last executing test programs: 14.390176211s ago: executing program 4 (id=207): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x9, 0x1, 0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf001, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e7842237e6fff89cecf1a50f3d2ee3d"}]}}}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x5, 0x3, 0x3}) r4 = syz_open_dev$vcsa(&(0x7f0000000400), 0xda, 0x90800) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r5, r6, 0x0, 0x4000, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x9, 0x1, 0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf001, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e7842237e6fff89cecf1a50f3d2ee3d"}]}}}}}}}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x5, 0x3, 0x3}) (async) syz_open_dev$vcsa(&(0x7f0000000400), 0xda, 0x90800) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r5, r6, 0x0, 0x4000, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) (async) 14.146553293s ago: executing program 4 (id=208): r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x5, 0x400) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x6, 0x3, 0x1d}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x70bd27, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x800) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r11, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0xfffffffe, 0x1, 0x200]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100280000000000000002"], 0x34}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x5}, [{0x2, 0x1}, {0x2, 0x1}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x5}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x1}, {}], {0x4, 0x5}, [{0x8, 0x7f1899b66804818e, r14}], {0x10, 0x5}, {0x20, 0x6}}, 0x74, 0x1) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) read$msr(r5, &(0x7f0000000200)=""/60, 0x3c) sendto$packet(r1, &(0x7f0000000000)="dbe104b35716e67da422221d32860d4b1301", 0x12, 0x20000814, &(0x7f0000000100)={0x11, 0x7, r2, 0x1, 0x5, 0x6, @local}, 0x14) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000140)=""/118, 0x76, 0x4, 0x200}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x24040040) 13.521636066s ago: executing program 1 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x428480, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b140000001100010000000000000000000100000a157d07b902751cb7e67f530f47a098c471b13d35a4e097128dede724e43d8372cf773a60707aa37ca8efa9125b68e84bd5f27d9010e250fe5949b8ca47ddb55803e21779f2457d0fd5a2539e35bad9455ff02d26f1b2e567d140dc31e62aeb99ae3f740cffa971d8cd962f8d1e17e69b688266246065b45d118b5b481134bd8052dc5c1ce890e8b9af3022df718e6206211527692c38edd5e2d7fab9a4f5b8736bbd9805516b3ee103626cce815a6024f4aef827047534343de641b9a2230b63d07b32f7aa0085b951586d70beed031f6a330e423253d1e050983bd797d6500e160c0f59b819adf4af8754709da0e7c4dbfbe8"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getpgid(0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000880)='./bus\x00', 0x8000c6, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYBLOB="d0c1efab17ac62f9663173c5b10097782d4d33d5a19ee16ab40b9749687c68b968872d4700197a31505656991da2e2eb2ddf76ea41c0a196e0adf0ba0dbcc855645fc6e9df1ea001d2f292723945e07dd237b0cb36b96e4a79eed092da50b8715bd2ea82d8016ad9f2d044eb430695e5561d", @ANYRESHEX=r5, @ANYRES32=r5, @ANYRES64=r4, @ANYRES8=r2, @ANYRES32=r1, @ANYRES8=r0], 0x0, 0x17d, &(0x7f0000001ac0)="$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") r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00') 11.964033304s ago: executing program 0 (id=212): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) syz_open_dev$vcsn(&(0x7f0000000080), 0x3139, 0xe080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r1}, 0x18) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000021c0)}], 0x1) syz_open_pts(0xffffffffffffffff, 0xc0000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x25dfdbfb, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x2, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r3, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_clone(0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) (async) io_setup(0x206, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000015c0)=ANY=[], 0x0, 0x9a, 0x0, 0x0, 0x10001}, 0x28) 11.963673671s ago: executing program 4 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d0dc1eb33265175f765e5da9c6f236fd7f", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r0, r1, 0x2f, 0x2000, 0x4, @value=r3}, 0x20) 11.382622943s ago: executing program 0 (id=216): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800444, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5, 0x365, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40082, 0x182) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xb2, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x4, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x42, 0x4}}}}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800444, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5, 0x365, &(0x7f0000000980)="$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") (async) open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40082, 0x182) (async) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) (async) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xb2, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x4, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x42, 0x4}}}}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) 11.250105657s ago: executing program 4 (id=218): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000700)={0x0, 0x200}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000780)={r2, 0xffffffff, 0x20}, &(0x7f00000007c0)=0xc) syz_read_part_table(0x635, &(0x7f0000000000)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r4 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x8) sendfile(r4, r3, 0x0, 0x8002) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@empty, 0x34ff, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x1fc}}, 0x4000) 9.534353182s ago: executing program 4 (id=219): r0 = syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0xf89, &(0x7f0000001e80)="$eJzs3U9sHNUZAPA3a6/XiU28BgrmX0ihFYGCHZJITW9BoB4Rl/YMCgmNMBQ1VBURENMDohKiSIhTxYGKC6VSQCoSqFKFemp7atVbT6gXKlWpFNQDRUq2sv1mvTveya7H65m19/eTPr99M7PzfbNer2dmZ98GYGzV1n4eP76QhPD2p2898tKTycer0+5sL3Fo7WcSe80QQr2jn2TW93mccOXyi6d6tUk4uvYz7YdHL7XvOxNCWAmHwmehGT5YWv7y/XcePvzRq9M3vXH+6Zd3aPPbstsBAAB70cW/LP/j3n/9+f75ry8ePBka7enp/nkz9mfifv+RuKOc7i/XQnc/6YhOK0cmupabiFHLLDeRWd9kJs9kTr56Zj31nOWm+uSb6JjWazsBAABgN0qPa5shqS129Wu1xcX14/5Vn89NJYvPnl0+c66iQgEAAIDC/nth7aJbIcRwo9n+I6uuhmQEHoe9EJMV/x6FGLdojEANQgghxOZIKt+/33a05io68QAAAACMrex4YZusDHekrvbamoPlv/RQrff9YQjKfv5fO/90xfl7GPP8773iFQcAgOL26t5kul3pfnQ6jkF2HMGJzP22uv9fy6xncot15o0ruFvGG8yrM/u4jqq8+rf6e6xKWv9XrVarc3p2PMxRlff4Z8fpHFV59TdKrqOovPp7nPkZSXn17yu5jqLy6t9fch1F5dU/U3IdReXVP1tyHUXl1X9dyXUUlVf/gdUfBw9c456v7ExBW5RX/265rDav/mbJdRSVV/98yXUUlVf/9SXXUVRe/TeUXEdRefXfWHIdVbkjtunjcDBnuZkex3S75RgPAAAAxt3/jP8nhBBCdMb6JRDV1yHE8KM+AjWIsYy611UhRiIuVH0CAgAAAKhc+rmA9FPvrSidP9Fn/mTn/OmNBdL59T73n+ozv9FnPgAAABDC7187c8ubycZ4d9sdDy8dN2pf+PhqKDCOUXY8wq3m3+64Z9vNv1vGLQMAAGC8JN//7Op9j7z7/PzXFw+e7Dj6vRqPd9NxQCfjuYFPYj+9LmA200/SY+iT3XlqOctlzw9cl7e+x7a5oQAAADDG0uP3Zkhqix3H3c1Qqy0ubhyPL4R6cubs8ukjsZ9+M8uf5uqN1ekPllw3AAAAMLiN4/3ex//p9/guhKlk8dmzy2fOrfdn29Prtc7zAnMb05PO8wLNzPSjOdOPxX76/Z0/mtu3Nn3x1I+Xnxz2xgMAAMCYOPfC+aefWF4+/RM33HDDjfaNql+ZAACAYfvii7fqPz02+4f1z/9vjH93Nd44FPvNOLbfX+P09DqB9HMAmz6v/3h3nrm85Z7rXq6ZWW4iRiNT93THesLaeIPd95vPy9fsXs9UTr6ZTL7ZTL7sOAWTmeWTHmMJhh7jE6bLzWWmZ8dhnMzkSDL57+qRCwAAAFJLzz/z3NK5F84/cPaZJ546/dTpZ48dPfG9EyeOPPjdB5fWrutf6ry6HwAAANiNNi76rboSAAAAAAAAAAAAAAAAAAAAGF879S1izRCCkQUAAABgNPznQghhRYicSL9gsOo6xChHq1FZ7pnxeH6Gfn+Hs9XU9dqHW77PD/tuixBCCLHlWOn/v7LyaFRen+M+sRJCq5X9pnkAAACAnXXl8ounOttNVpKh5muvrbneXI1503b2gb/Pr0a62KWHus+X7B9qNYy7sp//8o9q/kbP+e+9Mtz802HjtS8M9PpX617Bya7evkHz3rP0m4V2/hDCrZMD5s9u/2ODZux2OJP/njBY/ta7mfyPd/Vqg+a/N5N//4D5N23/c4Nm7HZfzL8Q+4fvHjR/9yamz9J0OwZ9Anwns/1PhkHzZ7a/OWDCjPtjfgAYR+3/5q0L1Raybd37y+leQro/Ha8Sbm9v3N0M2asftrr/X8usZ7Jg9VnpetP9oJtjf7pdR3fe1FbrTx+X2dheV7DOrN1yVUle/cP6Pe60vPrrJddRVF79UyXXUVRe/b2P3kdPXv3TJddRVF79PY5D1/+k79/ZerYs53TObjmvnPf4z5RcR1F59c+WXEdRefVv9f94VfLqP1ByHUXl1T9Xch1F5dVf8LRa6fLqny+5jqLy6r++5DqKyqv/hpLrKCqv/htLrqMqt8U273g4Pf6ci/PSfjPTb/R4LAd+MwQAAADYUf8eyXEgOs4cVF6LEEIMLZL22+vV1yL2fkyOQA1CiF0UX7XWVV2HEHstbh+BGtJotao790D1dvbTzACMKq//4+0av/+flVkH1fD3P978/rmW9J34JNNPTfSZP9lnfr3P/KnM/OzztdFn/g2Z9bbS85rRjX3mfyNuQd78A33uf3Of+Qt95t/SZ/6taxPz59/W5/4AAACMh5tiu3Z8uDzVPkCstioAAABgmF767Sev/+6exy/Pf33x4MkwtWnc+SOx34jvrb8W+9lx71P1+J7/z2P/17H9Y2z/mVne9ScAAACw89LviXF9OAAAAOxd6feUOv4HAACAvWs+ttc8/m+UXhYAAAAwRNfH1vv/AAAAsIcl070nxzY9L3BXbAcd1w8AGH23x/aO2B6M7Z2x/WZs0/2Au2P7rZLqAwCG51c/+MWJN5ON8f6PZeZfidPTdpOV9TMFSa17JP99sd0f228PWE/2+wAGzZ86MGCenco/t838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeUVv7efz4QhLC25++9cgvp17/2+q0O9tLHFr7mcReM4RQb98vnbvR/zAueOXyi6c626uxTcLRkISkPT08eqmdaSaEsBIOhc9CM3ywtPzl++88fPijV6dveuP80y/v4EPQtX0AAACwF/0/AAD//2akICw=") r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) close(r0) 8.681086915s ago: executing program 2 (id=220): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_bond\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) 8.679417129s ago: executing program 1 (id=221): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1c, 0xff}, {0x50, 0x0, 0x0, 0x10000}, {0x6}]}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) unshare(0x2a020400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.779005041s ago: executing program 4 (id=223): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtaction={0x2180, 0x30, 0x1, 0x0, 0x0, {}, [{0x216c, 0x1, [@m_pedit={0x2120, 0x1d, 0x0, 0x0, {{0xa}, {0x2040, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x1, 0x10, 0x6, 0xfffffff8, 0xfffffffb}, 0x40, 0x9, [{0x400, 0x1be1b1df, 0x10001, 0xa, 0x4, 0x3}, {0x8, 0x72, 0x4, 0x7, 0x4a03d7c7}, {0xc7b, 0x5, 0x1, 0x1, 0x80000000, 0x2}, {0x400, 0x6, 0x0, 0x2, 0x9, 0x7}, {0x9, 0x9, 0x7fa2, 0x2, 0x8, 0xfffffffc}, {0xffffffd3, 0x7f, 0x3, 0x6, 0x0, 0xf5266d05}, {0x8, 0x0, 0x4, 0x8, 0x1000, 0x7}]}, [{0xa, 0x8, 0x5, 0xfffff5b6, 0x0, 0x8}, {0x4, 0x71a9, 0x5, 0xff, 0x3, 0x6}, {0xfffffff9, 0x7fffffff, 0x7, 0xed, 0xfff, 0x10001}, {0x9, 0x2, 0x7, 0x3, 0x9, 0x2000}, {0x27fbcf92, 0x2, 0x9, 0xd389, 0x10001, 0x80}, {0x1, 0x3ff, 0x18d000, 0xd, 0x1000, 0x8}, {0x200, 0x7, 0xc, 0x3, 0x4b1, 0x5}, {0xfffffffb, 0x10000, 0x8, 0x1, 0x7a27, 0xfffffffd}, {0x3e77, 0x4, 0x1, 0x8001, 0x1ff, 0x7f}, {0xe2, 0xc, 0x7cb9, 0x3ca, 0xfffff92d, 0x5}, {0x1, 0x0, 0xf, 0x4, 0x9, 0x3ff}, {0x7f, 0xfffff800, 0x9, 0x80000001, 0xfffffffa, 0x748}, {0x7fff, 0x8001, 0xb7b0, 0xd, 0x10, 0x2}, {0xfffffffc, 0x5, 0x4, 0x9, 0x101, 0x7fffffff}, {0x80, 0x2, 0xa930, 0x4, 0x9, 0x7}, {0xe, 0x10001, 0x81, 0x0, 0x7, 0x956}, {0xe, 0x100, 0x3, 0x2, 0xfffffffc, 0x5d10}, {0x0, 0x80000001, 0xfffffff8, 0x8, 0x6, 0x101}, {0x40, 0xc0000000, 0x8, 0x9, 0x5, 0xd4}, {0x2a5, 0x9, 0x3, 0x800, 0x6, 0xe4c9}, {0x2, 0x0, 0x2, 0x0, 0x2, 0x7fffffff}, {0x9, 0xfffffffb, 0x3a2, 0x2, 0x400, 0xb}, {0x3, 0x7, 0x8, 0xffff2124, 0x7f, 0x40}, {0x5, 0x93ce, 0x1000, 0x10000, 0x6, 0x5}, {0xe, 0xb, 0x1, 0x7ff, 0xffff, 0x2}, {0x0, 0xf, 0x9, 0x3ff, 0x80, 0x3}, {0x0, 0xe0, 0x800, 0x10, 0x1, 0x7}, {0x5, 0xe333, 0x1, 0xfff, 0xb6a, 0x81}, {0x10000, 0xa3c, 0xffffffff, 0x7, 0x0, 0x5}, {0x2c80, 0x0, 0x7, 0xa3d, 0x1400, 0x3}, {0x3e0, 0x4, 0xa6cb, 0x7, 0x200, 0x430}, {0x2, 0x4, 0x0, 0x0, 0x80000000, 0x2}, {0x3e0, 