005}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 15.201504829s ago: executing program 0 (id=2808): r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x20000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x802) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, 0x0, 0x0) write(r7, &(0x7f0000000140), 0x0) 14.520251947s ago: executing program 8 (id=2809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r5, 0xffffffffffffffff, 0x0) 13.630239503s ago: executing program 0 (id=2810): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xcc, 0x30, 0x1, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x74, 0x1a, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18d1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1d800000, 0x7, 0x1ff, 0x58}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x18c1, 0xffffffffffffffff, 0x10, 0xd156}}]}, {0x9, 0x6, "aa2ce2c832"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000340)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100", 0x16}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b", 0x10}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) lseek(r3, 0x0, 0x3) syz_fuse_handle_req(r1, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x8, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.530007689s ago: executing program 8 (id=2811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 13.38403105s ago: executing program 5 (id=2813): syz_open_dev$video4linux(0x0, 0x83, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1, 0x2845}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1000001, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x24, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) 12.724279228s ago: executing program 1 (id=2814): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) fcntl$setlease(r3, 0x400, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r5, 0x8917, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) 12.63015801s ago: executing program 5 (id=2815): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @null]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e20, 0x0, @mcast2}], 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRESHEX=r1], 0xff, 0x6de, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 12.617627039s ago: executing program 8 (id=2816): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a"]) syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) 12.460129362s ago: executing program 0 (id=2817): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB, @ANYBLOB], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000480), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") prlimit64(r0, 0xe, &(0x7f0000000080)={0x3, 0x8}, &(0x7f0000000280)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r7, r7, &(0x7f0000000000)=0x7, 0x4) 11.372105628s ago: executing program 1 (id=2818): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) writev(r6, &(0x7f00000003c0)=[{0x0}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") 11.240092535s ago: executing program 8 (id=2819): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbbd, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@local, @remote}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@private=0xa010101, @loopback, @empty}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x80800, 0x20) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x8001, 0xfffffffa, 0x32314247, 0x5, 0xc, 0xf, 0x2, 0x5, 0x0, 0x8, 0x2, 0x5}}) fcntl$getflags(0xffffffffffffffff, 0xb) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x19, 0x6, 0x7}, 0x10) getrlimit(0xd, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 8.718954664s ago: executing program 0 (id=2820): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x45af) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 8.127809238s ago: executing program 5 (id=2821): syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000180)={[{@space_cache_v1}]}, 0x1, 0x55ca, &(0x7f000000abc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x800000, 0x0) creat(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x40) readv(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f00000000c0)=0x7, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$video(0x0, 0x8, 0x400) 8.023428876s ago: executing program 4 (id=2822): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000140)=0x7) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6.98826589s ago: executing program 1 (id=2823): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x0, 0x5, 0x7f, {0x0, 0x7}, 0x1f, 0x3}) read$FUSE(r6, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, r8, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) 6.97412418s ago: executing program 4 (id=2824): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x6}}, 0x20) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b1172114", 0x3e}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa", 0x58}, {&(0x7f0000000080)}, {&(0x7f0000001500)="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", 0xd20}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b", 0x2e}, {&(0x7f0000000400)}], 0x6, 0x0, 0x0, 0x8800}], 0x1, 0x2000c015) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2, 0x4, 0x5000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0426063d032bbb006965499a03b9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket$inet6(0x10, 0x3, 0x0) 6.640935606s ago: executing program 5 (id=2825): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r6}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.772089681s ago: executing program 1 (id=2826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 5.756059819s ago: executing program 4 (id=2827): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000440), 0x1, 0x55ae, &(0x7f0000005600)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x800000, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x40) readv(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="00020201000000"], 0x18) writev(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket(0x14, 0x2, 0x4) timer_create(0x2, &(0x7f0000000040)={0x0, 0x3d, 0x1}, &(0x7f0000000180)) 5.7532553s ago: executing program 8 (id=2828): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$media(&(0x7f00000004c0), 0x3a6380000000, 0x8800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) getpeername$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r5, 0x2, [0x1, 0x8]}, {r4, 0x0, 0x0, [0xc1b, 0x4]}, 0x2000000, [0x7e, 0x8]}) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) 4.333884545s ago: executing program 1 (id=2829): openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r3, r0, 0x0, 0x20000023096) close(r3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0x180, @tick=0x3, 0x6, {0x1, 0x5}, 0x3, 0x0, 0x1e}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)=0x7fff) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x80002, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200}) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.300080557s ago: executing program 4 (id=2830): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) eventfd(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4040140) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x10000ab, @remote, 0x1}, 0x1c) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x8080) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="cfb14e407d35ffffffffffff86dd697a262d00383afe0000004ced035aaaff07000000000000000000000000000102d434e086176189dd8f91520e00907800008001620000000009ff0000000100000000000000000000000001000000000000000000000000000000013b000a186500000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsm_list_modules(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 3.283042742s ago: executing program 5 (id=2831): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='cifs\x00', 0x0, &(0x7f0000000580)='cache=no\xaee*\xf8(\x0f\x853 -\x92\x1d\xbfn\xe1\b\xd4[\x93\xd7\x11\xdf}ZP\xa4\x05\x00\x93i\xe1:-P\xb5\x9a\xd8\x00\xd5Go\x02\xbd\x80\xfc\xb4\x0ef\xbb\xb1\"\xc8\x8cOUs\xf2\x01\xbcKs\r\xbd\x04\x00\x1aP\xdd1\xbe\xcb\x86\xa2\xe1\x00\xc9t\xcb\xf50J/\xf6\xee\x03I\x17b\xf9\xb6\x18\xa2_O\xadDHSdm\x81EH\x17\xe6\xae\"\xb8\x1b\xb6\xc3\xad\xfb\x18@\xff\xc4\xb9\f\x06iP\xa7_\xd9\xb6\x1c\x1e\xdc\xd3@3`\x94\x9a\x81\xe6\x1e\xe2\x92\xf5!\xae\xa3\xdb\x8bn$\x86\xba\xcd\xed\xae\x16\xe0*\x8c)\xed-\x87\xf4\x0e-_\xb3\xa7S\x18}/c\x99\x1c\xb2kIFe\x87\x14\x86\\\x97#\x85R\x9f\xa8iBV\f\x80\n\x00\x00\x00\x00\x00\x00Z\x87\xfa{7\x17\xbb\'\x1c\x1e\xfeS\xbc\xab\\\x9f\xf20\x9eW2\x96\x00C\xd31\x90\xde~H0\xe2\xfap\xbf\x12\xa9\xb9P\xeb\xf5\xbf\x93\xc1>7\xac*}Eeh\xa3\xde\xe8\xb3\x06\xe5\xa7\xe0\xf6\x9d\xf2\x85`\xac\xcb\xff+\x185C\xebB\x96F0|V\xc6TK\x11\xf5)G\xf3U(\xeco\x9b\x04\"\xad\xfcA[s\xccm\xc50\xa4\xd05M|7+\xb3\xb5yMQ\xfb,\x1e\xba\xd0&\xf0c\x9eL\x7f\xe6e\xb7)\x11\x15S\xeeK\x8c\xe3\x90\xb2\xcf\xb0*\xc2\xa7\xe3\xc0\x13o\xa9\x8f\x84\xfbR\x11\xed\x16\x91\xbd]\x9bhj\x91\v\xd2\x01RF|\xed6\x9f6\xcc\x1d/^h\xdd[\xaf\"M\xf7\xa1\xce\x02\x06)\xd1P)\xf3\x83j\\\xbdm\xdbkB\xccq\xf2\x84/\x99\xc6\xc1\'HJ\x86\xe1\x1c\xfajl\xd56\xdd\xb2k\xc0\xcc\x01\xc2\xf1\x8c\xd8u\xe9\xc5\xeb\xf1*9\x83\xa5 x\xf2') socket$inet_sctp(0x2, 0x5, 0x84) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x7, 0x0, r5}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffc, 0x0, 0xa, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0}) 2.716158616s ago: executing program 0 (id=2832): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000040)=0x80, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4880) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @mcast1, 0x8}, 0x1c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x401, 0xbf}, 'syz0\x00', 0x46}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.708748901s ago: executing program 4 (id=2833): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000300000001"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250300000008000800", @ANYRES32=r5, @ANYBLOB="9da5d035c0e3b536159aafbc689625d9457121bf4b0425e9ae02e6d583027776e0ef5ec70e0f0634ba3abe535232b94e887321c057158dc39b992adb5d2954e27219"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8931, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) 1.706183s ago: executing program 5 (id=2834): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(0x0, 0x0) fsmount(r2, 0x0, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) map_shadow_stack(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x1cb) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4108, 0x100c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/90, &(0x7f0000000000)=0x5a) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) 1.639317418s ago: executing program 1 (id=2835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) read(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000500)={0x7, 0x20009dc6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x200013, &(0x7f00000023c0)=ANY=[], 0x13, 0x70c, &(0x7f0000000e80)="$eJzs3UtsHGcdAPD/rNfrtYHUadOkoEi1GqkgLBI7xgVzISAEPlSoKgfOq8RpLG+cyt4iJ0LE4XHn0APiVJByqzigco8EZ6pKqBInHzhUQsqBnnxAMprZmd21vd5H/Cz9/aKZ+Wa+5/zntetVNAF8bi1OR/lJJLE4/fpGur71z//sZJrZ9YioREQpotxcRLKaV/3i5biRLr+cbsy3JQf18+7ywpsff7r1SXOtnE9Z+aRXvS4q+zdt5lNMRcRIvtynelCLH+ztfld7Nw9qb2DtPUwDdiVfRvz+UK3Coe3ss9nKe/8f2bxX9WGuW+CMSprPzX0mIybyR+dYFE/F5geBz7TN0x4AAAAADGt8+CrPbcd2bMS54xgOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/L/K3/+f5FOpSE9FUrz/v5Jvizx9BvV/EeJHY83lk+MfDAAAAAAAAAAcu5e3Yzs24lxzrRw7Sfab/ysdv/F/Id6J9ViKtbgaG1GLRjRiLWYjYrKjocpGrdFYm81qRlzoUfN6fNhZsxIRjcba9YPHeOPodxsAAAAAAAAAzrJqn/yV0f3bfhmLxe//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNiQRI81FNl0o0pNRKkdEtSi3GfFhRFROd7RDSbptfHLy4wAAAIBDqe5eTaoD1HnuYWzHRpwr1neS7Dv/xez7cjXeidVoxHI0oh5LcSv/Dp1+6y9tPZ6rbz2eu5tOezoefuhZi9H820P3nl/KSozH7VjOtlyNm5HETqaUt/LS1uO5dHm3+7gePU3b/m6ux2hGOtK30tmlD7L0b3fvXHn4/Rxe6cCcySx3tBWRmXxsaY3zRQS6R+J7T/v0Wu7Z02yUWn/5udC7p+4xf9Sly9F2cmJPqWc4oY7J3khcj1LrCF3sHYmIr/7l/Z/eqa+u3Lm9Pn12dqmrh31LtCLxzeI2047EpYEjMX7UAz9CowOWm8n2/cXW+mL8MH4S0/F07I1Yi+X4WdSiEUtTRX4tP5/T+WTvSH000bn2Rr+RpNfkVOv+1W1MU7FrTDEVP8hStXglO6bnYjmSuBcRS/Fa9u96zLbuBu0j/OIAV31pgDtthytfyxatMEWPc+NPgzV5VNK4nu+Ia+c9dzLL69zSjtLzXaNUPOv23xur/R8q5a/kibSFX/V8Ppy0vZGY7YjECwedL82Q/mEnna/XV1fW7tTeHrC/V/Nleh395kw9JSrxKJ6Par5z57N5kl1TM9nRf6F1nHfHq5L/4tJU2pv3o9+16jWv1B/Hvbi160r9VszHfCxkLV3MSo/ue2KleZdaLXXmzWV56SetcuuHnc7PW/einn0e+uPJhhOAYU18faIy/u/xv4+/N/7r8Tvjr1e/P/btscuVGP3b6HfKMyOvli4nf4734hft7/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCzW7//YKVWry+tdU+UumclvWvV6jvFi8R6lNmVSPJX5QxQOFm//2Cnb4O9E2P58Iao9d9h+3oYAxUuXqPWs/BYPFipTR1ql3snks29x6va/1gUb3kaoItkX8DTys885qLn9pbRYwnL4RJTR9dgccJ2ZA1+9v7rS83KO0mX4zUSEd1q9blxNN9xdZbf4wf0ca1x9+1r6/cffGP5bu2tpbeWVkfn5xdmFuZfm7t2e7m+NNOcd1Q4kZffAieh8+NESyUiXu5f18MfAAAAAAAAAAAATsdJ/F+I095HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LNtcTrKTyKJ2ZmrM+n61uO5ejoV6XbJckSUIiL5eUTy14gb0ZxisqO55KB+3l1eePPjT7c+abdVjpFm+VLE5oH1BrOZTzEVkTabLY+qvZv926u0k2NdspNWZNKAXSkCB6ftfwEAAP//5xztpw==") r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.59197792s ago: executing program 8 (id=2836): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1d0, 0x1d8, 0x1d8, 0x1d0, 0x1d8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x6128}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x1, 0x3, 0x0, 0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x5, 0x10000, 0x6, 'snmp_trap\x00', 'syz1\x00', {0xfffffffffffffffe}}}}, {{@ip={@local, @loopback, 0x0, 0xffffffff, 'macvlan1\x00', 'tunl0\x00', {}, {}, 0x11, 0x3}, 0x3202, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0xd, 0xff3, &(0x7f00000028c0)=""/4083, 0x0, 0x31}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rename(0x0, 0xffffffffffffffff) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r3 = syz_open_dev$vbi(&(0x7f0000000500), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000540)={0x1d2, [0x4, 0x7, 0x3, 0x58d6, 0xff, 0x4, 0xe98, 0xffff, 0x4371, 0x9, 0x0, 0x1, 0x4e, 0x8d26, 0xffff, 0x44, 0x3, 0x9, 0x7, 0x3, 0x10, 0x6, 0x101, 0xff, 0x7, 0xa, 0x3, 0x4, 0x9, 0x1, 0x2, 0xff, 0x6, 0x1000, 0xf, 0x1, 0x3, 0x8, 0x13d8, 0x4, 0xc, 0x7, 0x8, 0x1, 0x7f, 0x5, 0x3, 0x6], 0x5}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4008000) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 0s ago: executing program 4 (id=2837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x6c203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000001fffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 54548][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.709163][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.729444][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.753556][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.762338][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.789524][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.803620][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.820561][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.851316][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.870899][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.884672][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.902454][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.931701][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.958680][T15365] loop0: detected capacity change from 0 to 4096 [ 988.968342][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 988.986437][T15365] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 988.995714][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 