0x2, 0x4, 0x4, 0x3, 0xffffffff}, {0x440, 0x7, 0x7f, 0x2, 0xcc1, 0x2}, {0x4, 0x2, 0x7, 0x3f6, 0xfffffc24, 0x2}, {0xfc000000, 0x12fc, 0x9, 0xbb1, 0x9, 0x1}, {0x8, 0xfff, 0x8, 0x8, 0x6, 0x7}, {0xf, 0x8, 0x0, 0x1, 0x80000001, 0x400}, {0x7fff, 0x4, 0x5, 0x10001, 0x9, 0x1}, {0xffffffff, 0x1, 0x7, 0x7, 0x1, 0xfffffffe}, {0x2f8, 0x5, 0x1c88, 0x9, 0x1, 0x4}, {0x400, 0x5, 0x101, 0x10000, 0xc2, 0xa}, {0x2c15, 0x3ff, 0x7fff, 0x60000000, 0x1, 0x7fff}, {0x6, 0x4, 0xf, 0x1, 0xfffffffb, 0x6}, {0x7, 0x0, 0x5, 0x578, 0x9f49, 0xfffffffc}, {0x8b, 0xfff, 0x7fffffff, 0x80000000, 0x9, 0x9}, {0x40, 0x800, 0x1c8, 0xff, 0x5, 0x17}, {0xeb, 0x2, 0xc51, 0xfffffffc, 0xa8, 0x8}, {0x6, 0x10, 0x8000, 0xe31, 0x8, 0xfffffffb}, {0x10000, 0x7fff, 0x2, 0x0, 0xffffffff, 0xb8}, {0x0, 0x9, 0xf, 0x4, 0x200, 0x10001}, {0x2, 0x7, 0x0, 0x9, 0x2, 0x37}, {0x55, 0x1, 0x7f, 0xb3c, 0x258, 0x101}, {0x2, 0x7ff, 0x0, 0x5ee, 0x5, 0xb75}, {0x8000, 0x228d, 0x92c, 0x3, 0x8, 0x58}, {0x2, 0x80000001, 0xfffffffe, 0x1, 0x80000000, 0x8}, {0x6, 0x0, 0x8, 0xc, 0x10, 0x2}, {0x7fff, 0x5, 0x5, 0x2, 0x9}, {0xe, 0x7, 0x1, 0x6, 0xfff, 0xffffffff}, {0xa, 0x1, 0x6, 0x6, 0x5, 0x7}, {0x9, 0x10, 0x0, 0x4, 0x8, 0x8}, {0xf4d1, 0x7, 0x7, 0x4, 0x4, 0xe7}, {0x7f, 0x401, 0x1, 0x3, 0x3, 0xfae}, {0x6, 0x8, 0x4, 0x0, 0xfffffff8, 0x3}, {0xfffffffd, 0x3, 0x4, 0x401, 0x400, 0x719}, {0x1, 0xfffff800, 0x81, 0x82, 0x8, 0x401}, {0x1ff, 0x0, 0x5, 0x82, 0xdcde, 0x80000000}, {0x5, 0xffffff81, 0x6, 0x6, 0xd6, 0xa1}, {0xa, 0xfff, 0x7, 0x81, 0xcfad, 0x1000}, {0x7, 0x405f, 0xfffffffd, 0x400, 0xffff, 0x5}, {0x81, 0x81, 0x6, 0xfff4, 0x7, 0x8}, {0x3a9b, 0x3f, 0x1, 0x7fffffff, 0xb, 0x1}, {0x1ff, 0xfffffffb, 0x4, 0x0, 0x1, 0x1}, {0x4, 0x8, 0x5, 0x5d, 0xc6a7, 0x2f5662f5}, {0x9, 0x10000, 0x2, 0x5, 0x0, 0xbe}, {0x6, 0x6, 0x8, 0x6, 0x9, 0x80}, {0x4, 0x8, 0x0, 0x26, 0x0, 0x6}, {0x3, 0x8, 0x4, 0x36d, 0x81, 0xb39}, {0x8, 0x6, 0x0, 0x6, 0xfffff468, 0x8}, {0x7, 0x274, 0x5, 0x1, 0x6, 0x8}, {0x4, 0x0, 0xf, 0xc3, 0x5, 0x9}, {0x2, 0xe3, 0x1ff, 0x3, 0x2, 0xb}, {0x2, 0xb63e, 0x5, 0x2, 0x1ff, 0xfffff134}, {0x6, 0x5, 0x5, 0xd07c, 0x1ff, 0x8}, {0xec2, 0x40, 0x5, 0x7, 0x2, 0x1}, {0x4, 0x5, 0x4, 0x2, 0x800000}, {0x5, 0x401, 0x40, 0xfffffffa, 0x7, 0x7f}, {0xfffffffe, 0x4, 0x3, 0x1ff, 0x8644, 0x7}, {0x7, 0x6, 0x2, 0x80000001, 0x3ff, 0x1}, {0x2, 0x6dd, 0x7, 0x8, 0x10000, 0x6}, {0x400, 0x4, 0x80, 0x2, 0x9, 0x7}, {0x4, 0x9, 0x8000, 0x58b667b4, 0x6, 0x6}, {0xf, 0x3, 0xf, 0x3, 0x8, 0xfb5}, {0x3, 0x3, 0x40, 0x400, 0x1, 0x8}, {0x2, 0x4, 0x9, 0xfffffffc, 0x0, 0x2}, {0x60000, 0x3, 0x0, 0x4c0b, 0x9, 0x1}, {0x5, 0x3, 0x4, 0x1, 0xa8, 0x8}, {0xffff, 0x0, 0x3, 0xffffff7f, 0x579, 0x1}, {0x400, 0x101, 0x1, 0xe2, 0x80000000, 0x1}, {0xb, 0x5, 0x8, 0x8, 0xf, 0x7}, {0x97, 0x10001, 0x8, 0xfffffff9, 0x6, 0x9}, {0x266, 0x401, 0x3, 0xb, 0x2, 0x1}, {0x7fffffff, 0x0, 0xd41, 0x4, 0x5, 0x38}, {0x1, 0x0, 0x80, 0xed6, 0x1, 0xffff}, {0x0, 0x2, 0x4b, 0x800, 0x80, 0x2}, {0x4, 0x5, 0x3, 0x7fffffff, 0x9, 0x7}, {0xd, 0xc, 0x8a, 0x60000000, 0x0, 0x101}, {0x2caf, 0x8, 0xd, 0x5, 0x81, 0x3}, {0x7, 0xc, 0x746, 0x7fffffff, 0x7}, {0x3, 0xffffffff, 0x3ff, 0x4, 0x6, 0x1}, {0x9f42, 0x2, 0x4, 0x7912, 0x1f53, 0x8001}, {0xffff45fb, 0x7, 0xe, 0x1, 0x9, 0x3}, {0x7, 0x4, 0x9, 0xfffffffd, 0x3ff, 0x4}, {0xe, 0x6, 0x8000, 0x98e5, 0xff, 0x1}, {0x9, 0x8, 0x80, 0x1, 0xf203, 0x9}, {0x4, 0x0, 0x6, 0x0, 0x7, 0x2}, {0x74, 0x7fff, 0x3, 0x2, 0x81, 0x8}, {0x1, 0x9, 0xd6, 0x4, 0x40, 0x1}, {0x5, 0x8, 0x6, 0x38cead99, 0x91, 0xb}, {0x0, 0xe2, 0xa, 0x2, 0x30e18edd}, {0x3, 0x10001, 0x8001, 0x4, 0x6}, {0xff, 0x19a, 0xcc3, 0xe, 0x7, 0x80000000}, {0xc4b2, 0x4, 0x3, 0x4, 0x7ff}, {0x1, 0x8, 0xc, 0x951b, 0x5, 0x4}, {0x10000, 0x2, 0xe, 0x4a75, 0x2, 0xf85}, {0x8000, 0xffffffff, 0x8000, 0x6, 0x0, 0x401}, {0x1ff, 0x7f, 0x4, 0x7ff, 0x5, 0x2}, {0x8, 0xf85a, 0x1, 0x5, 0x400, 0x40}], [{}, {0x1}, {0x3, 0x1}, {0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {}, {0x2}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x12, 0x3, 0x8, 0x100, 0x3}, 0x9, 0xb, [{0x6, 0x776, 0x6, 0x9, 0x4, 0x3}, {0x0, 0x0, 0x3, 0x1ff, 0xfffffffe, 0x9}, {0x7, 0x2, 0x6, 0x80000001, 0x6, 0x2d2c}, {0x7, 0xffcd, 0x8, 0x2, 0x6, 0x2}, {0x9, 0x0, 0x8, 0x9, 0x1, 0x401}, {0x0, 0x3, 0x80000000, 0x11490b3b, 0x0, 0x3}, {0x10001, 0xfffffff9, 0x3, 0x9, 0x9, 0x9}]}, [{0x513b, 0x10000, 0xa9, 0xa, 0x6, 0xc08}, {0x8, 0xd6, 0x9, 0x4df, 0x5, 0x101}, {0x401, 0x200, 0x332, 0x7, 0x9c, 0xb}, {0xfffffff1, 0xffff, 0x4, 0x7, 0x6}, {0x6, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x10, 0x1, 0x8, 0x3, 0x7, 0x80000000}, {0x5, 0x101, 0x7fffffff, 0x7, 0x1, 0x1000}, {0xffffff15, 0x80, 0x1000, 0xd, 0x2, 0xc000000}, {0xc9, 0xb02, 0x8, 0x6, 0x5, 0x9f3}, {0x44a, 0x100, 0x4, 0x80000001, 0x2, 0x101}, {0x3, 0x7, 0xd11, 0x44, 0x4, 0x4}, {0x1ff, 0x2, 0x6, 0x6, 0x10001, 0x6}, {0x1, 0x6, 0x8, 0xffffffff, 0x7f, 0xf55}, {0x9, 0x2, 0x6, 0x89e, 0x1, 0x61a3}, {0x4, 0xfceb, 0x7f8aa633, 0x1, 0x6, 0x3}, {0x5, 0x3, 0x6, 0x0, 0xe566ef08}, {0xc4a, 0x9, 0x5, 0xe05c, 0x3, 0x40000000}, {0x817, 0x6, 0x8, 0x0, 0x9, 0xf}, {0x7, 0xfffff000, 0x10000, 0x4, 0x9, 0x6}, {0xffff, 0xffffff7f, 0x1, 0xa7, 0xab, 0x1}, {0xfff, 0x40, 0x4f8988eb, 0x1e3, 0xfffffff9, 0xbbd1}, {0x2, 0x7fff, 0xfffffe01, 0x80000000, 0x1, 0xfffffffc}, {0xc, 0x9, 0x5, 0xffff, 0x5, 0x4}, {0x3, 0xff, 0x200, 0x101, 0x6, 0x10}, {0xc8, 0x8, 0x6, 0x56, 0x20000, 0xaa8a}, {0x10000, 0x49ea, 0x4, 0x8, 0x2, 0x2}, {0x1, 0x7, 0x6aa9, 0x805, 0x2, 0xd}, {0x5, 0x0, 0x7fff, 0x0, 0x6, 0x1}, {0xe1e, 0x8001, 0x2, 0x1, 0x80000000, 0xfffffffc}, {0x0, 0x8, 0x6, 0x3, 0x1}, {0x80, 0x8001, 0x25, 0x1, 0x0, 0xfffffffc}, {0x4, 0xf900, 0x101, 0x10001, 0xd, 0x8}, {0x7, 0x7b, 0x9, 0x7fffffff, 0x5, 0x7}, {0xf, 0x10, 0x1b, 0x1, 0x9, 0x100}, {0xd, 0x0, 0x80000000, 0x8000000, 0xca9d, 0x2}, {0x1, 0x3, 0x8001, 0x1, 0x1, 0x9}, {0x3, 0x7, 0xffff, 0x9, 0xe, 0x34}, {0x3, 0x2, 0x10001, 0x7, 0xc5, 0x7}, {0x4, 0xe2, 0xc47c, 0x2, 0xbc, 0x7}, {0x3631, 0x6bd7, 0xf, 0x81, 0x10, 0x172029e}, {0xfffffffc, 0x0, 0x9, 0x0, 0x8, 0x21}, {0xabb, 0xa9fd, 0x3, 0x1, 0xffffffff, 0x6}, {0xf, 0x6, 0x2, 0x6, 0xb, 0xffff1e55}, {0x101, 0x10, 0x4, 0x6, 0x2, 0x7ee}, {0x3, 0x3, 0x7, 0x3, 0x2, 0x1}, {0x101, 0x4, 0x7, 0x7, 0x4, 0x8}, {0x8, 0x1, 0x6, 0x2, 0x0, 0x1}, {0x12, 0x4, 0x8000, 0x8, 0x200, 0x1}, {0x3, 0x89ca, 0x4, 0x6f75, 0xfffffff9, 0xffff}, {0xfff, 0x5, 0x0, 0x3000000, 0x8, 0x8001}, {0x5, 0x6, 0x9, 0x7ff, 0x7, 0x6}, {0xe, 0x5, 0x9, 0x0, 0x3, 0xe}, {0x5, 0x9, 0x10001, 0xfffffff8, 0xecd, 0x401}, {0x7, 0x5000000, 0x8, 0x213c, 0x6, 0xfffff63a}, {0x5, 0x4, 0x6, 0x4, 0x5, 0x7f}, {0x7, 0x1, 0xffffffff, 0x6, 0x3, 0x9}, {0x80, 0x2, 0x5, 0x1ff, 0x6, 0x5}, {0xc4a, 0x200, 0x8, 0x9, 0x9, 0x2}, {0x10, 0x100, 0xffff15be, 0xd, 0x8, 0x101}, {0x1, 0x2, 0x1ae00, 0x10000, 0x7fff, 0x7}, {0x7ce1, 0x4, 0x9, 0xa, 0x999, 0x5}, {0x1ff, 0xfffffc01, 0x4, 0x7, 0x0, 0x1}, {0x0, 0x7, 0x57, 0x14c588ba, 0xb, 0x3}, {0x6, 0x101, 0x1000, 0x3, 0xa752, 0xc}, {0x6, 0x282, 0x7, 0x3, 0x0, 0x8}, {0x5, 0x10001, 0xf2a, 0x7f, 0xd95, 0x1}, {0xfffffffc, 0x15, 0x1, 0xfffffff8, 0x8, 0x8}, {0x1, 0x4, 0x4, 0x22f, 0xa, 0x800}, {0x51c, 0x1ff, 0x8, 0xa, 0x4, 0x5}, {0x7, 0x1, 0x7, 0x8, 0x3, 0x9}, {0x10, 0x5, 0x113f, 0x80000001, 0x9, 0xf}, {0xfffffff8, 0xc, 0xfffffe00, 0xd, 0xdd, 0x4}, {0x0, 0x5, 0x2b5, 0x6, 0x6, 0x3}, {0x9, 0xfff, 0x401, 0x6, 0x6, 0xffff}, {0x6, 0x4, 0x81, 0x1, 0x10001, 0x2}, {0x8, 0x9, 0x10001, 0x8, 0x6eb, 0x7fff}, {0x7, 0x81, 0x7fff, 0xaa, 0x7fff, 0x5}, {0x2, 0x6, 0xb01, 0xffff, 0x10001, 0x4}, {0xfffffffd, 0xfffffff9, 0x4, 0x8000, 0x6c05, 0xf4b}, {0x9, 0x69e9, 0x5, 0x7, 0x825, 0xbcdd}, {0x5, 0x9, 0x8, 0x8, 0x6, 0x5}, {0x9, 0x9, 0x1000, 0x9, 0x3, 0xcf}, {0x1000, 0x2, 0x17a5, 0x8, 0x792, 0xb614}, {0x3d0d, 0xfd1, 0x67, 0x3, 0x8, 0x1}, {0x9, 0x7, 0x4, 0xf0d, 0x9, 0x3045}, {0x7, 0x9, 0x1, 0x7ff, 0x401, 0x8}, {0x7, 0x0, 0x1, 0xfffffffb, 0x2, 0x2}, {0x5, 0x2f65, 0x7, 0x8, 0x6, 0x2}, {0xfffffff8, 0x8, 0xb8eb, 0x7fff, 0x7, 0x7}, {0x3, 0xf3, 0x9, 0x2, 0x5, 0x2}, {0x7, 0x401, 0x9, 0x5, 0x7fffffff, 0x10}, {0x4, 0x85d9, 0x5, 0x7, 0x3, 0x1}, {0x2, 0x10000, 0x5, 0x8, 0x700000, 0x7}, {0x1, 0x4, 0x7, 0x401, 0xffffffff, 0x3}, {0x9, 0x3, 0x9, 0x10000, 0x200, 0x4}, {0x9, 0xc, 0x1, 0x178, 0x1000, 0x700}, {0x80, 0x0, 0x2, 0x8001, 0xb9ed, 0x101}, {0x400, 0x7f, 0x80, 0x7f, 0x9, 0xb}, {0x8, 0x77, 0x8001, 0x7ff, 0x2, 0x40000}, {0x0, 0x80f6, 0x6, 0x8001, 0x10, 0x901}, {0xf, 0x8, 0x10, 0x9, 0x6, 0x3}, {0xb, 0xb, 0xef0e, 0x0, 0xfffffffb, 0x3}, {0x2, 0x3, 0x5, 0xe6b3, 0xfffffc00, 0x4}, {0x7, 0x7, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x800, 0x4, 0x8000, 0x3}, {0x2, 0x3, 0x9575, 0x6, 0x7, 0x9}, {0x2, 0xfffffffa, 0x1, 0x6, 0x1, 0x7}, {0x4, 0x7ff, 0x200, 0x52a2, 0x3, 0x6}, {0x7, 0x6, 0x8, 0xfffffff8, 0x8, 0x8}, {0x8, 0x9, 0x80, 0x1, 0x9}, {0x7, 0x44, 0x5, 0xb, 0x6, 0xfff}, {0x5, 0x800000, 0x7f5e, 0x8, 0xc9, 0x4b00000}, {0x8, 0x80, 0x7, 0x1, 0xffffcba8, 0x9}, {0x2, 0xd6a1, 0x1, 0x6, 0x660}, {0x0, 0x4, 0x3, 0x8, 0x40}, {0x1, 0x2, 0x0, 0x7, 0x5, 0xe}, {0x0, 0x6, 0x9, 0x1, 0x2, 0x4}, {0xa, 0x6d9a, 0x7, 0x40, 0x9e, 0x7}, {0xb, 0x80, 0x3, 0x6, 0x100, 0x2}, {0x394, 0x6, 0x6, 0xeba, 0x2, 0x7}, {0x9, 0xd29e, 0x80, 0x368, 0x3, 0x5}, {0x5, 0x5, 0x8, 0xb, 0x4, 0x8001}, {0x8000, 0x1, 0x70, 0x10000, 0x3, 0x75d}, {0x6, 0xa2fb, 0x7, 0x2, 0x1, 0x1}, {0x25, 0x2, 0x8, 0x0, 0x7, 0x8}, {0x7, 0x5e07502a, 0x4, 0x6, 0x3, 0x80000001}, {0xc, 0x495, 0x1, 0x0, 0x2, 0x4}, {0x4, 0xffffffff, 0x81, 0x1, 0x7ff, 0x1ff}], [{}, {0x6}, {0x1}, {0x3}, {}, {0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x3}, {0x7}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x198, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb6, 0x6, "c2fd3b7fd4d0f580d542024329352003395c9456fd82d8191e6c5273bea88ef677180b3735355fd815db51ee49842e2ae8568c81134146cf2316b20fbc6600a7ed41918d8012f9f5222551145e99691229fadd884e9e4ab584817ea35369b8ed8eb384a88ff0c26225298106a44b92548dc10660de791ea46d22fc0ee0d98bb6b4c35370e1afa7d50cf80e431021d7e58197260639b3f2bf35233b9abb33e26f2cd6571fa047adf30a460b6e21615c04007f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x2180}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000285000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd7d}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.741402159s ago: executing program 1 (id=224): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe2b) r1 = socket(0x1d, 0x80000, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r1}, 0x20) close(r1) (async) close(r1) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000000c0)={0x3e, 0x3, 0x80}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007bacdc1043195522"], 0x0) bind(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x2, 0x0, 0x1}}, 0x80) 6.690619647s ago: executing program 0 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x413, 0x70bd29, 0x25dfdbfc, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast2, 0x800, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8, 0x80004, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0xfffffffd, 0x2, 0x4, 0x81, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = dup(r1) (async) r5 = fanotify_init(0x200, 0x0) (async) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x48000047, r7, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x7ff, 0x0, 0x100000000000004, 0x10000, 0x100, 0x100, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x40002, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0x40000e, 0x7, 0x0, 0x2000000e6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x4, 0xab6, 0x4, 0x4, 0x1, 0x6, 0xb, 0x139790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x8c7, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r8 