989.022857][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 989.053522][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 989.085662][ T797] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 989.102189][ T797] input input9: Timeout waiting for response from device. [ 989.115405][T15365] ntfs3(loop0): ino=1a, mi_enum_attr [ 989.120862][T15365] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 989.168119][ T797] usb 10-1: USB disconnect, device number 6 [ 989.185178][T15365] ntfs3(loop0): ino=1a, mi_enum_attr [ 989.190571][T15365] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 989.209802][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1814'. [ 989.573216][T15365] ntfs3(loop0): ino=1b, mi_enum_attr [ 989.613763][T15365] ntfs3(loop0): ino=1b, mi_enum_attr [ 989.621715][T15365] overlayfs: missing 'lowerdir' [ 990.100420][ T5824] Bluetooth: hci1: command 0x040f tx timeout [ 990.182013][T15383] loop3: detected capacity change from 0 to 4096 [ 990.249625][T15383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.435660][T14962] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.753396][T13640] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 990.944143][T13640] usb 5-1: Using ep0 maxpacket: 8 [ 990.956883][T13640] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.992990][T13640] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 991.031923][T13640] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 991.053482][T13640] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.065799][T15409] loop0: detected capacity change from 0 to 1024 [ 991.079877][T13640] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 991.097058][T13640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.108906][T15409] EXT4-fs: Ignoring removed nobh option [ 991.128167][T13784] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 991.143696][T15409] EXT4-fs: Ignoring removed bh option [ 991.184378][T15409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.332042][T13784] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.350544][T13640] usb 5-1: GET_CAPABILITIES returned 0 [ 991.371395][T13640] usbtmc 5-1:16.0: can't read capabilities [ 991.397623][T13784] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.450814][T13784] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.475377][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.485178][T13784] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.507993][T13784] usb 10-1: Product: syz [ 991.537036][T13784] usb 10-1: Manufacturer: syz [ 991.541850][T13784] usb 10-1: SerialNumber: syz [ 991.565016][T15419] wg1 speed is unknown, defaulting to 1000 [ 991.571848][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 991.626724][T14853] usb 5-1: USB disconnect, device number 8 [ 991.873172][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 992.036130][ T9] usb 4-1: config 0 has no interfaces? [ 992.056376][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 992.074143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.095925][ T9] usb 4-1: Product: syz [ 992.110007][ T9] usb 4-1: Manufacturer: syz [ 992.117548][ T9] usb 4-1: SerialNumber: syz [ 992.137772][ T9] usb 4-1: config 0 descriptor?? [ 992.417161][ T797] usb 4-1: USB disconnect, device number 2 [ 992.590453][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 993.168401][T13784] cdc_ncm 10-1:1.0: bind() failure [ 993.283814][T13784] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 993.349786][T13784] cdc_ncm 10-1:1.1: bind() failure [ 993.420779][T13784] usb 10-1: USB disconnect, device number 7 [ 993.519674][T15455] netlink: 'syz.5.1833': attribute type 2 has an invalid length. [ 993.570070][T15455] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1833'. [ 993.594679][T15455] netlink: 'syz.5.1833': attribute type 2 has an invalid length. [ 993.609991][T15455] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1833'. [ 993.733309][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 993.773032][ T797] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 993.939139][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.960117][ T797] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.968321][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.992758][ T797] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.997274][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.036418][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1838'. [ 994.053080][ T5900] usb 4-1: Product: syz [ 994.071263][ T797] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 994.074315][ T5900] usb 4-1: Manufacturer: syz [ 994.121049][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.125832][ T5900] usb 4-1: SerialNumber: syz [ 994.368625][ T797] usb 5-1: GET_CAPABILITIES returned 0 [ 994.378374][ T797] usbtmc 5-1:16.0: can't read capabilities [ 994.577627][ T9] usb 5-1: USB disconnect, device number 9 [ 994.703733][ T797] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 994.750486][T15462] loop9: detected capacity change from 0 to 32768 [ 994.790563][T15462] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1836 (15462) [ 994.849557][T15462] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 994.876138][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.877770][T15485] mac80211_hwsim hwsim15 4: renamed from wlan1 (while UP) [ 994.895053][T15462] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 994.918499][ T797] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 994.949593][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.981055][ T797] usb 1-1: config 0 descriptor?? [ 995.050482][T15462] BTRFS info (device loop9): enabling ssd optimizations [ 995.076562][T15462] BTRFS info (device loop9): turning on async discard [ 995.100086][T15462] BTRFS info (device loop9): enabling free space tree [ 995.117653][T15462] BTRFS info (device loop9): use zstd compression, level 3 [ 995.225960][ T5900] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 995.232630][ T5900] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 995.242750][ T5900] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 995.273165][ T30] audit: type=1800 audit(2000000391.828:192): pid=15462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1836" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 995.440128][ T5900] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 995.449234][ T797] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 995.546062][T13564] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 995.566213][ T797] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input10 [ 995.725774][ T5900] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 995.847592][ T5900] usb 4-1: USB disconnect, device number 3 [ 995.879403][ T5900] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 996.217590][ T797] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 997.148913][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1854'. [ 997.846560][T14853] usb 1-1: USB disconnect, device number 17 [ 997.925760][T15544] loop3: detected capacity change from 0 to 4096 [ 998.230967][T15544] ntfs3(loop3): failed to convert "0080" to koi8-r [ 998.294142][T15544] ntfs3(loop3): failed to convert name for inode 1e. [ 998.365811][T15544] ntfs3(loop3): ino=1f, mi_enum_attr [ 998.400809][T15544] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 998.737900][T15568] loop0: detected capacity change from 0 to 4096 [ 999.021221][T15568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.221191][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.309029][T15574] loop9: detected capacity change from 0 to 512 [ 999.447565][T15574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.487632][T15574] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.811487][T13564] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.078452][T13784] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1000.264703][T13784] usb 4-1: Using ep0 maxpacket: 8 [ 1000.274280][T13784] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1000.289665][T13784] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.332308][T13784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1000.468041][T13784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1000.483680][T13784] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.516257][T13784] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1000.528277][T13784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.788254][T13784] usb 4-1: usb_control_msg returned -32 [ 1000.809575][T13784] usbtmc 4-1:16.0: can't read capabilities [ 1000.843306][ T797] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1001.013207][ T797] usb 10-1: Using ep0 maxpacket: 16 [ 1001.030216][ T797] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1001.062991][ T797] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1001.094437][ T797] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1001.126497][ T797] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1001.135979][ T797] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.172424][ T797] usb 10-1: Product: syz [ 1001.181660][T15638] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1001.188174][ T797] usb 10-1: Manufacturer: syz [ 1001.213265][ T797] usb 10-1: SerialNumber: syz [ 1001.220007][ T5913] usb 4-1: USB disconnect, device number 4 [ 1001.741056][ T797] usb 10-1: USB disconnect, device number 8 [ 1001.824768][T12022] udevd[12022]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.150462][T15667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1889'. [ 1003.054461][T15663] loop3: detected capacity change from 0 to 32768 [ 1003.075862][T15665] loop4: detected capacity change from 0 to 32768 [ 1003.132153][T15663] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1003.197631][T15665] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1003.214786][ T5900] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1003.377708][ T5900] usb 10-1: Using ep0 maxpacket: 32 [ 1003.394791][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.396426][T15663] XFS (loop3): Ending clean mount [ 1003.421557][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.436866][ T5900] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1003.465487][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.486708][T15663] XFS (loop3): Quotacheck needed: Please wait. [ 1003.510528][ T5900] usb 10-1: config 0 descriptor?? [ 1003.659553][T15663] XFS (loop3): Quotacheck: Done. [ 1003.665216][T15665] XFS (loop4): Ending clean mount [ 1003.767890][T13493] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1004.030733][ T5900] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1004.297097][ T5900] usb 10-1: USB disconnect, device number 9 [ 1004.314455][T14962] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1005.053897][T15739] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1005.108625][ T5844] Bluetooth: Unexpected continuation frame (len 10) [ 1005.209327][T15741] loop9: detected capacity change from 0 to 4096 [ 1005.303457][T15741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1005.353471][T10748] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1005.382405][T15741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.504323][T15741] EXT4-fs (loop9): shut down requested (2) [ 1005.523453][T10748] usb 4-1: Using ep0 maxpacket: 32 [ 1005.535467][T10748] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1005.550398][T10748] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1005.580725][T10748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1005.607754][T13564] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.611828][T10748] usb 4-1: config 1 has no interface number 0 [ 1005.624168][T10748] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.627281][T15753] loop4: detected capacity change from 0 to 4096 [ 1005.635874][T10748] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1005.656147][T10748] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1005.682155][T10748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.715927][T10748] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1005.741732][T15753] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1005.928365][T10748] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1005.941351][ T30] audit: type=1800 audit(2000000402.488:193): pid=15753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1905" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 1006.446778][T15776] kvm: MWAIT instruction emulated as NOP! [ 1006.484710][T10748] usb 4-1: USB disconnect, device number 5 [ 1006.515990][T10748] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1006.746814][T15791] loop9: detected capacity change from 0 to 128 [ 1007.151729][T13564] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 1007.218834][T13564] FAT-fs (loop9): Filesystem has been set read-only [ 1007.580731][T15817] netlink: 'syz.5.1923': attribute type 4 has an invalid length. [ 1007.645716][T15819] loop3: detected capacity change from 0 to 2048 [ 1007.734673][T15819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.931674][T15826] loop0: detected capacity change from 0 to 2048 [ 1008.241395][T15826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.427239][T15826] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.647526][ T7200] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.372705][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.567080][ T7200] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.125031][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1010.138396][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1010.260575][ T7200] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.300999][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1010.314853][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1010.322827][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.697340][T15861] wg1 speed is unknown, defaulting to 1000 [ 1010.847282][ T7200] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.954912][T15851] loop4: detected capacity change from 0 to 32768 [ 1011.007238][T15851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1933 (15851) [ 1011.071767][T15851] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1011.101577][T15851] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 1011.277286][T15851] BTRFS info (device loop4): turning off barriers [ 1011.284106][T15851] BTRFS info (device loop4): enabling free space tree [ 1011.290934][T15851] BTRFS info (device loop4): use zstd compression, level 3 [ 1011.674693][T13493] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1012.052697][ T7200] bridge_slave_1: left allmulticast mode [ 1012.296157][ T7200] bridge_slave_1: left promiscuous mode [ 1012.302968][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.340323][ T7200] bridge_slave_0: left allmulticast mode [ 1012.353753][ T7200] bridge_slave_0: left promiscuous mode [ 1012.371949][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.414087][ T5824] Bluetooth: hci4: command tx timeout [ 1012.733296][ T797] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1012.955183][ T797] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.984582][ T797] usb 4-1: config 0 has no interface number 0 [ 1013.048764][ T797] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1013.070125][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.091011][ T797] usb 4-1: Product: syz [ 1013.100719][ T797] usb 4-1: Manufacturer: syz [ 1013.110731][ T797] usb 4-1: SerialNumber: syz [ 1013.162390][ T797] usb 4-1: config 0 descriptor?? [ 1013.472795][ T797] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1013.519821][ T797] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1013.598155][ T797] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1013.627496][ T797] usb 4-1: media controller created [ 1013.719861][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.857018][ T797] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1013.992586][ T797] usb 4-1: USB disconnect, device number 6 [ 1014.430713][ T7200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.450350][ T7200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.463388][ T7200] bond0 (unregistering): Released all slaves [ 1014.483289][ T5824] Bluetooth: hci4: command tx timeout [ 1014.537488][T15861] chnl_net:caif_netlink_parms(): no params data found [ 1015.059955][T15966] loop0: detected capacity change from 0 to 512 [ 1015.154959][T15966] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1952: inode has both inline data and extents flags [ 1015.214760][T15972] loop4: detected capacity change from 0 to 512 [ 1015.226832][T15972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1015.247257][T15966] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1952: couldn't read orphan inode 15 (err -117) [ 1015.273682][T15966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.331102][T15972] EXT4-fs (loop4): 1 truncate cleaned up [ 1015.368248][T15972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.414738][T15861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.456506][T15861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.464688][T15861] bridge_slave_0: entered allmulticast mode [ 1015.475370][T15861] bridge_slave_0: entered promiscuous mode [ 1015.486337][T15861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.487162][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.496027][T15861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.512204][T15861] bridge_slave_1: entered allmulticast mode [ 1015.561512][ T30] audit: type=1800 audit(2000000412.088:194): pid=15972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1954" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1015.584240][T15861] bridge_slave_1: entered promiscuous mode [ 1015.682863][ T7200] hsr_slave_0: left promiscuous mode [ 1015.704367][ T7200] hsr_slave_1: left promiscuous mode [ 1015.731479][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.749455][ T30] audit: type=1804 audit(2000000412.308:195): pid=15978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1954" name="/newroot/84/bus/file1" dev="loop4" ino=15 res=1 errno=0 [ 1015.762976][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.835993][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.850728][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.936519][ T7200] veth1_macvtap: left promiscuous mode [ 1015.942516][T13493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.962297][ T7200] veth0_macvtap: left promiscuous mode [ 1015.969182][ T7200] veth1_vlan: left promiscuous mode [ 1015.974986][ T7200] veth0_vlan: left promiscuous mode [ 1016.240746][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 1016.564540][ T5824] Bluetooth: hci4: command tx timeout [ 1017.462599][ T7200] team0 (unregistering): Port device team_slave_1 removed [ 1017.527314][ T7200] team0 (unregistering): Port device team_slave_0 removed [ 1017.695415][ T5900] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1017.870523][ T5900] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1017.880564][ T5900] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1017.891315][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1017.903397][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1017.914720][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1017.927984][ T5900] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1017.944290][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1017.953770][ T5900] usb 4-1: Product: syz [ 1017.958069][ T5900] usb 4-1: Manufacturer: syz [ 1017.984333][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 1017.989614][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 1017.998879][ T5900] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1018.007191][ T5900] cdc_wdm 4-1:1.0: Unknown control protocol [ 1018.260436][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1018.528825][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1018.533954][ T797] usb 4-1: USB disconnect, device number 7 [ 1018.535601][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1018.547504][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1018.601096][T15861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.643856][ T5824] Bluetooth: hci4: command tx timeout [ 1018.658900][T15861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.813631][ T5900] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1018.942688][T15861] team0: Port device team_slave_0 added [ 1018.987839][T15861] team0: Port device team_slave_1 added [ 1019.054638][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.074832][ T5900] usb 5-1: config 0 has no interfaces? [ 1019.097793][ T5900] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1019.124381][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.143069][ T5900] usb 5-1: Product: syz [ 1019.147312][ T5900] usb 5-1: Manufacturer: syz [ 1019.162434][ T5900] usb 5-1: SerialNumber: syz [ 1019.198945][T15861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.235563][T15861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.261758][ T5900] usb 5-1: config 0 descriptor?? [ 1019.349521][T15861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.418359][T15861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.439923][T15861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.516801][T15861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.710022][T16048] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1019.815609][T15861] hsr_slave_0: entered promiscuous mode [ 1019.833684][T15861] hsr_slave_1: entered promiscuous mode [ 1019.875498][T15861] debugfs: 'hsr0' already exists in 'hsr' [ 1019.881327][T15861] Cannot create hsr debugfs directory [ 1020.106483][T14853] usb 5-1: USB disconnect, device number 10 [ 1020.301599][ T7200] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.403392][ T797] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1020.505697][ T7200] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.585474][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 1020.604293][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.625006][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.635429][ T797] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1020.660656][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.694099][ T797] usb 1-1: config 0 descriptor?? [ 1020.735885][ T797] hub 1-1:0.0: USB hub found [ 1020.753527][ T9] wg1 speed is unknown, defaulting to 1000 [ 1020.759488][ T9] syz0: Port: 1 Link DOWN [ 1020.892438][T16081] loop4: detected capacity change from 0 to 256 [ 1020.952273][ T7200] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.995451][ T797] hub 1-1:0.0: 1 port detected [ 1021.015628][T16081] FAT-fs (loop4): Directory bread(block 64) failed [ 1021.073622][T16081] FAT-fs (loop4): Directory bread(block 65) failed [ 1021.080434][T16081] FAT-fs (loop4): Directory bread(block 66) failed [ 1021.151440][T16081] FAT-fs (loop4): Directory bread(block 67) failed [ 1021.196449][T16081] FAT-fs (loop4): Directory bread(block 68) failed [ 1021.203380][ T797] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1021.203476][ T797] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1021.230929][ T797] usbhid 1-1:0.0: can't add hid device: -71 [ 1021.250562][ T797] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1021.288184][T16081] FAT-fs (loop4): Directory bread(block 69) failed [ 1021.303556][T16081] FAT-fs (loop4): Directory bread(block 70) failed [ 1021.351877][T16081] FAT-fs (loop4): Directory bread(block 71) failed [ 1021.356168][ T797] usb 1-1: USB disconnect, device number 18 [ 1021.383184][T16081] FAT-fs (loop4): Directory bread(block 72) failed [ 1021.414319][T16081] FAT-fs (loop4): Directory bread(block 73) failed [ 1021.433705][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1021.468496][T15861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.519136][T15861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1021.623371][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1021.664109][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1021.702085][ T7200] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.720221][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1021.751312][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.816897][ T5900] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.839981][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.890788][ T5900] usb 4-1: config 0 descriptor?? [ 1021.918538][T15861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.950498][T15861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1021.972518][T16105] 9pnet_fd: Insufficient options for proto=fd [ 1022.305006][T15861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.336622][T15861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.679053][T15861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.701269][ T5900] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1022.713958][T15861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1023.097977][ T7200] batman_adv: batadv0: Interface deactivated: gretap1 [ 1023.262096][T16100] loop4: detected capacity change from 0 to 32768 [ 1023.277422][ T797] usb 4-1: USB disconnect, device number 8 [ 1023.347990][T16100] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1023.454795][T13493] (syz-executor,13493,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 1023.557667][T13493] ocfs2: Unmounting device (7,4) on (node local) [ 1023.894924][ T7200] batman_adv: batadv0: Removing interface: gretap1 [ 1024.578731][T16162] 9pnet_fd: Insufficient options for proto=fd [ 1025.367900][ T7200] bond0 (unregistering): Released all slaves [ 1025.537216][ T7200] IPVS: stopping backup sync thread 14026 ... [ 1025.722668][T16171] 9pnet_fd: Insufficient options for proto=fd [ 1025.984002][T15861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1026.284061][T15861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1026.331150][T16143] loop0: detected capacity change from 0 to 65536 [ 1026.355860][T15861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1026.402462][T15861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1026.475788][T16143] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1026.570292][ T7200] hsr_slave_0: left promiscuous mode [ 1026.585619][ T7200] hsr_slave_1: left promiscuous mode [ 1026.641494][ T7200] veth1_macvtap: left promiscuous mode [ 1026.655399][T16143] XFS (loop0): Ending clean mount [ 1026.658392][ T7200] veth0_macvtap: left promiscuous mode [ 1026.673195][ T7200] veth1_vlan: left allmulticast mode [ 1026.686930][ T7200] veth1_vlan: left promiscuous mode [ 1026.692503][ T7200] veth0_vlan: left promiscuous mode [ 1026.866898][ T9254] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1027.973085][T16205] loop3: detected capacity change from 0 to 32768 [ 1027.991012][T16205] btrfs: Deprecated parameter 'usebackuproot' [ 1028.000290][T16205] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1028.025297][T16205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2012 (16205) [ 1028.153763][T16205] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1028.221942][T16205] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1028.660567][T16205] BTRFS info (device loop3): rebuilding free space tree [ 1028.833765][T16205] BTRFS info (device loop3): allowing degraded mounts [ 1028.893518][T16205] BTRFS info (device loop3): enabling ssd optimizations [ 1028.909735][T16205] BTRFS info (device loop3): turning on flush-on-commit [ 1028.917496][T16205] BTRFS info (device loop3): enabling free space tree [ 1028.925040][T16205] BTRFS info (device loop3): force clearing of disk cache [ 1028.932364][T16205] BTRFS info (device loop3): trying to use backup root at mount time [ 1028.941046][T16205] BTRFS info (device loop3): use zstd compression, level 3 [ 1029.479132][T14962] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1031.492473][T16290] fuse: root generation should be zero [ 1031.769496][T15861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.861778][T15861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.914676][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.921944][T12933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.974079][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.981411][ T7218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.262445][T15861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.291353][T16332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1033.536832][ T7200] IPVS: stop unused estimator thread 0... [ 1034.056938][T13640] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1034.237863][T13640] usb 1-1: Using ep0 maxpacket: 32 [ 1034.283598][T15861] veth0_vlan: entered promiscuous mode [ 1034.313414][T13640] usb 1-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 1034.353873][T13640] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1034.407757][T13640] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1034.441671][T13640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.543779][T16345] loop3: detected capacity change from 0 to 1024 [ 1034.545992][T15861] veth1_vlan: entered promiscuous mode [ 1034.780615][T13640] usb 1-1: config 0 descriptor?? [ 1035.061610][T15861] veth0_macvtap: entered promiscuous mode [ 1035.073072][ T5900] usb 1-1: USB disconnect, device number 19 [ 1035.080548][T15861] veth1_macvtap: entered promiscuous mode [ 1035.085902][T16345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.149870][T15861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.215512][T15861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.249999][ T7218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.280685][T16345] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1035.311924][ T7218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.335955][T16345] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1035.353104][ T7218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.384205][ T7218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.414056][T16345] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1035.414056][T16345] [ 1035.486895][T16345] EXT4-fs (loop3): Total free blocks count 0 [ 1035.538317][T16345] EXT4-fs (loop3): Free/Dirty block details [ 1035.553852][T16345] EXT4-fs (loop3): free_blocks=68451041280 [ 1035.567868][T16345] EXT4-fs (loop3): dirty_blocks=80 [ 1035.578022][T16345] EXT4-fs (loop3): Block reservation details [ 1035.605889][T12929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.633277][T16345] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 1035.658611][T12929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.684223][T16358] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 1035.787750][ T7218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.812697][ T7218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.861809][T16368] loop0: detected capacity change from 0 to 128 [ 1036.052047][T16368] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1036.105440][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1036.155584][T16371] loop4: detected capacity change from 0 to 4096 [ 1036.229894][T16368] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.313506][T16371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.592765][T13493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.676843][T16368] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1036.750354][T16368] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1036.917308][T16385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1036.991928][ T9254] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1038.766311][T16418] cgroup: Bad value for 'name' [ 1038.983259][T16421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1039.430982][ T30] audit: type=1800 audit(2000000013.200:196): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2058" name="bus" dev="overlay" ino=301 res=0 errno=0 [ 1039.473458][T16432] evm: overlay not supported [ 1039.680135][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'. [ 1039.730584][T16435] loop2: detected capacity change from 0 to 4096 [ 1040.792824][T16457] hub 9-0:1.0: USB hub found [ 1040.813570][T16457] hub 9-0:1.0: 1 port detected [ 1042.708971][T16467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 1042.762066][T16467] loop3: detected capacity change from 0 to 4096 [ 1042.956016][T16467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.132162][T14962] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.145357][T16474] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 1043.224794][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1043.279164][T16475] loop0: detected capacity change from 0 to 4096 [ 1043.351267][T16475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.659198][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.061411][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2072'. [ 1044.111379][T16493] loop4: detected capacity change from 0 to 4096 [ 1044.193060][T16493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.511157][T13493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.738631][T16510] overlayfs: failed to clone upperpath [ 1044.787335][T16506] kvm: pic: non byte write [ 1045.323964][T16522] loop4: detected capacity change from 0 to 512 [ 1045.333798][T16523] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.340496][T16523] binder: 16520:16523 ioctl 4018620d 200000000ac0 returned -16 [ 1045.360411][T16522] EXT4-fs: Ignoring removed i_version option [ 1045.389524][T16522] EXT4-fs: Ignoring removed bh option [ 1045.405844][T16523] binder: 16520:16523 ioctl c0306201 2000000003c0 returned -14 [ 1045.467355][T16522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.528061][T16522] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.571765][T16528] overlayfs: failed to clone upperpath [ 1045.855825][T13493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.578492][T16566] loop4: detected capacity change from 0 to 2048 [ 1046.595122][T16566] EXT4-fs: Ignoring removed bh option [ 1046.672322][T16566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.700250][T16574] 9pnet_fd: Insufficient options for proto=fd [ 1046.765378][T16566] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1046.938503][T16566] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 1047.064015][T16566] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1047.064015][T16566] [ 1047.103119][T16566] EXT4-fs (loop4): Total free blocks count 0 [ 1047.319027][T16566] EXT4-fs (loop4): Free/Dirty block details [ 1047.413274][T16566] EXT4-fs (loop4): free_blocks=2415919104 [ 1047.428007][T16566] EXT4-fs (loop4): dirty_blocks=48 [ 1047.463005][T16566] EXT4-fs (loop4): Block reservation details [ 1047.489449][T16566] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 1047.540245][T16580] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 6 with error 28 [ 1047.836688][T16593] loop3: detected capacity change from 0 to 128 [ 1048.016891][T16593] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1048.448761][T16593] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1048.537302][T16593] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.879366][T16617] loop4: detected capacity change from 0 to 512 [ 1049.990440][T14962] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1050.019077][T16617] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2103: inode has both inline data and extents flags [ 1050.108765][T16617] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2103: couldn't read orphan inode 15 (err -117) [ 1050.148210][T16617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.384609][T13493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.803993][ T797] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1050.972837][ T797] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1051.004542][ T797] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1051.049539][ T797] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1051.089776][ T797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1051.124578][ T797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1051.156698][ T797] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1051.169284][ T797] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1051.191335][ T797] usb 5-1: Product: syz [ 1051.206212][ T797] usb 5-1: Manufacturer: syz [ 1051.243064][ T797] cdc_wdm 5-1:1.0: skipping garbage [ 1051.251502][ T797] cdc_wdm 5-1:1.0: skipping garbage [ 1051.279392][ T797] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1051.313021][ T797] cdc_wdm 5-1:1.0: Unknown control protocol [ 1051.702215][T16654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1052.246761][ T9] usb 5-1: USB disconnect, device number 11 [ 1053.297779][ T5824] Bluetooth: hci3: link tx timeout [ 1053.305141][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1053.323347][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1053.332504][ T5824] Bluetooth: hci3: link tx timeout [ 1053.337819][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1053.345813][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1053.371820][T16646] loop3: detected capacity change from 0 to 40427 [ 1053.384052][T16646] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1053.391843][T16646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1053.420042][T16646] F2FS-fs (loop3): invalid crc value [ 1053.650065][ T5824] Bluetooth: hci3: link tx timeout [ 1053.655442][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1053.663293][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1053.728439][T16646] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1053.783740][T16646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1053.803490][T16646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1054.225206][ T5824] Bluetooth: hci3: link tx timeout [ 1054.231784][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1054.239970][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1054.277078][ T5824] Bluetooth: hci3: link tx timeout [ 1054.282296][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1054.291304][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1054.569877][T16709] loop2: detected capacity change from 0 to 1024 [ 1054.604577][T16709] EXT4-fs: inline encryption not supported [ 1054.611037][T16711] syzkaller1: entered promiscuous mode [ 1054.611064][T16711] syzkaller1: entered allmulticast mode [ 1054.650886][T16709] EXT4-fs: Ignoring removed bh option [ 1054.781389][ T5824] Bluetooth: hci3: link tx timeout [ 1054.787668][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1054.795934][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1055.088570][ T5824] Bluetooth: hci3: link tx timeout [ 1055.096995][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1055.107147][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1055.363139][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 1055.818113][ T5824] Bluetooth: hci3: link tx timeout [ 1055.823379][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1056.290733][T16746] binder: 16744:16746 unknown command 0 [ 1056.333044][T16746] binder: 16744:16746 ioctl c0306201 200000000080 returned -22 [ 1056.382035][T16753] tipc: Enabling of bearer rejected, failed to enable media [ 1057.613117][ T5824] Bluetooth: hci3: link tx timeout [ 1057.618438][ T5824] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 1057.843434][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 1059.714677][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2146'. [ 1061.993467][T10748] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1062.153148][T10748] usb 3-1: Using ep0 maxpacket: 16 [ 1062.184311][T10748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1062.205523][T10748] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.222972][T10748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.245201][T13640] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1062.253899][T10748] usb 3-1: Product: syz [ 1062.260219][T10748] usb 3-1: Manufacturer: syz [ 1062.268905][T10748] usb 3-1: SerialNumber: syz [ 1062.293989][T10748] usb 3-1: config 0 descriptor?? [ 1062.313861][T10748] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.335540][T10748] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1062.403562][T13640] usb 4-1: Using ep0 maxpacket: 32 [ 1062.411070][T13640] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1062.429426][T13640] usb 4-1: config 0 has no interface number 0 [ 1062.442997][T13640] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1062.473070][T13640] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1062.485945][T13640] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1062.516913][T13640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.533304][T13640] usb 4-1: Product: syz [ 1062.537701][T13640] usb 4-1: Manufacturer: syz [ 1062.542370][T13640] usb 4-1: SerialNumber: syz [ 1062.558951][T13640] usb 4-1: config 0 descriptor?? [ 1062.863025][T13640] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1062.908974][T13640] cx231xx 4-1:0.1: Failed to read PCB config [ 1062.923074][T13640] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1062.935680][T10748] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1062.957832][T13640] usb 4-1: USB disconnect, device number 9 [ 1063.222013][T16851] overlayfs: failed to clone upperpath [ 1063.366363][T10748] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1063.374891][T10748] em28xx 3-1:0.0: board has no eeprom [ 1063.393247][T13640] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1063.615334][T13640] usb 4-1: Using ep0 maxpacket: 32 [ 1063.867173][T13640] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1063.875408][T13640] usb 4-1: config 0 has no interface number 0 [ 1063.882089][T13640] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1063.913082][T13640] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1063.943086][T13640] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1063.969146][T13640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.997866][T13640] usb 4-1: Product: syz [ 1064.020816][T13640] usb 4-1: Manufacturer: syz [ 1064.062607][T13640] usb 4-1: SerialNumber: syz [ 1064.100750][T13640] usb 4-1: config 0 descriptor?? [ 1064.340698][T13640] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1064.356011][T13640] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1064.488867][T13640] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1064.499884][T16824] em28xx 3-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1064.512783][T13640] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1064.535623][T13640] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1064.544921][T10748] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1064.552818][T10748] em28xx 3-1:0.0: dvb set to bulk mode. [ 1064.577176][T13640] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1064.594615][ T5900] em28xx 3-1:0.0: Binding DVB extension [ 1064.623160][T13640] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1064.631507][T13640] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -71 [ 1064.672261][T10748] usb 3-1: USB disconnect, device number 8 [ 1064.717271][T16873] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2170'. [ 1064.757044][T16873] syz_tun: entered allmulticast mode [ 1064.768862][T10748] em28xx 3-1:0.0: Disconnecting em28xx [ 1064.836110][ T5900] em28xx 3-1:0.0: Registering input extension [ 1064.851849][T13640] i2c i2c-4: Added multiplexed i2c bus 6 [ 1064.875623][T10748] em28xx 3-1:0.0: Closing input extension [ 1064.894298][T13640] i2c i2c-4: Added multiplexed i2c bus 7 [ 1064.920544][T13640] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1064.953187][T13640] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1064.995184][T10748] em28xx 3-1:0.0: Freeing device [ 1065.145555][T13640] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1065.209392][T13640] usb 4-1: USB disconnect, device number 10 [ 1065.324064][T13784] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1065.347023][T16886] loop2: detected capacity change from 0 to 64 [ 1065.528952][T13784] usb 1-1: Using ep0 maxpacket: 16 [ 1065.548369][T13784] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1065.587508][T13784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1065.633888][T13784] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1065.656845][T13784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.668881][T13784] usb 1-1: Product: syz [ 1065.698476][T13784] usb 1-1: Manufacturer: syz [ 1065.706221][T13784] usb 1-1: SerialNumber: syz [ 1065.706258][T16892] binder: 16891:16892 ioctl c0306201 200000004a40 returned -22 [ 1065.716574][T13784] usb 1-1: config 0 descriptor?? [ 1065.744596][T13784] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1065.785816][T13784] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1066.391549][T13784] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1066.503524][T13784] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1067.117589][T13784] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1067.148007][T13784] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1067.378042][T13784] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1067.393339][T13784] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1067.441526][T13784] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1067.463361][T13784] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1067.505458][T13784] usb 1-1: USB disconnect, device number 20 [ 1067.625137][T16933] pim6reg1: entered promiscuous mode [ 1067.630535][T16933] pim6reg1: entered allmulticast mode [ 1070.422779][T16973] loop0: detected capacity change from 0 to 4096 [ 1072.439169][T17006] cgroup: No subsys list or none specified [ 1074.824286][T17025] loop3: detected capacity change from 0 to 512 [ 1074.963570][T17025] EXT4-fs: Ignoring removed bh option [ 1074.983032][T17025] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1075.105201][T17025] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1075.188866][T17025] EXT4-fs (loop3): 1 truncate cleaned up [ 1075.274883][T17025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1075.458424][T17040] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1076.204585][T14962] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.826966][T17038] loop2: detected capacity change from 0 to 32768 [ 1076.934641][T17038] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2211 (17038) [ 1077.013448][T17038] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13 [ 1077.024983][T17072] 9pnet_fd: Insufficient options for proto=fd [ 1081.983720][T17125] 9pnet_fd: Insufficient options for proto=fd [ 1082.210789][T17129] overlayfs: failed to clone upperpath [ 1082.895659][T17135] loop2: detected capacity change from 0 to 764 [ 1083.129880][T17142] Symlink component flag not implemented [ 1083.135923][T17142] Symlink component flag not implemented [ 1083.806727][T17113] loop3: detected capacity change from 0 to 32768 [ 1083.919682][T17113] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1084.345779][T14962] ocfs2: Unmounting device (7,3) on (node local) [ 1084.690666][T17178] 9pnet_fd: Insufficient options for proto=fd [ 1085.477285][T17175] loop3: detected capacity change from 0 to 1024 [ 1088.582258][T17215] overlayfs: failed to clone upperpath [ 1089.059149][ T5942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.389950][ T5942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.425198][T17231] 9pnet_fd: Insufficient options for proto=fd [ 1089.523912][T17229] batadv_slave_1: entered promiscuous mode [ 1089.675384][ T5942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.686929][ T30] audit: type=1326 audit(2000000063.470:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1089.724029][T17227] batadv_slave_1: left promiscuous mode [ 1089.733698][ T30] audit: type=1326 audit(2000000063.470:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1089.794452][ T30] audit: type=1326 audit(2000000063.470:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1089.815977][T17237] loop0: detected capacity change from 0 to 1024 [ 1089.821129][ T30] audit: type=1326 audit(2000000063.470:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1089.918710][ T30] audit: type=1326 audit(2000000063.470:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1089.946523][ T5942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.986427][ T30] audit: type=1326 audit(2000000063.470:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1090.047449][ T30] audit: type=1326 audit(2000000063.470:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1090.131326][ T30] audit: type=1326 audit(2000000063.490:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1090.230734][ T30] audit: type=1326 audit(2000000063.490:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1090.336219][ T30] audit: type=1326 audit(2000000063.490:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1090.365973][ T5942] bridge_slave_1: left allmulticast mode [ 1090.371739][ T5942] bridge_slave_1: left promiscuous mode [ 1090.381605][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.985128][ T5942] bridge_slave_0: left allmulticast mode [ 1090.992232][ T5942] bridge_slave_0: left promiscuous mode [ 1091.014424][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.041616][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1091.060691][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1091.078898][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1091.087290][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1091.096449][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1093.103788][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.117761][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.129770][ T5942] bond0 (unregistering): Released all slaves [ 1093.223552][ T5824] Bluetooth: hci3: command tx timeout [ 1093.538496][T17286] 9pnet_fd: Insufficient options for proto=fd [ 1094.713338][T17302] 9pnet_fd: Insufficient options for proto=fd [ 1094.998881][T17254] chnl_net:caif_netlink_parms(): no params data found [ 1095.279451][ T5942] hsr_slave_0: left promiscuous mode [ 1095.292983][ T5824] Bluetooth: hci3: command tx timeout [ 1095.319200][ T5942] hsr_slave_1: left promiscuous mode [ 1095.334557][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.346723][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.360316][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2271'. [ 1095.361313][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.439064][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.450766][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2267'. [ 1095.504842][T17318] loop0: detected capacity change from 0 to 4096 [ 1095.566187][ T5942] veth1_macvtap: left promiscuous mode [ 1095.571805][ T5942] veth0_macvtap: left promiscuous mode [ 1095.648047][ T5942] veth1_vlan: left promiscuous mode [ 1095.684106][T17318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.702773][ T5942] veth0_vlan: left promiscuous mode [ 1096.272319][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.369006][ T5824] Bluetooth: hci3: command tx timeout [ 1097.630055][T17340] 9pnet_fd: Insufficient options for proto=fd [ 1098.804865][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 1098.888805][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 1099.453078][ T5824] Bluetooth: hci3: command tx timeout [ 1100.309936][T17362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1100.992238][T17367] capability: warning: `syz.4.2282' uses 32-bit capabilities (legacy support in use) [ 1101.135075][T17254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.174786][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.182149][T17254] bridge_slave_0: entered allmulticast mode [ 1101.250605][T17254] bridge_slave_0: entered promiscuous mode [ 1101.266889][T17254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.290276][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.308439][T17254] bridge_slave_1: entered allmulticast mode [ 1101.347131][T17254] bridge_slave_1: entered promiscuous mode [ 1101.462712][T17382] 9pnet_fd: Insufficient options for proto=fd [ 1101.602651][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.148238][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.421166][T17254] team0: Port device team_slave_0 added [ 1102.608098][T17254] team0: Port device team_slave_1 added [ 1103.646516][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.678416][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.893871][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.010622][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.053006][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.166609][T17409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2293'. [ 1104.185616][T17409] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2293'. [ 1104.202703][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 1104.213911][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.822604][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1104.842663][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1104.855607][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1104.894128][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1104.903454][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1105.044989][T17254] hsr_slave_0: entered promiscuous mode [ 1105.084597][T17254] hsr_slave_1: entered promiscuous mode [ 1105.134210][T17254] debugfs: 'hsr0' already exists in 'hsr' [ 1105.162029][T17254] Cannot create hsr debugfs directory [ 1105.213019][ T5913] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1105.437607][ T5913] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 1105.468110][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.491749][ T5913] usb 1-1: config 0 has no interface number 0 [ 1105.516064][ T5913] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1105.528695][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.557643][ T5913] usb 1-1: Product: syz [ 1105.563321][ T5913] usb 1-1: Manufacturer: syz [ 1105.567975][ T5913] usb 1-1: SerialNumber: syz [ 1105.606230][ T5913] usb 1-1: config 0 descriptor?? [ 1105.648294][ T5913] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 1105.673284][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 1105.691514][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 1105.713325][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 1105.742325][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 1105.772986][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 2 [ 1105.781234][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 1105.795377][ T5913] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 5 [ 1105.807076][ T5913] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1105.822138][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.853461][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.930655][ T5913] usb 1-1: USB disconnect, device number 21 [ 1106.966215][ T5824] Bluetooth: hci4: command tx timeout [ 1107.003499][ T5913] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1107.022594][ T5913] keyspan 1-1:0.235: device disconnected [ 1109.043056][ T5824] Bluetooth: hci4: command tx timeout [ 1109.599482][T17416] chnl_net:caif_netlink_parms(): no params data found [ 1109.811549][T17254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1110.580341][T17254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1110.963670][T17254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1111.352618][ T5824] Bluetooth: hci4: command tx timeout [ 1111.389560][T17254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1111.783539][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.808954][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.823444][T17416] bridge_slave_0: entered allmulticast mode [ 1111.841951][T17416] bridge_slave_0: entered promiscuous mode [ 1112.014035][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.038654][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.063833][T17416] bridge_slave_1: entered allmulticast mode [ 1112.111455][T17416] bridge_slave_1: entered promiscuous mode [ 1112.535261][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.589280][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.108245][T17416] team0: Port device team_slave_0 added [ 1113.154688][T17416] team0: Port device team_slave_1 added [ 1113.296858][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.326040][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.373077][ T5824] Bluetooth: hci4: command tx timeout [ 1113.379469][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.394873][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.401962][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.494618][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.700983][T17416] hsr_slave_0: entered promiscuous mode [ 1113.726560][T17416] hsr_slave_1: entered promiscuous mode [ 1113.754270][T17416] debugfs: 'hsr0' already exists in 'hsr' [ 1113.760068][T17416] Cannot create hsr debugfs directory [ 1114.782096][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2315'. [ 1114.802143][T17254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.127904][T17544] loop0: detected capacity change from 0 to 4096 [ 1115.631461][T17544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.599282][T17254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.623619][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.630839][ T7218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.602174][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.609562][ T7218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.050453][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.467995][T17601] vlan2: entered promiscuous mode [ 1120.473693][T17601] dummy0: entered promiscuous mode [ 1120.645904][T17416] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1120.706228][T17416] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1120.767681][T17416] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1120.934597][T17416] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1121.161469][T17611] vti0: entered allmulticast mode [ 1121.817315][T17626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1122.406970][T17254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.599973][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.829862][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.875495][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.882686][T12929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.051384][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.058607][ T7218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.106610][T17254] veth0_vlan: entered promiscuous mode [ 1123.135725][T17254] veth1_vlan: entered promiscuous mode [ 1123.349143][T17254] veth0_macvtap: entered promiscuous mode [ 1123.391199][T17254] veth1_macvtap: entered promiscuous mode [ 1123.457312][T17647] Invalid ELF header magic: != ELF [ 1123.540096][T17254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.587306][T17254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.666080][T17655] binder: 17649:17655 ioctl 5402 0 returned -22 [ 1123.697813][T12934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.733834][T12934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.766758][T12934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.808748][T12934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.134448][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.149935][T12934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.182720][T12934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.343552][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.386173][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.791078][T17687] : entered promiscuous mode [ 1126.872043][T17416] veth0_vlan: entered promiscuous mode [ 1126.959603][T17416] veth1_vlan: entered promiscuous mode [ 1127.410570][T17695] tipc: Started in network mode [ 1127.428561][T17695] tipc: Node identity 8a65dd848536, cluster identity 4711 [ 1127.465355][T17695] tipc: Enabled bearer , priority 0 [ 1127.484818][T17416] veth0_macvtap: entered promiscuous mode [ 1127.499917][T17697] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1127.531752][T17698] syzkaller0: entered promiscuous mode [ 1127.537592][T17698] syzkaller0: entered allmulticast mode [ 1127.553896][T17416] veth1_macvtap: entered promiscuous mode [ 1127.612189][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.625206][T17695] tipc: Resetting bearer [ 1127.658873][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.667957][T17693] tipc: Resetting bearer [ 1127.700757][T17693] tipc: Disabling bearer [ 1127.730475][T11691] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.761109][T11691] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.807001][T11691] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.826838][T11691] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.122252][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1128.122272][ T30] audit: type=1326 audit(2000000101.910:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17705 comm="syz.1.2343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f738fd8eec9 code=0x0 [ 1128.197436][T12934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.209642][T12934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.371101][T11691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.381108][T11691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.577799][T17753] fuse: Unknown parameter '‘0xffffffffffffffff' [ 1134.125341][T17758] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 