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) (async) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x0, 0x4b}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100006}, 0x94) 6.121681881s ago: executing program 0 (id=226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r2, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) (async) mlockall(0x7) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x325, 0x70bd28, 0x25dfdbfe}, 0x9}, 0x1, 0x0, 0x0, 0x48041}, 0x40080) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)={0x0, 0x1000000}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) 5.439697116s ago: executing program 2 (id=227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x40}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x81a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0xa206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5.26575804s ago: executing program 0 (id=229): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x405c015}, 0x4000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xc, 0x8, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x809a, 0x4, 0x1, 0x2}, [@mdlm_detail={0x22, 0x24, 0x13, 0x8, "a2d94f53bd124ae8b23f3d11308cae004f5728c30f38902e5db641ba25b8"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x3, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.061071242s ago: executing program 3 (id=230): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 4.64059377s ago: executing program 3 (id=231): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0x81490000) (async, rerun: 64) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) (async) setreuid(0xffffffffffffffff, 0xee00) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) listen(r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000000380)=[{&(0x7f0000001380)=""/129, 0x81}, {0x0}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000000)={0x74ce0001, 0x7fd, 0x1}) (rerun: 64) 4.507376766s ago: executing program 3 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) (async) close(0x3) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, 0x0) 4.486768667s ago: executing program 1 (id=233): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xff000000, 0x0, 0x1fffffffe, 0xff000000], 0x4e22, 0x4e22, 0x4e24, 0x4e22, 0x83d, 0x0, 0x0, 0xef1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x2, 0x4, 0xd, 0x0, 0x2], 0x6, 0x1}, {0xffffffffffffffff, [0x5, 0x2, 0x6, 0x6, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) (async) r1 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc2b, &(0x7f00000001c0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x208800, &(0x7f0000001f00)={[{@verity_require}]}) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0x4018aee3, &(0x7f0000000240)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8b}}, 0x0, 0x0, 0x403, 0x0, 0x33}, 0x9c) (async) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e28, 0x10001, @mcast1, 0x3}, 0x1c) (async) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)="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"}], 0x60, 0x0, 0x0, 0x2c}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x80086c42, 0x0) 4.423705872s ago: executing program 2 (id=234): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3514, 0x9141, 0x69, 0x0, 0x0) 4.190430484s ago: executing program 2 (id=235): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdcbbbb0800450000300000000006019078ac1e0001ac1414aa03709078000980"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x810, r0, 0x582e2000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xda5c, 0x4, 0x5}, 0x50) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@gid}, {@gid}, {@nostrict}, {@uid}, {@noadinicb}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x1}}, {@shortad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 4.080033241s ago: executing program 1 (id=236): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x5, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000580)={0xa0002008}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000100)={0x40000010}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0x25, 0x5, 0x0) r9 = syz_io_uring_setup(0xae1, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0xfffffffa}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa0}, @jmp={0x5, 0x0, 0xc, 0x9, 0x1, 0xfffffffffffffff0, 0x8}, @func, @ldst={0x0, 0x3, 0x2, 0x4, 0x1, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @jmp={0x5, 0x1, 0x0, 0x9, 0x5, 0x10, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4, 0x9, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r12, r13, 0x25, 0x4, @void}, 0x10) truncate(&(0x7f0000000180)='./file3\x00', 0x20fffffffc) 3.786121366s ago: executing program 3 (id=237): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x0, &(0x7f0000000080)=0x9) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000000c0)={0x40000000, 0x6, "17fb6f7bb89c76f6226e72b7147a67be3452847f7f17691c0c1343817b997800", 0x1000, 0x2, 0x7, 0x5, 0x401, 0x1, 0x9, 0x7, [0x4000, 0x7, 0x7ff, 0x7]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x79}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc8, 0x3, "65ec0458023c5544f95770611193bbbece6608778a44c66e0a4d07b81698115370387b576ae9d8435807117085071934d91fe711c388d41df5062df81d465260963e967f7a34ca1ee022b64214c50e795c4b9748b6064baa7eb2cfe5e7c1a247cf93b9e8904904ca70f3a21ad561a32e26ac92a2b872fc470b0eec22e1d9c91f75aa360d1e6ef0f2ff3c090d8b905f9f678383ef9a8c841018141c34964868f106cd6a86257ac6a5730179eecb074c142a43ddb91206d97d43700a320814a0dd627e9e23"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x86}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x394, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xffffff17}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @remote, 0xfffffffb}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c96}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4235}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfb8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc2c4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xcd61, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe454}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x591, @mcast2, 0xe}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x54, @loopback, 0xa}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x80}, 0x24008801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r5, &(0x7f00000009c0)={0xfffffffffffffffa, 0xfffffffffffff66a, 0x1, 0x2}) connect$rxrpc(r4, &(0x7f0000000a00)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xf3db, @mcast1, 0x4}}, 0x24) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000a40)=""/120, 0x78}, {&(0x7f0000000ac0)=""/103, 0x67}, {&(0x7f0000000b40)=""/189, 0xbd}, {&(0x7f0000000c00)=""/176, 0xb0}, {&(0x7f0000000cc0)=""/132, 0x84}, {&(0x7f0000000d80)=""/74, 0x4a}, {&(0x7f0000000e00)=""/192, 0xc0}, {&(0x7f0000000ec0)=""/176, 0xb0}, {&(0x7f0000000f80)=""/108, 0x6c}], 0x9, &(0x7f00000010c0)=""/41, 0x29}, 0x8000}, {{&(0x7f0000001100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001180)=""/41, 0x29}, {&(0x7f00000011c0)=""/47, 0x2f}, {&(0x7f0000001200)=""/211, 0xd3}, {&(0x7f0000001300)=""/35, 0x23}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/127, 0x7f}], 0x6, &(0x7f0000001480)=""/126, 0x7e}, 0x17}, {{&(0x7f0000001500)=@ieee802154, 0x80, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, &(0x7f00000025c0)=""/226, 0xe2}}], 0x3, 0x20000, &(0x7f00000027c0)={r6, r7+10000000}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002840), r2) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x2000c089) r10 = openat(r4, &(0x7f0000002940)='./file0/../file0\x00', 0x840, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002980)={r10, r8, 0x25, 0xd, @void}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002a00)={0x1, &(0x7f00000029c0)=[{0xb7, 0xf0, 0x3f, 0x8}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8983, &(0x7f0000002a40)={0x8, 'vxcan1\x00', {'nr0\x00'}, 0x2}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000002a80)={0x0, 0x8}, &(0x7f0000002ac0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000002b00)={r12, @in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}}, 0x5, 0x3, 0x8, 0x7, 0x4, 0x9, 0x6}, 0x9c) ioctl$INCFS_IOC_CREATE_FILE(r11, 0xc058671e, &(0x7f0000002e40)={{}, {0x2}, 0x1, 0x0, 0x0, &(0x7f0000002bc0)='./file0/../file0\x00', &(0x7f0000002c00)='./file0/../file0\x00', &(0x7f0000002c40)="e419968005994f5202b01d1bc610e65a442ff813a4f52620bcb7bab6476e598f08837ee47dbed9a7d4baa8133072c365905ef23eae7991793589de6870b686a8949a521b68bab346a420777a524446c506e24de73e94d56e10a1f1ed7ed58ad8ca7ed2451af1348ebf6d7cc623b5b906aaefdb6486cfabbf38b469bfb62713687f4a3710d3cc3a09b32488f641c5baf9a6fb539e7411368e799558f77c1fbcf10891d90e20610c473261738ff64f8a5233bcad8a2714b4756d20a4649cfd4a5733f504e38e83a70769", 0xc9, 0x0, &(0x7f0000002d40)={0x2, 0x3a, {0x0, 0xc, 0x11, "30d6d3c662cad58dac17ab49cd82083f2b", 0x1c, "46c78e5897ad8838dda4ff3ec8d24fd39b7267b4bd2741d1a2a21247"}, 0x89, "a90d0af76e9cc620e34b7974d9fb2a25f0a9666906d79c9f07ad312f6c7d3c47f1af11fc584aa5821b80cf8e2301a7c8f86e4ab8905838a24bf0cef7862f2ca4f5fc051058c6583e74d7432edc9ce68de42e885f3ebc71d82ca11db9d755d7ad3110cfe704f9f165c9a22a14eeb6048c8725a94d7963e3d3ecf9c00c8a60dfaf3fa6a9102b6d9fa58a"}, 0xcf}) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002fc0)={'sit0\x00', &(0x7f0000002ec0)={'tunl0\x00', r8, 0x20, 0x10, 0xfffffffc, 0xffff7fff, {{0x33, 0x4, 0x3, 0x9, 0xcc, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0xd, "40dac42e6b6b280913af45"}, @timestamp={0x44, 0xc, 0x55, 0x0, 0x9, [0x80000001, 0xc]}, @timestamp={0x44, 0x14, 0x7b, 0x0, 0x6, [0x0, 0x7f, 0x2, 0x8]}, @noop, @ssrr={0x89, 0x7, 0x77, [@multicast2]}, @rr={0x7, 0x7, 0x60, [@local]}, @generic={0x89, 0xe, "ea986e7ebf870a6ca2672720"}, @cipso={0x86, 0x16, 0x3, [{0x0, 0x10, "22a2a5a32983f2d225cb4a966cae"}]}, @cipso={0x86, 0x56, 0x3, [{0x0, 0x5, "9c1bb6"}, {0x7, 0xc, "a398258962586e6c5b05"}, {0x7, 0x10, "a44ad966ff6068efa7f334bf1e23"}, {0x2, 0xc, "cf8085f492a0e5c3a0fb"}, {0x6, 0x11, "079ef93115215eab992e684f031164"}, {0x1, 0x12, "adef8d68f4bb99111408ed67e4777319"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r13, 0x0, 0xcb, &(0x7f0000003000)={0x0, 0x4, 0xb, 0xf3ec, @vifc_lcl_ifindex=r14, @loopback}, 0x10) recvmmsg(r10, &(0x7f00000032c0)=[{{&(0x7f0000003040)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/81, 0x51}, {&(0x7f0000003140)=""/19, 0x13}], 0x2, &(0x7f00000031c0)=""/214, 0xd6}, 0x45}], 0x1, 0x0, &(0x7f0000003300)) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000003340), &(0x7f0000003380)=0x30) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r10, 0x8010aebc, &(0x7f00000033c0)={0x2, 0xc000}) 3.286514662s ago: executing program 3 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x1}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000283afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000001b4b74455c30000000"], 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[], 0x86) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) 3.225241259s ago: executing program 2 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 2.173124666s ago: executing program 3 (id=240): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = getpid() ptrace$peekuser(0x3, r2, 0x92ec) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @random="21e6b238ff37"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @local}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000640)='X', 