1134.134125][T17758] netlink: 'syz.4.2352': attribute type 4 has an invalid length. [ 1134.153222][T17758] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1134.192142][T17758] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 1134.208707][T17758] netlink: 'syz.4.2352': attribute type 4 has an invalid length. [ 1134.217446][T17758] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1135.581791][ T30] audit: type=1326 audit(2000000109.370:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1135.646242][ T30] audit: type=1326 audit(2000000109.370:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1135.717137][ T30] audit: type=1326 audit(2000000109.400:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1135.922554][ T30] audit: type=1326 audit(2000000109.400:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1135.949791][ T30] audit: type=1326 audit(2000000109.400:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1135.975499][ T30] audit: type=1326 audit(2000000109.400:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1135.999372][ T30] audit: type=1326 audit(2000000109.400:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1136.605439][ T30] audit: type=1326 audit(2000000109.400:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1136.692960][ T30] audit: type=1326 audit(2000000109.400:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1136.733732][ T30] audit: type=1326 audit(2000000109.400:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53d38eec9 code=0x7ffc0000 [ 1137.860684][T17799] qnx6: unable to read the first superblock [ 1137.867618][T17799] qnx6: unable to read the first superblock [ 1137.873640][T17799] qnx6: unable to read the first superblock [ 1139.416938][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1139.452013][T17816] loop8: detected capacity change from 0 to 16 [ 1139.470859][T17816] erofs (device loop8): mounted with root inode @ nid 36. [ 1139.658068][T17814] netlink: 'syz.5.2368': attribute type 21 has an invalid length. [ 1139.666053][T17814] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2368'. [ 1139.768448][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1139.784486][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.883126][ T43] usb 2-1: Product: syz [ 1139.892681][ T43] usb 2-1: Manufacturer: syz [ 1139.905508][ T43] usb 2-1: SerialNumber: syz [ 1139.927317][ T43] usb 2-1: config 0 descriptor?? [ 1140.451769][ T43] hso 2-1:0.0: Failed to find BULK IN ep [ 1141.564040][ T9] usb 2-1: USB disconnect, device number 8 [ 1145.130442][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 1145.377651][T17850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1145.398188][T17863] loop8: detected capacity change from 0 to 1024 [ 1145.593438][T17850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1145.623365][T17850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1145.634889][T17863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.689036][T17850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1145.722216][T17850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1146.483518][T17850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1146.551020][T17850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1146.603196][T17850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1146.658137][T17850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1147.443020][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 1147.603060][ T5824] Bluetooth: hci1: command 0x040f tx timeout [ 1147.813159][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1148.289418][T17886] loop8: detected capacity change from 0 to 32768 [ 1148.318080][T17891] loop1: detected capacity change from 0 to 1024 [ 1148.374623][T17886] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2382 (17886) [ 1148.480589][T17886] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1148.491186][T17886] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 1148.500371][T17886] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1148.623515][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1149.274887][T17891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.471730][T17886] BTRFS info (device loop8): rebuilding free space tree [ 1149.511084][T17886] BTRFS info (device loop8): disabling free space tree [ 1149.518255][T17886] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1149.528048][T17886] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1149.571901][T17886] BTRFS info (device loop8): enabling ssd optimizations [ 1149.579024][T17886] BTRFS info (device loop8): turning on async discard [ 1149.586584][T17886] BTRFS info (device loop8): enabling disk space caching [ 1149.591638][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2385'. [ 1149.593698][T17886] BTRFS info (device loop8): force clearing of disk cache [ 1149.593723][T17886] BTRFS info (device loop8): use zstd compression, level 3 [ 1149.693382][ T5824] Bluetooth: hci1: command 0x040f tx timeout [ 1149.700467][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.843995][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1150.642997][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1150.996014][T17416] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1151.045402][T17934] loop1: detected capacity change from 0 to 128 [ 1152.081560][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1152.506486][T17944] syz.1.2388: attempt to access beyond end of device [ 1152.506486][T17944] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 1152.532892][T17944] syz.1.2388: attempt to access beyond end of device [ 1152.532892][T17944] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 1152.547179][T17944] buffer_io_error: 6 callbacks suppressed [ 1152.547223][T17944] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 1152.565488][T17944] syz.1.2388: attempt to access beyond end of device [ 1152.565488][T17944] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 1152.706239][T17944] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 1152.740393][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 1153.057853][T17946] syzkaller0: entered promiscuous mode [ 1153.087645][T17946] syzkaller0: entered allmulticast mode [ 1155.801954][T17985] tipc: Started in network mode [ 1155.822722][T17985] tipc: Node identity 76966fbd800c, cluster identity 4711 [ 1155.893864][T17985] tipc: Enabled bearer , priority 0 [ 1156.112652][T17990] syzkaller0: entered promiscuous mode [ 1156.133413][T17990] syzkaller0: entered allmulticast mode [ 1157.012969][T14853] tipc: Node number set to 4137316285 [ 1157.553499][T17990] tipc: Resetting bearer [ 1157.593356][T17984] tipc: Resetting bearer [ 1157.713707][T17984] tipc: Disabling bearer [ 1161.948742][T18047] xt_CT: No such helper "snmp_trap" [ 1162.056849][T18046] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1165.098151][T18057] loop1: detected capacity change from 0 to 4096 [ 1165.639842][T18057] ntfs3(loop1): ino=b, Correct links count -> 1. [ 1165.687410][T18057] ntfs3(loop1): ino=18, mi_enum_attr [ 1165.738236][T18057] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1166.964290][ T5900] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1167.743135][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1167.750686][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.805716][ T5900] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1167.835885][ T5900] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1167.872177][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.881990][T18109] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1167.881990][T18109] The task syz.8.2422 (18109) triggered the difference, watch for misbehavior. [ 1167.940343][ T5900] usb 2-1: config 0 descriptor?? [ 1168.199326][ T5900] usb 2-1: USB disconnect, device number 9 [ 1171.635619][T18134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.339083][T18184] tipc: Enabling of bearer rejected, failed to enable media [ 1176.475797][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1180.735190][T18246] loop1: detected capacity change from 0 to 16 [ 1181.086147][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 1181.862318][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1182.032944][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1182.044687][ T9] usb 2-1: unable to get BOS descriptor set [ 1182.060475][ T9] usb 2-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config [ 1182.081548][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1182.102200][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1182.109330][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1182.284417][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.418786][ T9] usb 2-1: bad CDC descriptors [ 1182.642462][ T9] usb 2-1: USB disconnect, device number 10 [ 1183.737278][T18284] befs: (nullb0): invalid magic header [ 1185.485687][T18291] tipc: Enabled bearer , priority 0 [ 1185.524575][T18291] syzkaller0: entered promiscuous mode [ 1185.562701][T18291] syzkaller0: entered allmulticast mode [ 1185.742716][T18291] tipc: Resetting bearer [ 1185.797844][T18290] tipc: Resetting bearer [ 1185.951885][T18290] tipc: Disabling bearer [ 1192.712698][T18381] trusted_key: encrypted_key: insufficient parameters specified [ 1196.824005][T18416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2488'. [ 1196.990197][T18420] loop0: detected capacity change from 0 to 8 [ 1197.533213][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1197.533238][ T30] audit: type=1800 audit(2000000171.030:260): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2490" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1197.614921][T18417] tipc: Enabled bearer , priority 0 [ 1197.765566][T18417] syzkaller0: entered promiscuous mode [ 1197.787389][T18417] syzkaller0: entered allmulticast mode [ 1198.607298][T18430] tipc: Resetting bearer [ 1198.662561][T18415] tipc: Resetting bearer [ 1198.810960][T18415] tipc: Disabling bearer [ 1201.104616][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 1203.215102][T18476] tipc: Enabling of bearer rejected, failed to enable media [ 1206.711735][T18518] loop1: detected capacity change from 0 to 512 [ 1206.770703][T18522] tipc: Enabling of bearer rejected, failed to enable media [ 1206.984250][T18518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1207.678375][T18528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1207.823048][T18518] EXT4-fs (loop1): 1 truncate cleaned up [ 1207.859409][T18518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.200611][T18537] overlayfs: failed to clone upperpath [ 1210.763649][T18565] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1211.426446][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.168243][T18577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.338263][T18589] overlayfs: failed to clone upperpath [ 1215.445749][T18606] 9pnet_fd: Insufficient options for proto=fd [ 1219.614839][T18650] No such timeout policy "syz0" [ 1221.206560][T18665] netlink: zone id is out of range [ 1221.300261][T18665] netlink: zone id is out of range [ 1221.346032][T18665] netlink: zone id is out of range [ 1221.352072][T18665] netlink: zone id is out of range [ 1221.357435][T18665] netlink: zone id is out of range [ 1221.363155][T18665] netlink: zone id is out of range [ 1221.368805][T18665] netlink: zone id is out of range [ 1221.715748][T18670] 9pnet_fd: Insufficient options for proto=fd [ 1221.910384][T18673] loop1: detected capacity change from 0 to 2048 [ 1223.282985][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1223.504926][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.519089][ T9] usb 2-1: config 0 has no interfaces? [ 1223.531806][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1223.552740][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.572192][ T9] usb 2-1: config 0 descriptor?? [ 1223.631734][ T5900] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1223.969039][T18676] loop1: detected capacity change from 0 to 32768 [ 1224.035648][T18676] (syz.1.2546,18676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1224.051185][T18676] (syz.1.2546,18676,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1224.142138][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 1224.162658][T18676] JBD2: Ignoring recovery information on journal [ 1224.164814][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1224.189962][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1224.199265][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.207510][ T5900] usb 1-1: Product: syz [ 1224.211818][ T5900] usb 1-1: Manufacturer: syz [ 1224.217407][ T5900] usb 1-1: SerialNumber: syz [ 1224.225845][ T5900] usb 1-1: config 0 descriptor?? [ 1224.246411][T18676] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1224.249901][ T5900] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1224.862647][T18690] loop0: detected capacity change from 0 to 40427 [ 1224.980280][ T5900] gspca_zc3xx: reg_w_i err -110 [ 1225.531399][T18690] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1225.539996][T18690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1225.562716][T18690] F2FS-fs (loop0): invalid crc value [ 1225.642954][T18690] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1225.708146][T18690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1225.715364][T18690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1226.764513][ T5900] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1226.770938][ T5900] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1226.789347][ T30] audit: type=1800 audit(2000000199.800:261): pid=18712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2550" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1227.359942][ T30] audit: type=1800 audit(2000000201.140:262): pid=18713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2551" name="file1" dev="tmpfs" ino=3594 res=0 errno=0 [ 1227.400029][T10974] usb 2-1: USB disconnect, device number 11 [ 1227.531891][T17254] ocfs2: Unmounting device (7,1) on (node local) [ 1228.395156][ T797] usb 1-1: USB disconnect, device number 22 [ 1228.860766][ T9254] syz-executor: attempt to access beyond end of device [ 1228.860766][ T9254] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1228.881705][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1228.881736][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1228.881750][ T9254] Call Trace: [ 1228.881758][ T9254] [ 1228.881767][ T9254] dump_stack_lvl+0x189/0x250 [ 1228.881802][ T9254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1228.881827][ T9254] ? __pfx_queue_work_on+0x10/0x10 [ 1228.881858][ T9254] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1228.881883][ T9254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1228.881925][ T9254] f2fs_handle_critical_error+0x37c/0x540 [ 1228.881964][ T9254] f2fs_write_end_io+0x886/0xb60 [ 1228.882032][ T9254] __submit_merged_bio+0x27a/0x6a0 [ 1228.882058][ T9254] ? up_write+0x1c4/0x420 [ 1228.882086][ T9254] __submit_merged_write_cond+0x44c/0x530 [ 1228.882124][ T9254] f2fs_sync_node_pages+0x1479/0x15e0 [ 1228.882179][ T9254] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1228.882245][ T9254] ? f2fs_write_checkpoint+0xdad/0x2440 [ 1228.882284][ T9254] ? up_write+0x1c4/0x420 [ 1228.882312][ T9254] f2fs_write_checkpoint+0xdde/0x2440 [ 1228.882344][ T9254] ? __lock_acquire+0xab9/0xd20 [ 1228.882413][ T9254] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1228.882525][ T9254] kill_f2fs_super+0x2cc/0x6d0 [ 1228.882569][ T9254] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1228.882628][ T9254] ? shrinker_free+0x2ce/0x3e0 [ 1228.882666][ T9254] deactivate_locked_super+0xbc/0x130 [ 1228.882694][ T9254] cleanup_mnt+0x425/0x4c0 [ 1228.882717][ T9254] ? lockdep_hardirqs_on+0x9c/0x150 [ 1228.882748][ T9254] task_work_run+0x1d4/0x260 [ 1228.882779][ T9254] ? __pfx_task_work_run+0x10/0x10 [ 1228.882805][ T9254] ? __x64_sys_umount+0x122/0x160 [ 1228.882836][ T9254] ? exit_to_user_mode_loop+0x40/0x130 [ 1228.882869][ T9254] exit_to_user_mode_loop+0xe9/0x130 [ 1228.882897][ T9254] do_syscall_64+0x2bd/0xfa0 [ 1228.882921][ T9254] ? lockdep_hardirqs_on+0x9c/0x150 [ 1228.882946][ T9254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.882967][ T9254] ? clear_bhb_loop+0x60/0xb0 [ 1228.882995][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.883015][ T9254] RIP: 0033:0x7ff53d3901f7 [ 1228.883044][ T9254] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1228.883064][ T9254] RSP: 002b:00007ffc49e2d718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1228.883088][ T9254] RAX: 0000000000000000 RBX: 00007ff53d411d7d RCX: 00007ff53d3901f7 [ 1228.883102][ T9254] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc49e2d7d0 [ 1228.883115][ T9254] RBP: 00007ffc49e2d7d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.883128][ T9254] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc49e2e860 [ 1228.883141][ T9254] R13: 00007ff53d411d7d R14: 000000000012b9ff R15: 00007ffc49e2e8a0 [ 1228.883178][ T9254] [ 1229.254446][ T9254] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1230.815102][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2559'. [ 1231.706740][ T30] audit: type=1800 audit(2000000205.500:263): pid=18751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2561" name="bus" dev="tmpfs" ino=3610 res=0 errno=0 [ 1233.070126][T18767] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1233.070126][T18767] program syz.8.2564 not setting count and/or reply_len properly [ 1235.059810][T18789] loop1: detected capacity change from 0 to 256 [ 1235.874410][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 1236.464094][T18787] loop0: detected capacity change from 0 to 4096 [ 1237.189008][T18787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.358919][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.410211][T18803] loop8: detected capacity change from 0 to 16 [ 1237.465596][T18803] erofs (device loop8): mounted with root inode @ nid 36. [ 1237.638878][T18806] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.2571'. [ 1244.175917][T18853] loop8: detected capacity change from 0 to 256 [ 1245.086993][T18853] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1245.649686][T18858] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 1249.087939][T18883] 9pnet_fd: Insufficient options for proto=fd [ 1256.804399][T18939] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1260.406871][T18956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2603'. [ 1261.560048][T18956] loop0: detected capacity change from 0 to 4096 [ 1262.853118][T18956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.517506][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.757076][T18993] loop8: detected capacity change from 0 to 1024 [ 1268.407577][ T30] audit: type=1326 audit(2000000243.099:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1269.019663][ T30] audit: type=1326 audit(2000000243.099:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1269.212950][ T30] audit: type=1326 audit(2000000243.109:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1269.239609][ T30] audit: type=1326 audit(2000000243.109:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1269.262697][ T30] audit: type=1326 audit(2000000243.109:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1269.337758][T19025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1269.650665][T19025] loop1: detected capacity change from 0 to 4096 [ 1269.953017][ T30] audit: type=1326 audit(2000000243.109:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1269.984183][T19025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.108471][ T30] audit: type=1326 audit(2000000243.109:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1270.132657][ T30] audit: type=1326 audit(2000000243.109:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1270.161090][ T30] audit: type=1326 audit(2000000243.109:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1270.183831][ T30] audit: type=1326 audit(2000000243.119:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.8.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1dc4f8eec9 code=0x7ffc0000 [ 1270.216514][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.690986][T19035] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1271.698237][T19035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1271.710183][T19035] vhci_hcd vhci_hcd.0: Device attached [ 1271.763523][T19039] vhci_hcd: connection closed [ 1271.790157][ T7209] vhci_hcd vhci_hcd.8: stop threads [ 1271.912934][ T7209] vhci_hcd vhci_hcd.8: release socket [ 1271.921898][ T7209] vhci_hcd vhci_hcd.8: disconnect device [ 1271.964390][ T797] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1272.573125][ T797] usb 49-1: enqueue for inactive port 0 [ 1272.693349][ T797] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1273.524120][ T5844] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 1273.531159][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 1277.352824][T19093] geneve2: entered promiscuous mode [ 1277.358272][T19093] geneve2: entered allmulticast mode [ 1277.928637][ T7209] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1277.952917][ T7209] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1277.961809][ T7209] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1278.064351][ T7209] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1278.161223][T19089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1278.177204][T19089] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1278.473972][T19089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1278.577480][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2632'. [ 1278.880286][T19106] loop1: detected capacity change from 0 to 4096 [ 1279.143804][T19105] overlayfs: failed to resolve './file1': -2 [ 1279.153021][T19089] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1279.231903][T19089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1279.262061][T19089] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1279.280338][T19106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.409065][T19089] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1279.417350][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.488002][T19089] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1279.581927][T19114] loop8: detected capacity change from 0 to 512 [ 1279.610817][T19114] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1279.673634][T19114] EXT4-fs (loop8): 1 truncate cleaned up [ 1279.681554][T19114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.939926][T19119] loop0: detected capacity change from 0 to 4096 [ 1280.614333][T19119] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1280.751038][T19119] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1280.772224][T19119] ntfs3(loop0): mft corrupted [ 1280.777129][T19119] ntfs3(loop0): Failed to load $Extend (-22). [ 1280.783320][T19119] ntfs3(loop0): Failed to initialize $Extend. [ 1280.889025][T19123] loop1: detected capacity change from 0 to 128 [ 1280.988446][T17416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.630194][T19123] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1284.459877][T19123] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.808818][T17254] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1284.838515][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2642'. [ 1287.899551][T19170] loop1: detected capacity change from 0 to 4096 [ 1288.084138][T19174] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1288.090215][T19163] Bluetooth: hci0: unsupported parameter 512 [ 1288.460991][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2648'. [ 1288.470956][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2648'. [ 1288.474195][T19163] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1292.817722][T19217] tipc: Enabled bearer , priority 10 [ 1294.985901][T19242] usb usb5: usbfs: process 19242 (syz.8.2661) did not claim interface 0 before use [ 1296.387223][T19252] netlink: 'syz.1.2664': attribute type 58 has an invalid length. [ 1296.414630][T19257] IPVS: ip_vs_add_dest(): server weight less than zero [ 1296.820805][ T43] IPVS: starting estimator thread 0... [ 1296.844256][T19252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1296.993376][T19259] IPVS: using max 24 ests per chain, 57600 per kthread [ 1297.378192][T19269] loop8: detected capacity change from 0 to 128 [ 1297.576319][T19269] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1297.660937][T19276] fuse: Bad value for 'user_id' [ 1297.670764][T19269] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.722324][T19276] fuse: Bad value for 'user_id' [ 1297.953392][T19281] vivid-000: disconnect [ 1298.180277][T19275] vivid-000: reconnect [ 1298.616558][T17416] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1299.156732][T19298] Bluetooth: MGMT ver 1.23 [ 1305.482865][T19360] loop8: detected capacity change from 0 to 256 [ 1305.522421][T19353] loop0: detected capacity change from 0 to 1024 [ 1307.953068][T19372] netlink: 'syz.8.2683': attribute type 10 has an invalid length. [ 1308.316030][T19372] veth0_vlan: left promiscuous mode [ 1308.324184][T19372] veth0_vlan: entered promiscuous mode [ 1308.335088][T19372] team0: Device veth0_vlan failed to register rx_handler [ 1310.667487][T19399] xt_recent: Unsupported userspace flags (000000b1) [ 1312.069728][T19405] loop8: detected capacity change from 0 to 4096 [ 1312.434018][T19405] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1314.374528][T19405] ntfs3(loop8): Failed to read $UpCase (-4). [ 1322.832548][T19486] loop1: detected capacity change from 0 to 512 [ 1322.872999][T19486] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2706: inode has both inline data and extents flags [ 1322.898067][T19486] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2706: couldn't read orphan inode 15 (err -117) [ 1322.921451][T19486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.056902][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.621794][T19516] loop1: detected capacity change from 0 to 2048 [ 1326.743478][T19516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1326.816509][T19524] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1326.823088][T19524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1326.852006][T19524] vhci_hcd vhci_hcd.0: Device attached [ 1326.864311][T19523] ALSA: seq fatal error: cannot create timer (-22) [ 1326.939574][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1326.939589][ T30] audit: type=1800 audit(2000000301.729:286): pid=19524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2709" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1327.163461][ T5900] usb 50-1: SetAddress Request (2) to port 0 [ 1327.863259][ T5900] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1329.027055][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.082591][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.094866][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.108321][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.119080][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.373990][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.719285][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.742941][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.770931][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1329.780016][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1330.416170][T19557] loop0: detected capacity change from 0 to 128 [ 1331.877605][T19571] loop6: detected capacity change from 0 to 2560 [ 1331.884842][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.893005][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.901013][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.909202][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.918431][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.942295][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.952292][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.961275][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.974185][T19571] ldm_validate_partition_table(): Disk read failed. [ 1331.983068][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1331.995497][T19571] Buffer I/O error on dev loop6, logical block 0, async page read [ 1332.012536][T19571] Dev loop6: unable to read RDB block 0 [ 1332.790663][T19571] loop6: unable to read partition table [ 1332.796888][T19571] loop_reread_partitions: partition scan of loop6 (3Ÿ‚ ¾‚³˜) failed (rc=-5) [ 1334.570977][T19525] vhci_hcd: connection reset by peer [ 1334.618779][ T7209] vhci_hcd vhci_hcd.8: stop threads [ 1334.663354][ T7209] vhci_hcd vhci_hcd.8: release socket [ 1334.672335][ T7209] vhci_hcd vhci_hcd.8: disconnect device [ 1334.672335][ T5900] usb 50-1: device descriptor read/8, error -110 [ 1335.002616][T19590] overlayfs: failed to resolve './cgroup': -2 [ 1335.936261][T19585] loop1: detected capacity change from 0 to 65536 [ 1336.091316][T19585] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1336.115424][ T5900] usb usb50-port1: attempt power cycle [ 1336.342714][T19585] XFS (loop1): Ending clean mount [ 1336.351526][T19585] XFS (loop1): Quotacheck needed: Please wait. [ 1336.476783][T19607] netlink: 'syz.8.2729': attribute type 10 has an invalid length. [ 1336.512578][T19601] Process accounting resumed [ 1336.517574][T19607] __nla_validate_parse: 43 callbacks suppressed [ 1336.517594][T19607] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2729'. [ 1336.534290][T19585] XFS (loop1): Quotacheck: Done. [ 1336.607849][T19607] team0: entered promiscuous mode [ 1336.644888][T19607] team_slave_0: entered promiscuous mode [ 1336.686546][T19607] team_slave_1: entered promiscuous mode [ 1336.745145][T19607] team0: entered allmulticast mode [ 1336.777589][T19607] team_slave_0: entered allmulticast mode [ 1337.674598][ T5900] usb usb50-port1: unable to enumerate USB device [ 1337.834570][T19607] team_slave_1: entered allmulticast mode [ 1338.013816][T19607] bridge0: port 3(team0) entered blocking state [ 1338.042057][T19607] bridge0: port 3(team0) entered disabled state [ 1338.272870][T17254] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1338.287536][T19607] bridge0: port 3(team0) entered blocking state [ 1338.294297][T19607] bridge0: port 3(team0) entered forwarding state [ 1339.094724][T19608] loop8: detected capacity change from 0 to 512 [ 1339.619638][T19639] xt_NFQUEUE: number of total queues is 0 [ 1340.436422][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 1340.506105][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 1340.996450][ T7218] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.044510][ T7218] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.086541][ T7218] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.127187][ T7218] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.188761][T19608] EXT4-fs: error -4 creating inode table initialization thread [ 1341.197405][T19608] EXT4-fs (loop8): mount failed [ 1345.412310][T19677] loop8: detected capacity change from 0 to 65536 [ 1345.639463][T19677] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1346.000486][T19677] XFS (loop8): Ending clean mount [ 1346.953873][T19677] XFS (loop8): Quotacheck needed: Please wait. [ 1347.100929][T19677] XFS (loop8): Quotacheck: Done. [ 1347.392860][ T30] audit: type=1326 audit(2000000322.179:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1347.473071][ T30] audit: type=1326 audit(2000000322.179:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1347.523331][ T30] audit: type=1326 audit(2000000322.179:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1347.633660][ T30] audit: type=1326 audit(2000000322.179:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1348.529192][ T30] audit: type=1326 audit(2000000322.179:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1348.626498][ T30] audit: type=1326 audit(2000000322.179:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1348.803069][ T30] audit: type=1326 audit(2000000322.179:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1348.867459][ T30] audit: type=1326 audit(2000000322.229:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1348.972950][ T30] audit: type=1326 audit(2000000322.229:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1349.547673][T19715] loop1: detected capacity change from 0 to 1024 [ 1349.579032][T19715] hfsplus: Unknown parameter '' [ 1349.816810][ T30] audit: type=1326 audit(2000000322.229:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4238eec9 code=0x7ffc0000 [ 1352.032521][T17416] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1357.052000][T19770] loop1: detected capacity change from 0 to 128 [ 1357.704877][T19769] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1357.712782][T19769] FAT-fs (loop1): Filesystem has been set read-only [ 1357.719393][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.719393][T19769] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1357.733332][T19769] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1357.741150][T19769] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1357.772009][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1357.772026][ T30] audit: type=1800 audit(2000000332.489:312): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2760" name="file2" dev="loop1" ino=1048744 res=0 errno=0 [ 1357.826864][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.826864][T19769] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1357.841261][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.841261][T19769] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1357.854837][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.854837][T19769] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1357.868323][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.868323][T19769] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1357.881886][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.881886][T19769] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1357.895599][T19769] syz.1.2760: attempt to access beyond end of device [ 1357.895599][T19769] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1357.911101][T19770] syz.1.2760: attempt to access beyond end of device [ 1357.911101][T19770] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1357.925707][T19770] buffer_io_error: 11 callbacks suppressed [ 1357.925726][T19770] Buffer I/O error on dev loop1, logical block 2065, async page read [ 1357.943691][T19770] syz.1.2760: attempt to access beyond end of device [ 1357.943691][T19770] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1357.957134][T19770] Buffer I/O error on dev loop1, logical block 2066, async page read [ 1357.965354][T19770] syz.1.2760: attempt to access beyond end of device [ 1357.965354][T19770] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1357.978599][T19770] Buffer I/O error on dev loop1, logical block 2067, async page read [ 1357.986799][T19770] Buffer I/O error on dev loop1, logical block 2068, async page read [ 1357.995060][T19770] Buffer I/O error on dev loop1, logical block 2069, async page read [ 1358.003313][T19770] Buffer I/O error on dev loop1, logical block 2070, async page read [ 1358.011492][T19770] Buffer I/O error on dev loop1, logical block 2071, async page read [ 1358.019746][T19770] Buffer I/O error on dev loop1, logical block 2072, async page read [ 1358.031558][T19769] Buffer I/O error on dev loop1, logical block 2065, async page read [ 1358.040015][T19769] Buffer I/O error on dev loop1, logical block 2066, async page read [ 1358.604803][T19777] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1359.543173][T19776] binder: 19775:19776 ioctl 4018620d 0 returned -22 [ 1360.314245][T19783] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 1360.322085][T19783] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2762'. [ 1360.720317][T19790] loop1: detected capacity change from 0 to 512 [ 1360.746975][T19790] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1360.797775][T19790] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2763: iget: bogus i_mode (5) [ 1360.829310][T19790] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2763: couldn't read orphan inode 15 (err -117) [ 1360.908244][T19790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.003157][T19790] ext2 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.001540][T19780] ALSA: mixer_oss: invalid OSS volume '' [ 1362.114088][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.277610][T19824] overlayfs: failed to clone upperpath [ 1366.632423][T19834] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2771'. [ 1366.688183][T19842] loop1: detected capacity change from 0 to 64 [ 1376.838733][T19903] binder: 19887:19903 ioctl c0306201 0 returned -14 [ 1377.641416][T19908] loop0: detected capacity change from 0 to 16 [ 1378.085616][T19908] erofs (device loop0): mounted with root inode @ nid 36. [ 1381.378675][T19944] loop0: detected capacity change from 0 to 1024 [ 1381.485634][T19944] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c018, mo2=0002] [ 1381.532916][T19944] System zones: 0-1, 3-36 [ 1381.564522][T19944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1383.264768][ T9254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.302371][T19976] sd 0:0:1:0: PR command failed: 1026 [ 1385.308540][T19976] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1385.315870][T19976] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1388.808620][T20003] loop8: detected capacity change from 0 to 64 [ 1389.497750][T20006] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1391.748886][T20025] pim6reg1: entered promiscuous mode [ 1391.754801][T20025] pim6reg1: entered allmulticast mode [ 1395.438985][T20055] loop0: detected capacity change from 0 to 512 [ 1395.470866][T20056] loop1: detected capacity change from 0 to 512 [ 1396.396590][T20055] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1396.400723][T20055] EXT4-fs: failed to create workqueue [ 1396.417884][T20055] EXT4-fs (loop0): mount failed [ 1396.887330][T20056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1397.273526][T20059] loop8: detected capacity change from 0 to 4096 [ 1397.321874][T20059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1397.435015][T20059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.681520][ T30] audit: type=1804 audit(2000000372.469:313): pid=20069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2819" name="/newroot/97/file0/file2" dev="loop8" ino=16 res=1 errno=0 [ 1398.659059][T17254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.939221][T17416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.246282][T20103] bad cache= option: no®e*ø(…3 -’¿náÔ[“×ß}ZP¤ [ 1403.246282][T20103] [ 1403.255474][T20103] CIFS: VFS: bad cache= option: no®e*ø(…3 -’¿náÔ[“×ß}ZP¤ [ 1404.210151][T20112] loop0: detected capacity change from 0 to 1024 [ 1404.224658][T20112] EXT4-fs: Ignoring removed i_version option [ 1404.266833][T20112] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1404.363218][T20112] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2832: Invalid block bitmap block 0 in block_group 0 [ 1404.398074][T20112] Quota error (device loop0): write_blk: dquota write failed [ 1404.405997][T20112] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1404.416648][T20112] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2832: Failed to acquire dquot type 0 [ 1404.451716][T20112] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2832: Freeing blocks not in datazone - block = 0, count = 4096 [ 1404.479436][T20112] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2832: Invalid inode bitmap blk 0 in block_group 0 [ 1404.520309][T20112] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1404.552343][T20112] EXT4-fs (loop0): 1 orphan inode deleted [ 1404.573720][T20112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1404.663804][T20112] input: syz0 as /devices/virtual/input/input13 [ 1404.951291][ T7209] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 1405.702850][ T7209] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:22: Failed to release dquot type 0 [ 1405.848978][T20122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1406.177947][T20124] loop1: detected capacity change from 0 to 1024 [ 1406.578360][ T7221] ------------[ cut here ]------------ [ 1406.584738][ T7221] WARNING: io_uring/io_uring.c:3049 at io_ring_exit_work+0x4ed/0x930, CPU#0: kworker/u8:31/7221 [ 1406.595341][ T7221] Modules linked in: [ 1406.599871][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1406.609534][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1406.619768][ T7221] Workqueue: iou_exit io_ring_exit_work [ 1406.625430][ T7221] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 1406.631459][ T7221] Code: c6 05 63 52 5d 0e 01 48 c7 c7 40 09 be 8b be 24 00 00 00 48 c7 c2 e0 08 be 8b e8 2e 04 73 00 e9 7b fe ff ff e8 24 8c 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 1406.651458][ T7221] RSP: 0018:ffffc9000cbf78c0 EFLAGS: 00010293 [ 1406.657621][ T7221] RAX: ffffffff812ad08c RBX: 000000010001af81 RCX: ffff888024bd9e40 [ 1406.665667][ T7221] RDX: 0000000000000000 RSI: ffffffffffffffa6 RDI: 0000000000000000 [ 1406.674006][ T7221] RBP: ffffc9000cbf7a50 R08: ffffc9000cbf7847 R09: 1ffff9200197ef08 [ 1406.682089][ T7221] R10: dffffc0000000000 R11: fffff5200197ef09 R12: 000000010001af27 [ 1406.690323][ T7221] R13: ffff88802885a310 R14: ffff88802885a480 R15: dffffc0000000000 [ 1406.698402][ T7221] FS: 0000000000000000(0000) GS:ffff888125d00000(0000) knlGS:0000000000000000 [ 1406.707465][ T7221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1406.714131][ T7221] CR2: 0000200000bd7030 CR3: 00000000291d4000 CR4: 00000000003526f0 [ 1406.722140][ T7221] Call Trace: [ 1406.726153][ T7221] [ 1406.729132][ T7221] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1406.734701][ T7221] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.740031][ T7221] ? process_scheduled_works+0x9ef/0x17b0 [ 1406.745854][ T7221] ? process_scheduled_works+0x9ef/0x17b0 [ 1406.751620][ T7221] process_scheduled_works+0xae1/0x17b0 [ 1406.757318][ T7221] ? __pfx_process_scheduled_works+0x10/0x10 [ 1406.763441][ T7221] worker_thread+0x8a0/0xda0 [ 1406.768194][ T7221] kthread+0x711/0x8a0 [ 1406.772293][ T7221] ? __pfx_worker_thread+0x10/0x10 [ 1406.777493][ T7221] ? __pfx_kthread+0x10/0x10 [ 1406.782129][ T7221] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.787476][ T7221] ? lockdep_hardirqs_on+0x9c/0x150 [ 1406.792787][ T7221] ? __pfx_kthread+0x10/0x10 [ 1406.797418][ T7221] ret_from_fork+0x4bc/0x870 [ 1406.802056][ T7221] ? __pfx_ret_from_fork+0x10/0x10 [ 1406.807458][ T7221] ? __switch_to_asm+0x39/0x70 [ 1406.812271][ T7221] ? __switch_to_asm+0x33/0x70 [ 1406.817142][ T7221] ? __pfx_kthread+0x10/0x10 [ 1406.821769][ T7221] ret_from_fork_asm+0x1a/0x30 [ 1406.826645][ T7221] [ 1406.829704][ T7221] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1406.837030][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1406.846612][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1406.856713][ T7221] Workqueue: iou_exit io_ring_exit_work [ 1406.862334][ T7221] Call Trace: [ 1406.865647][ T7221] [ 1406.868620][ T7221] dump_stack_lvl+0x99/0x250 [ 1406.873276][ T7221] ? __asan_memcpy+0x40/0x70 [ 1406.877929][ T7221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.883183][ T7221] ? __pfx__printk+0x10/0x10 [ 1406.887838][ T7221] vpanic+0x237/0x6d0 [ 1406.891863][ T7221] ? __pfx_vpanic+0x10/0x10 [ 1406.896405][ T7221] ? is_bpf_text_address+0x292/0x2b0 [ 1406.901738][ T7221] ? is_bpf_text_address+0x26/0x2b0 [ 1406.906995][ T7221] panic+0xb9/0xc0 [ 1406.910769][ T7221] ? __pfx_panic+0x10/0x10 [ 1406.915236][ T7221] ? ret_from_fork_asm+0x1a/0x30 [ 1406.920214][ T7221] __warn+0x334/0x4c0 [ 1406.924236][ T7221] ? io_ring_exit_work+0x4ed/0x930 [ 1406.929413][ T7221] ? io_ring_exit_work+0x4ed/0x930 [ 1406.934572][ T7221] report_bug+0x2be/0x4f0 [ 1406.938944][ T7221] ? io_ring_exit_work+0x4ed/0x930 [ 1406.944104][ T7221] ? io_ring_exit_work+0x4ed/0x930 [ 1406.949281][ T7221] ? io_ring_exit_work+0x4ef/0x930 [ 1406.954440][ T7221] handle_bug+0x84/0x160 [ 1406.958987][ T7221] exc_invalid_op+0x1a/0x50 [ 1406.963532][ T7221] asm_exc_invalid_op+0x1a/0x20 [ 1406.968413][ T7221] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 1406.974174][ T7221] Code: c6 05 63 52 5d 0e 01 48 c7 c7 40 09 be 8b be 24 00 00 00 48 c7 c2 e0 08 be 8b e8 2e 04 73 00 e9 7b fe ff ff e8 24 8c 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 1406.993812][ T7221] RSP: 0018:ffffc9000cbf78c0 EFLAGS: 00010293 [ 1406.999929][ T7221] RAX: ffffffff812ad08c RBX: 000000010001af81 RCX: ffff888024bd9e40 [ 1407.008025][ T7221] RDX: 0000000000000000 RSI: ffffffffffffffa6 RDI: 0000000000000000 [ 1407.016025][ T7221] RBP: ffffc9000cbf7a50 R08: ffffc9000cbf7847 R09: 1ffff9200197ef08 [ 1407.024029][ T7221] R10: dffffc0000000000 R11: fffff5200197ef09 R12: 000000010001af27 [ 1407.032028][ T7221] R13: ffff88802885a310 R14: ffff88802885a480 R15: dffffc0000000000 [ 1407.040043][ T7221] ? io_ring_exit_work+0x4ec/0x930 [ 1407.045232][ T7221] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1407.050754][ T7221] ? _raw_spin_unlock_irq+0x23/0x50 [ 1407.055979][ T7221] ? process_scheduled_works+0x9ef/0x17b0 [ 1407.061737][ T7221] ? process_scheduled_works+0x9ef/0x17b0 [ 1407.067496][ T7221] process_scheduled_works+0xae1/0x17b0 [ 1407.073117][ T7221] ? __pfx_process_scheduled_works+0x10/0x10 [ 1407.079161][ T7221] worker_thread+0x8a0/0xda0 [ 1407.083826][ T7221] kthread+0x711/0x8a0 [ 1407.087939][ T7221] ? __pfx_worker_thread+0x10/0x10 [ 1407.093102][ T7221] ? __pfx_kthread+0x10/0x10 [ 1407.097726][ T7221] ? _raw_spin_unlock_irq+0x23/0x50 [ 1407.103042][ T7221] ? lockdep_hardirqs_on+0x9c/0x150 [ 1407.108281][ T7221] ? __pfx_kthread+0x10/0x10 [ 1407.112899][ T7221] ret_from_fork+0x4bc/0x870 [ 1407.117531][ T7221] ? __pfx_ret_from_fork+0x10/0x10 [ 1407.122764][ T7221] ? __switch_to_asm+0x39/0x70 [ 1407.127567][ T7221] ? __switch_to_asm+0x33/0x70 [ 1407.132362][ T7221] ? __pfx_kthread+0x10/0x10 [ 1407.137058][ T7221] ret_from_fork_asm+0x1a/0x30 [ 1407.141853][ T7221] [ 1407.145261][ T7221] Kernel Offset: disabled [ 1407.149608][ T7221] Rebooting in 86400 seconds..