0x1, 0x4000001, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x88, 0x1, 0x4, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 2.042474561s ago: executing program 1 (id=241): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2.038353482s ago: executing program 2 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000100)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeec4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@noblock_validity}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000280)={0x1, 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x6, 0x2, 0x2, 0x2, 0x1], 0x1, 0x2}, {0x2, [0x2, 0x3, 0x1, 0x0, 0x0, 0x7], 0x0, 0x2b96a497dd949b72}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582024000000000090503"], 0x0) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="00000009ffffffffffffbbbb00bbbbbb0806009b08000604"], 0x7b) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000000)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x5, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0x58000, 0x1, 0xc, 0x0, 0x40, 0x4, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x25000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x80}, {0x1000, 0x80a0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0x11, 0x1, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x79, 0xff, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0xb, 0x2, 0x3, 0x7, 0x9}, {0x10000, 0x30}, {0x10000, 0x86}, 0x1003b, 0x0, 0x70000, 0x242120, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) accept(r5, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x80) 0s ago: executing program 0 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x208080d, &(0x7f00000001c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x32, 0x65, 0x36, 0x74, 0x31, 0x78, 0x6d, 0x35]}}, {@size={'size', 0x3d, [0x35, 0x6d, 0x25, 0x46b06edbf27c010d, 0x78, 0x35]}}]}) getrandom(0xfffffffffffffffe, 0x0, 0x1) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200000724"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 80.475667][ T5814] cgroup: Unknown subsys name 'net' [ 80.607536][ T5814] cgroup: Unknown subsys name 'cpuset' [ 80.616609][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.281663][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.605511][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.616413][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.634629][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.642286][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.651288][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.659623][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.668367][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.676845][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.685619][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.685906][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.693771][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.707853][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.714438][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.723169][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.730858][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.731183][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.746397][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.747901][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.762587][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.770830][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.777933][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.787690][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.797897][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.806472][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.848641][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.508470][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.626202][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.691957][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.768156][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.834790][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 85.912366][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919695][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.927198][ T5836] bridge_slave_0: entered allmulticast mode [ 85.934603][ T5836] bridge_slave_0: entered promiscuous mode [ 85.984567][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.991783][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.999381][ T5836] bridge_slave_1: entered allmulticast mode [ 86.006762][ T5836] bridge_slave_1: entered promiscuous mode [ 86.037637][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.045076][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.052237][ T5838] bridge_slave_0: entered allmulticast mode [ 86.059774][ T5838] bridge_slave_0: entered promiscuous mode [ 86.103001][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.110234][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.117759][ T5838] bridge_slave_1: entered allmulticast mode [ 86.126401][ T5838] bridge_slave_1: entered promiscuous mode [ 86.187179][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.213938][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.221194][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.229079][ T5824] bridge_slave_0: entered allmulticast mode [ 86.237130][ T5824] bridge_slave_0: entered promiscuous mode [ 86.259987][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.309628][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.317387][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.325199][ T5824] bridge_slave_1: entered allmulticast mode [ 86.332392][ T5824] bridge_slave_1: entered promiscuous mode [ 86.342654][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.363919][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.371154][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.378439][ T5831] bridge_slave_0: entered allmulticast mode [ 86.385665][ T5831] bridge_slave_0: entered promiscuous mode [ 86.394189][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.401429][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.408798][ T5826] bridge_slave_0: entered allmulticast mode [ 86.416147][ T5826] bridge_slave_0: entered promiscuous mode [ 86.438922][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.464796][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.471934][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.479468][ T5831] bridge_slave_1: entered allmulticast mode [ 86.487258][ T5831] bridge_slave_1: entered promiscuous mode [ 86.509454][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.516742][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.524059][ T5826] bridge_slave_1: entered allmulticast mode [ 86.531357][ T5826] bridge_slave_1: entered promiscuous mode [ 86.567217][ T5836] team0: Port device team_slave_0 added [ 86.602389][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.626996][ T5836] team0: Port device team_slave_1 added [ 86.636410][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.661265][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.672433][ T5838] team0: Port device team_slave_0 added [ 86.695635][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.708316][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.732378][ T5838] team0: Port device team_slave_1 added [ 86.765266][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.775665][ T5827] Bluetooth: hci1: command tx timeout [ 86.810717][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.817799][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.844168][ T5827] Bluetooth: hci0: command tx timeout [ 86.844274][ T5827] Bluetooth: hci3: command tx timeout [ 86.849844][ T5834] Bluetooth: hci4: command tx timeout [ 86.861152][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.900831][ T5824] team0: Port device team_slave_0 added [ 86.921880][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.929015][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.929028][ T5834] Bluetooth: hci2: command tx timeout [ 86.956518][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.977501][ T5831] team0: Port device team_slave_0 added [ 87.012420][ T5824] team0: Port device team_slave_1 added [ 87.019753][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.028298][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.055268][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.082458][ T5831] team0: Port device team_slave_1 added [ 87.091522][ T5826] team0: Port device team_slave_0 added [ 87.121157][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.128669][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.155941][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.196052][ T5826] team0: Port device team_slave_1 added [ 87.276906][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.284402][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.311256][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.339683][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.346712][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.372856][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.400148][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.407213][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.433394][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.465658][ T5836] hsr_slave_0: entered promiscuous mode [ 87.472207][ T5836] hsr_slave_1: entered promiscuous mode [ 87.480211][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.487366][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.514220][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.526488][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.533818][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.560213][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.607934][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.615100][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.641860][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.709503][ T5838] hsr_slave_0: entered promiscuous mode [ 87.716449][ T5838] hsr_slave_1: entered promiscuous mode [ 87.722631][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 87.728637][ T5838] Cannot create hsr debugfs directory [ 87.767982][ T5824] hsr_slave_0: entered promiscuous mode [ 87.774594][ T5824] hsr_slave_1: entered promiscuous mode [ 87.780968][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 87.787417][ T5824] Cannot create hsr debugfs directory [ 87.856112][ T5831] hsr_slave_0: entered promiscuous mode [ 87.862634][ T5831] hsr_slave_1: entered promiscuous mode [ 87.869587][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.875488][ T5831] Cannot create hsr debugfs directory [ 87.921243][ T5826] hsr_slave_0: entered promiscuous mode [ 87.927957][ T5826] hsr_slave_1: entered promiscuous mode [ 87.934750][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 87.940524][ T5826] Cannot create hsr debugfs directory [ 88.564298][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.599895][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.611419][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.637923][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.694534][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.710081][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.724498][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.737915][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.843719][ T5834] Bluetooth: hci1: command tx timeout [ 88.875415][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.891929][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.925136][ T5148] Bluetooth: hci4: command tx timeout [ 88.930788][ T5834] Bluetooth: hci3: command tx timeout [ 88.933534][ T5827] Bluetooth: hci0: command tx timeout [ 88.942660][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.954447][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.005037][ T5827] Bluetooth: hci2: command tx timeout [ 89.076174][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.091261][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.107079][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.120521][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.258437][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.271701][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.285946][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.299158][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.326038][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.357768][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.419309][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.449533][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.475699][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.483039][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.497412][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.504845][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.543151][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.550450][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.594312][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.601586][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.664662][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.719972][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.775639][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.836420][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.870337][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.877622][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.899968][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.907434][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.967227][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.974510][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.998524][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.005966][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.143202][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.193335][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.206448][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.241176][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.248369][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.260988][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.268186][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.328173][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.538927][ T5824] veth0_vlan: entered promiscuous mode [ 90.627732][ T5824] veth1_vlan: entered promiscuous mode [ 90.672956][ T5836] veth0_vlan: entered promiscuous mode [ 90.732689][ T5836] veth1_vlan: entered promiscuous mode [ 90.796478][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.860548][ T5824] veth0_macvtap: entered promiscuous mode [ 90.909648][ T5824] veth1_macvtap: entered promiscuous mode [ 90.924828][ T5827] Bluetooth: hci1: command tx timeout [ 90.959928][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.000833][ T5836] veth0_macvtap: entered promiscuous mode [ 91.007129][ T5827] Bluetooth: hci3: command tx timeout [ 91.007295][ T5148] Bluetooth: hci0: command tx timeout [ 91.021774][ T5834] Bluetooth: hci4: command tx timeout [ 91.051713][ T5836] veth1_macvtap: entered promiscuous mode [ 91.068739][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.093599][ T5834] Bluetooth: hci2: command tx timeout [ 91.109870][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.123373][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.181934][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213263][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.229558][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.240197][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.262440][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.283879][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.329817][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.339836][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.349351][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.374949][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447738][ T5838] veth0_vlan: entered promiscuous mode [ 91.463443][ T5831] veth0_vlan: entered promiscuous mode [ 91.490242][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.501933][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.509265][ T5831] veth1_vlan: entered promiscuous mode [ 91.527252][ T5838] veth1_vlan: entered promiscuous mode [ 91.611277][ T5826] veth0_vlan: entered promiscuous mode [ 91.635333][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.645403][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.690739][ T5838] veth0_macvtap: entered promiscuous mode [ 91.712771][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.729625][ T5826] veth1_vlan: entered promiscuous mode [ 91.731340][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.741843][ T5831] veth0_macvtap: entered promiscuous mode [ 91.764192][ T5838] veth1_macvtap: entered promiscuous mode [ 91.778111][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.785856][ T5831] veth1_macvtap: entered promiscuous mode [ 91.848087][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.866090][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.950802][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.980370][ T5826] veth0_macvtap: entered promiscuous mode [ 92.031102][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.056632][ T108] cfg80211: failed to load regulatory.db [ 92.084506][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.118305][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.158093][ T5826] veth1_macvtap: entered promiscuous mode [ 92.238560][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252966][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.284909][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303553][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.312431][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.395488][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.415941][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.426171][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.449703][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.509187][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.586996][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609339][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 92.620552][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 92.631424][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.668988][ T3563] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.692387][ T3563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.739000][ T5958] loop0: detected capacity change from 0 to 32768 [ 92.789981][ T5958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5958) [ 92.839573][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.869544][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.894904][ T5958] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.922625][ T5958] BTRFS info (device loop0): using sha256 checksum algorithm [ 93.002060][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.015373][ T5834] Bluetooth: hci1: command tx timeout [ 93.039813][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.085410][ T5148] Bluetooth: hci0: command tx timeout [ 93.090895][ T5834] Bluetooth: hci4: command tx timeout [ 93.093542][ T5827] Bluetooth: hci3: command tx timeout [ 93.151542][ T5978] Zero length message leads to an empty skb [ 93.164312][ T5148] Bluetooth: hci2: command tx timeout [ 93.179045][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.194329][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.288345][ T5958] BTRFS info (device loop0): enabling ssd optimizations [ 93.342705][ T5958] BTRFS info (device loop0): turning on async discard [ 93.399662][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.433485][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.533977][ T5958] BTRFS info (device loop0): enabling free space tree [ 93.766532][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.804098][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.951050][ T5996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.964528][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.976007][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.999258][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.007129][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.082810][ T5998] netlink: 'syz.1.11': attribute type 3 has an invalid length. [ 94.110408][ T5998] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11'. [ 94.134688][ T43] usb 1-1: device descriptor read/64, error -71 [ 94.136602][ T5996] netlink: 'syz.3.4': attribute type 64 has an invalid length. [ 94.162678][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.198562][ T5998] loop1: detected capacity change from 0 to 8 [ 94.249269][ T5998] squashfs: Unknown parameter 'bridge0' [ 94.373651][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.504419][ T43] usb 1-1: device descriptor read/64, error -71 [ 94.583746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.592458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.623916][ T43] usb usb1-port1: attempt power cycle [ 94.727069][ T6006] loop3: detected capacity change from 0 to 4096 [ 94.769553][ T6006] ======================================================= [ 94.769553][ T6006] WARNING: The mand mount option has been deprecated and [ 94.769553][ T6006] and is ignored by this kernel. Remove the mand [ 94.769553][ T6006] option from the mount to silence this warning. [ 94.769553][ T6006] ======================================================= [ 95.049117][ T6017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.073615][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.836688][ T43] usb 1-1: device descriptor read/8, error -71 [ 95.958469][ T5836] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.136684][ T6029] loop3: detected capacity change from 0 to 1024 [ 96.184144][ T6029] ext4: Unknown parameter '.' [ 96.508890][ T5998] loop1: detected capacity change from 0 to 32768 [ 96.518119][ T6034] loop3: detected capacity change from 0 to 8 [ 96.547456][ T6034] squashfs: Unknown parameter '00000000000000000000003' [ 96.629893][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.675629][ T6034] loop3: detected capacity change from 0 to 1024 [ 96.749925][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.823599][ T6034] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz.3.19: bad entry in directory: inode out of bounds - offset=0, inode=695563, rec_len=1024, size=1024 fake=1 [ 96.858063][ T6040] Bluetooth: MGMT ver 1.23 [ 96.885522][ T6034] EXT4-fs (loop3): Remounting filesystem read-only [ 96.893849][ T6034] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz.3.19: directory missing '.' [ 97.012946][ T6021] loop2: detected capacity change from 0 to 32768 [ 97.153585][ T6021] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.174326][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.274798][ T6021] XFS (loop2): Ending clean mount [ 97.328712][ T6021] XFS (loop2): Quotacheck needed: Please wait. [ 97.329913][ T6055] loop0: detected capacity change from 0 to 512 [ 97.342536][ T6055] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.349226][ T6055] EXT4-fs: Ignoring removed bh option [ 97.355784][ T6055] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.362586][ T6055] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.375849][ T6055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.412853][ T6055] EXT4-fs (loop0): 1 truncate cleaned up [ 97.431354][ T6058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.468441][ T6055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.488418][ T6055] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 97.506427][ T6055] EXT4-fs (loop0): shut down requested (2) [ 97.512566][ T6021] XFS (loop2): Quotacheck: Done. [ 97.653870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.654411][ T6058] loop3: detected capacity change from 0 to 512 [ 97.807765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.884379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.892615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.912750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.964525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.972810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.984124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.212281][ T6058] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 98.244809][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.561187][ T6068] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 99.799259][ T6074] loop0: detected capacity change from 0 to 4096 [ 99.855547][ T6074] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 99.911646][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.954165][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.125224][ T6008] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.252239][ T6084] netlink: 6972 bytes leftover after parsing attributes in process `syz.1.21'. [ 100.273989][ T6084] openvswitch: netlink: Message has 16 unknown bytes. [ 100.294638][ T6008] usb 5-1: device descriptor read/64, error -71 [ 100.329507][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 100.563530][ T6008] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.652407][ T6090] loop0: detected capacity change from 0 to 2048 [ 100.711917][ T6090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.726952][ T6008] usb 5-1: device descriptor read/64, error -71 [ 100.752510][ T6092] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 100.759306][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.777781][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 100.851137][ T6096] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 100.857801][ T6096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.873338][ T6008] usb usb5-port1: attempt power cycle [ 100.926838][ T6096] vhci_hcd vhci_hcd.0: Device attached [ 100.956342][ T6092] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 100.963036][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.013641][ T6106] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 101.020313][ T6106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.027992][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 101.393680][ T5900] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 101.439712][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 101.444132][ T6096] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 101.454129][ T6096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.463279][ T6092] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.473529][ T6008] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.475860][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 101.484177][ T6106] vhci_hcd vhci_hcd.0: Device attached [ 101.495440][ T6008] usb 5-1: device descriptor read/8, error -71 [ 101.509074][ T6096] vhci_hcd vhci_hcd.0: Device attached [ 101.549391][ T6092] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.560137][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.569787][ T1005] kworker/u8:7: attempt to access beyond end of device [ 101.569787][ T1005] loop0: rw=1, sector=7148, nr_sectors = 2112 limit=2048 [ 101.589426][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.590205][ T6092] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.603355][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.611687][ T1005] kworker/u8:7: attempt to access beyond end of device [ 101.611687][ T1005] loop0: rw=1, sector=9260, nr_sectors = 2088 limit=2048 [ 101.619406][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.636796][ T6092] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(29) [ 101.636831][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.643412][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.650501][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 101.652907][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.675913][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.679613][ T1005] kworker/u8:7: attempt to access beyond end of device [ 101.679613][ T1005] loop0: rw=1, sector=11348, nr_sectors = 2048 limit=2048 [ 101.684111][ T5892] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 101.690918][ T5892] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 101.728852][ T6096] loop3: detected capacity change from 0 to 512 [ 101.754222][ T6008] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.769116][ T6096] EXT4-fs: Ignoring removed oldalloc option [ 101.777203][ T6008] usb 5-1: device descriptor read/8, error -71 [ 101.824749][ T6096] EXT4-fs (loop3): 1 truncate cleaned up [ 101.915169][ T6096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.934011][ T6008] usb usb5-port1: unable to enumerate USB device [ 101.942865][ T1005] kworker/u8:7: attempt to access beyond end of device [ 101.942865][ T1005] loop0: rw=1, sector=13396, nr_sectors = 2056 limit=2048 [ 102.041244][ T1005] kworker/u8:7: attempt to access beyond end of device [ 102.041244][ T1005] loop0: rw=1, sector=15452, nr_sectors = 200 limit=2048 [ 102.084209][ T6118] fido_id[6118]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.211098][ T6096] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.31: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 102.256916][ T6096] EXT4-fs (loop3): Remounting filesystem read-only [ 102.301149][ T6116] vhci_hcd: connection closed [ 102.302600][ T6035] vhci_hcd vhci_hcd.3: stop threads [ 102.330170][ T6035] vhci_hcd vhci_hcd.3: release socket [ 102.346859][ T6035] vhci_hcd vhci_hcd.3: disconnect device [ 102.359901][ T6107] vhci_hcd: connection closed [ 102.360702][ T6110] vhci_hcd: connection closed [ 102.361432][ T6100] vhci_hcd: connection closed [ 102.369321][ T6035] vhci_hcd vhci_hcd.3: stop threads [ 102.370867][ T6093] vhci_hcd: connection reset by peer [ 102.381111][ T6035] vhci_hcd vhci_hcd.3: release socket [ 102.392154][ T6104] vhci_hcd: connection closed [ 102.415158][ T6035] vhci_hcd vhci_hcd.3: disconnect device [ 102.446325][ T6035] vhci_hcd vhci_hcd.3: stop threads [ 102.464084][ T6035] vhci_hcd vhci_hcd.3: release socket [ 102.481873][ T6035] vhci_hcd vhci_hcd.3: disconnect device [ 102.502646][ T6035] vhci_hcd vhci_hcd.3: stop threads [ 102.533500][ T6035] vhci_hcd vhci_hcd.3: release socket [ 102.534786][ T5838] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.554326][ T6035] vhci_hcd vhci_hcd.3: disconnect device [ 102.560479][ T6035] vhci_hcd vhci_hcd.3: stop threads [ 102.566393][ T6035] vhci_hcd vhci_hcd.3: release socket [ 102.572092][ T6035] vhci_hcd vhci_hcd.3: disconnect device [ 102.578516][ T6035] vhci_hcd vhci_hcd.3: stop threads [ 102.589118][ T6035] vhci_hcd vhci_hcd.3: release socket [ 102.595636][ T6035] vhci_hcd vhci_hcd.3: disconnect device [ 102.974850][ T6123] loop1: detected capacity change from 0 to 32768 [ 103.002486][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.079082][ T6123] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.35 (6123) [ 103.157485][ T6123] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.379568][ T6135] loop0: detected capacity change from 0 to 2048 [ 103.427021][ T6135] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 103.437577][ T6135] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 103.450545][ T6135] UDF-fs: Scanning with blocksize 512 failed [ 103.479566][ T6123] BTRFS info (device loop1): using sha256 checksum algorithm [ 103.520428][ T6135] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.528374][ T6135] UDF-fs: Scanning with blocksize 1024 failed [ 103.617526][ T6135] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 103.627553][ T6135] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.635313][ T6135] UDF-fs: Scanning with blocksize 2048 failed [ 103.680606][ T6135] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.696484][ T6135] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 103.706247][ T6135] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.714155][ T6135] UDF-fs: Scanning with blocksize 4096 failed [ 103.720302][ T6135] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 104.060309][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.226640][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.251541][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.311052][ T5916] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 104.323528][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.335551][ T6152] loop0: detected capacity change from 0 to 16 [ 104.347711][ T5916] usb 5-1: config 0 descriptor?? [ 104.369178][ T6123] BTRFS info (device loop1): enabling ssd optimizations [ 104.383118][ T6152] erofs: Unknown parameter '' [ 104.406795][ T6123] BTRFS info (device loop1): turning on async discard [ 104.448399][ T6123] BTRFS info (device loop1): enabling free space tree [ 104.568185][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.619201][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.681676][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 104.687745][ T5824] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.708831][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.732814][ T5916] usb 5-1: USB disconnect, device number 6 [ 104.783532][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.955969][ T5892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.013523][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.044529][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.102759][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.149634][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.186485][ T5892] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.203481][ T5892] usb 4-1: Manufacturer: syz [ 105.234227][ T5892] usb 4-1: config 0 descriptor?? [ 105.292974][ T6129] loop2: detected capacity change from 0 to 32768 [ 105.311566][ T6129] XFS (loop2): Invalid device [./file0], error=-15 [ 105.492797][ T6008] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.656000][ T6008] usb 2-1: Using ep0 maxpacket: 8 [ 105.666564][ T6008] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.693982][ T6008] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 105.694832][ T6158] autofs: Bad value for 'fd' [ 105.817506][ T5892] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 105.875391][ T6008] usb 2-1: config 7 has no interface number 0 [ 105.912884][ T6008] usb 2-1: string descriptor 0 read error: -22 [ 106.047195][ T6008] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 106.059991][ T5837] usb 4-1: USB disconnect, device number 2 [ 106.096764][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.233861][ T6181] fuse: Bad value for 'fd' [ 106.354814][ T6186] fido_id[6186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.511122][ T5837] usb 2-1: USB disconnect, device number 3 [ 106.514642][ T5900] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 106.885777][ T6177] loop4: detected capacity change from 0 to 32768 [ 106.999949][ T6177] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.183586][ T6177] XFS (loop4): Ending clean mount [ 107.247164][ T6177] XFS (loop4): Quotacheck needed: Please wait. [ 107.348661][ T6177] XFS (loop4): Quotacheck: Done. [ 107.511514][ T6175] loop0: detected capacity change from 0 to 32768 [ 107.529253][ T6175] xfs: Deprecated parameter 'attr2' [ 107.541051][ T6175] XFS: attr2 mount option is deprecated. [ 107.621345][ T6175] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.643923][ T6065] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 107.680937][ T6175] XFS (loop0): Ending clean mount [ 107.689573][ T6175] XFS (loop0): Quotacheck needed: Please wait. [ 107.717548][ T6226] process 'syz.3.53' launched './file0' with NULL argv: empty string added [ 107.781313][ T6175] XFS (loop0): Quotacheck: Done. [ 107.795936][ T6065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.807749][ T6065] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 107.824673][ T6065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.853255][ T6065] usb 5-1: config 0 descriptor?? [ 107.895950][ T43] usb usb40-port1: attempt power cycle [ 108.072370][ T6227] loop2: detected capacity change from 0 to 8192 [ 108.087129][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.134260][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.143202][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.243384][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.296384][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.330179][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.363075][ T5836] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.404769][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.459329][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.475344][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.524393][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.574770][ T43] usb usb40-port1: unable to enumerate USB device [ 109.009123][ T43] usb 5-1: USB disconnect, device number 7 [ 109.083196][ T5826] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.899409][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 109.922051][ T6234] loop1: detected capacity change from 0 to 32768 [ 109.941919][ T6233] loop3: detected capacity change from 0 to 32768 [ 109.993081][ T6234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.50 (6234) [ 110.008212][ T6233] xfs: Deprecated parameter 'ikeep' [ 110.080149][ T6233] XFS: ikeep mount option is deprecated. [ 110.105255][ T6234] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.132168][ T6233] xfs: Unknown parameter 'nobarrier' [ 110.155125][ T6234] BTRFS info (device loop1): using crc32c checksum algorithm [ 110.225231][ T6251] loop4: detected capacity change from 0 to 1024 [ 110.350197][ T6258] overlayfs: overlapping lowerdir path [ 110.367576][ T6251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.444346][ T6251] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.565017][ T6234] BTRFS error (device loop1): open_ctree failed: -4 [ 110.594965][ T6281] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.57: lblock 3 mapped to illegal pblock 3 (length 2) [ 110.820473][ T6281] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117 [ 110.834000][ T6281] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.834000][ T6281] [ 110.935977][ T6288] loop2: detected capacity change from 0 to 64 [ 111.218714][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.469690][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 111.676013][ T6297] loop3: detected capacity change from 0 to 2048 [ 111.733585][ T6297] nilfs2: Unknown parameter 'ƒ' [ 111.813833][ T5956] udevd[5956]: incorrect nilfs2 checksum on /dev/loop3 [ 112.187346][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.376980][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 112.400982][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.479381][ T5900] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.540141][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.544318][ T6320] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 112.576703][ T5900] usb 2-1: Product: syz [ 112.582516][ T5900] usb 2-1: Manufacturer: syz [ 112.591250][ T5900] usb 2-1: SerialNumber: syz [ 112.614482][ T6320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.69'. [ 112.658849][ T5900] usb 2-1: config 0 descriptor?? [ 112.691582][ T6309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.717896][ T6320] .`: renamed from bond0 (while UP) [ 112.970158][ T6309] loop1: detected capacity change from 0 to 1024 [ 113.033261][ T6309] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.106257][ T6309] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.126075][ T6309] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.175807][ T6309] EXT4-fs error (device loop1): ext4_free_blocks:6727: comm syz.1.66: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.327745][ T6309] EXT4-fs (loop1): 1 orphan inode deleted [ 113.389323][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.450080][ T6334] loop2: detected capacity change from 0 to 32768 [ 113.457756][ T6334] gfs2: Unknown parameter 'gfs2' [ 114.411785][ T6360] loop2: detected capacity change from 0 to 2048 [ 114.864113][ T6361] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.80'. [ 115.103909][ T6360] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 115.114197][ T6360] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 115.125088][ T6360] UDF-fs: Scanning with blocksize 512 failed [ 115.143990][ T6360] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 115.151726][ T6360] UDF-fs: Scanning with blocksize 1024 failed [ 115.172037][ T6360] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 115.181811][ T6360] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 115.189651][ T6360] UDF-fs: Scanning with blocksize 2048 failed [ 115.197401][ T6360] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 115.208584][ T6360] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 115.219001][ T6360] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 115.226745][ T6360] UDF-fs: Scanning with blocksize 4096 failed [ 115.232842][ T6360] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 115.268399][ T6363] usb 2-1: USB disconnect, device number 4 [ 115.341396][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.023519][ T6065] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.182950][ T6065] usb 3-1: device descriptor read/64, error -71 [ 116.396165][ T6356] loop0: detected capacity change from 0 to 32768 [ 116.428333][ T6356] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.78 (6356) [ 116.443502][ T6065] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.604399][ T6065] usb 3-1: device descriptor read/64, error -71 [ 116.623070][ T6356] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.641097][ T6356] BTRFS info (device loop0): using blake2b checksum algorithm [ 116.724127][ T6065] usb usb3-port1: attempt power cycle [ 116.788563][ T6362] loop3: detected capacity change from 0 to 32768 [ 116.966043][ T6356] BTRFS info (device loop0): enabling ssd optimizations [ 116.973054][ T6356] BTRFS info (device loop0): turning on async discard [ 117.063591][ T6065] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.083780][ T6356] BTRFS info (device loop0): enabling free space tree [ 117.092926][ T6375] loop1: detected capacity change from 0 to 32768 [ 117.094227][ T6065] usb 3-1: device descriptor read/8, error -71 [ 117.138172][ T6403] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 117.157100][ T30] audit: type=1800 audit(1766365833.191:2): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.78" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 117.197865][ T6403] netlink: 152 bytes leftover after parsing attributes in process `syz.3.83'. [ 117.262166][ T6375] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 117.286143][ T6375] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 117.292263][ T6403] .`: renamed from bond0 (while UP) [ 117.312469][ T6375] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 117.324015][ T5836] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 117.324623][ T6375] (syz.1.81,6375,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 117.343064][ T6375] (syz.1.81,6375,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 117.356249][ T6375] (syz.1.81,6375,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 117.366954][ T6375] (syz.1.81,6375,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 117.376409][ T6375] (syz.1.81,6375,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 117.385479][ T6065] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.406427][ T6375] (syz.1.81,6375,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 117.415416][ T6065] usb 3-1: device descriptor read/8, error -71 [ 117.532708][ T6375] loop1: detected capacity change from 0 to 2048 [ 117.543801][ T6065] usb usb3-port1: unable to enumerate USB device [ 117.617631][ T6375] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 117.752685][ T6413] loop0: detected capacity change from 0 to 1024 [ 118.223608][ T5948] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.352031][ T6418] loop1: detected capacity change from 0 to 40427 [ 118.374647][ T6418] F2FS-fs (loop1): invalid crc value [ 118.417202][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 118.467364][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 118.468939][ T6418] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.490826][ T6418] F2FS-fs (loop1): Start checkpoint disabled! [ 118.505945][ T6418] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 118.514062][ T6418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 118.549654][ T30] audit: type=1800 audit(1766365834.591:3): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.86" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 118.553466][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 118.864166][ T6421] syz.1.86: attempt to access beyond end of device [ 118.864166][ T6421] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 118.880476][ T6421] syz.1.86: attempt to access beyond end of device [ 118.880476][ T6421] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 118.895559][ T6421] syz.1.86: attempt to access beyond end of device [ 118.895559][ T6421] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 118.910825][ T6421] syz.1.86: attempt to access beyond end of device [ 118.910825][ T6421] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 118.933556][ T6421] syz.1.86: attempt to access beyond end of device [ 118.933556][ T6421] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 118.950443][ T6421] syz.1.86: attempt to access beyond end of device [ 118.950443][ T6421] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 118.965098][ T6421] syz.1.86: attempt to access beyond end of device [ 118.965098][ T6421] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 118.979267][ T6421] syz.1.86: attempt to access beyond end of device [ 118.979267][ T6421] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 118.993570][ T6421] syz.1.86: attempt to access beyond end of device [ 118.993570][ T6421] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 119.008644][ T6421] syz.1.86: attempt to access beyond end of device [ 119.008644][ T6421] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 119.061534][ T5948] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 119.089960][ T5948] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 119.103505][ T5948] usb 4-1: Product: syz [ 119.107715][ T5948] usb 4-1: Manufacturer: syz [ 119.123534][ T5948] usb 4-1: SerialNumber: syz [ 119.171332][ T6426] netlink: 'syz.2.87': attribute type 11 has an invalid length. [ 119.264750][ T5948] usb 4-1: config 0 descriptor?? [ 119.281706][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 119.312887][ T5948] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 119.544059][ T1005] CPU: 0 UID: 0 PID: 1005 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 119.544088][ T1005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.544100][ T1005] Workqueue: writeback wb_workfn (flush-7:1) [ 119.544131][ T1005] Call Trace: [ 119.544139][ T1005] [ 119.544153][ T1005] dump_stack_lvl+0x189/0x250 [ 119.544177][ T1005] ? preempt_schedule_thunk+0x16/0x30 [ 119.544200][ T1005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.544224][ T1005] ? __pfx_queue_work_on+0x10/0x10 [ 119.544244][ T1005] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 119.544269][ T1005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.544308][ T1005] f2fs_handle_critical_error+0x37c/0x540 [ 119.544342][ T1005] f2fs_write_end_io+0x886/0xb60 [ 119.544391][ T1005] __submit_merged_bio+0x256/0x660 [ 119.544424][ T1005] __submit_merged_write_cond+0x269/0x530 [ 119.544457][ T1005] f2fs_write_data_pages+0x2756/0x3290 [ 119.544491][ T1005] ? unwind_next_frame+0xa5/0x23d0 [ 119.544513][ T1005] ? lock_release+0x4b/0x3b0 [ 119.544573][ T1005] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.544616][ T1005] ? __pfx_stack_trace_save+0x10/0x10 [ 119.544634][ T1005] ? __pfx_hlock_conflict+0x10/0x10 [ 119.544741][ T1005] ? __lock_acquire+0x6b6/0x2cf0 [ 119.544769][ T1005] ? __lock_acquire+0x6b6/0x2cf0 [ 119.544798][ T1005] ? f2fs_write_inode+0x3fb/0x5f0 [ 119.544821][ T1005] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 119.544847][ T1005] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.544874][ T1005] do_writepages+0x32e/0x550 [ 119.544909][ T1005] ? reacquire_held_locks+0x121/0x1c0 [ 119.544932][ T1005] ? writeback_sb_inodes+0x3bd/0x1870 [ 119.544966][ T1005] __writeback_single_inode+0x133/0x1240 [ 119.544993][ T1005] ? do_raw_spin_unlock+0x122/0x240 [ 119.545026][ T1005] writeback_sb_inodes+0x93a/0x1870 [ 119.545083][ T1005] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 119.545160][ T1005] ? rcu_is_watching+0x15/0xb0 [ 119.545197][ T1005] wb_writeback+0x42b/0xaa0 [ 119.545232][ T1005] ? queue_io+0x281/0x450 [ 119.545260][ T1005] ? __pfx_wb_writeback+0x10/0x10 [ 119.545296][ T1005] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.545327][ T1005] wb_workfn+0x3f9/0xed0 [ 119.545367][ T1005] ? __pfx_wb_workfn+0x10/0x10 [ 119.545412][ T1005] ? process_one_work+0x868/0x15a0 [ 119.545441][ T1005] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.545477][ T1005] ? process_one_work+0x868/0x15a0 [ 119.545495][ T1005] process_one_work+0x93a/0x15a0 [ 119.545545][ T1005] ? __pfx_process_one_work+0x10/0x10 [ 119.545577][ T1005] ? assign_work+0x3c7/0x5b0 [ 119.545605][ T1005] worker_thread+0x9b0/0xee0 [ 119.545660][ T1005] kthread+0x711/0x8a0 [ 119.545691][ T1005] ? __pfx_worker_thread+0x10/0x10 [ 119.545712][ T1005] ? __pfx_kthread+0x10/0x10 [ 119.545738][ T1005] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.545761][ T1005] ? lockdep_hardirqs_on+0x98/0x140 [ 119.545784][ T1005] ? __pfx_kthread+0x10/0x10 [ 119.545811][ T1005] ret_from_fork+0x599/0xb30 [ 119.545835][ T1005] ? __pfx_ret_from_fork+0x10/0x10 [ 119.545870][ T1005] ? __switch_to_asm+0x39/0x70 [ 119.545894][ T1005] ? __switch_to_asm+0x33/0x70 [ 119.545916][ T1005] ? __pfx_kthread+0x10/0x10 [ 119.545943][ T1005] ret_from_fork_asm+0x1a/0x30 [ 119.545991][ T1005] [ 119.546433][ T1005] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 119.779644][ T6427] loop4: detected capacity change from 0 to 32768 [ 119.863749][ T6065] usb 4-1: USB disconnect, device number 3 [ 119.868319][ T74] usb 4-1: Failed to submit usb control message: -71 [ 119.919466][ T74] usb 4-1: unable to send the bmi data to the device: -71 [ 119.958563][ T74] usb 4-1: unable to get target info from device [ 120.017265][ T74] usb 4-1: could not get target info (-71) [ 120.023346][ T74] usb 4-1: could not probe fw (-71) [ 120.246160][ T6438] tmpfs: Unknown parameter 'B9z–ˆ+aÝë#' [ 120.296604][ T6438] loop4: detected capacity change from 0 to 128 [ 120.351542][ T6438] vfat: Unknown parameter '' [ 121.914515][ T6452] capability: warning: `syz.4.91' uses 32-bit capabilities (legacy support in use) [ 122.096512][ T6458] loop1: detected capacity change from 0 to 256 [ 122.163851][ T6458] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 122.187782][ T30] audit: type=1800 audit(1766365838.231:4): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.94" name="file2" dev="loop1" ino=1048606 res=0 errno=0 [ 122.224168][ T6458] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 122.233009][ T6458] fuse: Bad value for 'fd' [ 122.366690][ T1005] hfsplus: bad catalog file entry [ 122.371953][ T1005] hfsplus: b-tree write err: -5, ino 3 [ 122.916163][ T6471] ALSA: mixer_oss: invalid OSS volume '' [ 123.163678][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.309009][ T5837] usb 5-1: device descriptor read/64, error -71 [ 123.523104][ T6451] loop2: detected capacity change from 0 to 32768 [ 123.584908][ T5837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.803589][ T5837] usb 5-1: device descriptor read/64, error -71 [ 123.949460][ T5837] usb usb5-port1: attempt power cycle [ 124.143544][ T6451] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.217173][ T6451] XFS (loop2): Ending clean mount [ 124.258992][ T30] audit: type=1326 audit(1766365840.301:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.283779][ T30] audit: type=1326 audit(1766365840.301:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.307219][ T6472] loop0: detected capacity change from 0 to 8192 [ 124.315873][ T30] audit: type=1326 audit(1766365840.361:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.320173][ T6451] XFS (loop2): Quotacheck needed: Please wait. [ 124.339639][ T30] audit: type=1326 audit(1766365840.361:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.373521][ T5837] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.373725][ T30] audit: type=1326 audit(1766365840.411:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.431171][ T6490] loop3: detected capacity change from 0 to 512 [ 124.451223][ T5837] usb 5-1: device descriptor read/8, error -71 [ 124.482228][ T6451] XFS (loop2): Quotacheck: Done. [ 124.504426][ T30] audit: type=1326 audit(1766365840.411:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.511650][ T6492] loop1: detected capacity change from 0 to 128 [ 124.535857][ T30] audit: type=1326 audit(1766365840.411:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.572101][ T6490] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 124.600946][ T6490] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 124.627472][ T6490] EXT4-fs (loop3): group descriptors corrupted! [ 124.634602][ T30] audit: type=1326 audit(1766365840.421:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.676914][ T5838] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.694589][ T6490] loop3: detected capacity change from 0 to 512 [ 124.715355][ T6492] ubifs: Bad value for 'compr' [ 124.734189][ T5837] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.759067][ T6488] sch_fq: defrate 4294967295 ignored. [ 124.794281][ T5837] usb 5-1: device descriptor read/8, error -71 [ 124.807709][ T30] audit: type=1326 audit(1766365840.421:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d878f749 code=0x7ffc0000 [ 124.944642][ T5837] usb usb5-port1: unable to enumerate USB device [ 124.957948][ T6490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.100: corrupted inode contents [ 125.071369][ T6490] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.100: mark_inode_dirty error [ 125.144749][ T6490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.100: corrupted inode contents [ 125.222163][ T6490] EXT4-fs error (device loop3): __ext4_ext_dirty:211: inode #3: comm syz.3.100: mark_inode_dirty error [ 125.272763][ T6490] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.100: Failed to acquire dquot type 0 [ 125.338139][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 125.363049][ T6500] loop1: detected capacity change from 0 to 1024 [ 125.377170][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.386940][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.386988][ T6490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.100: corrupted inode contents [ 125.428043][ T6490] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.100: mark_inode_dirty error [ 125.442813][ T6500] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 125.483857][ T6490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.100: corrupted inode contents [ 125.506714][ T6499] loop2: detected capacity change from 0 to 512 [ 125.578060][ T6499] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.596570][ T6499] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.604337][ T6490] EXT4-fs error (device loop3): __ext4_ext_dirty:211: inode #16: comm syz.3.100: mark_inode_dirty error [ 125.646721][ T6499] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.692496][ T6490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.100: corrupted inode contents [ 125.727169][ T6499] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 125.735934][ T6490] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 125.749587][ T6499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.101: bg 0: block 40: padding at end of block bitmap is not set [ 125.764557][ T6490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.100: corrupted inode contents [ 125.785683][ T6490] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.100: mark_inode_dirty error [ 125.807461][ T6499] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 125.827428][ T6505] loop1: detected capacity change from 0 to 512 [ 125.836617][ T6490] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 125.855697][ T6499] EXT4-fs (loop2): 1 truncate cleaned up [ 125.863709][ T6499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.879562][ T6490] EXT4-fs (loop3): 1 truncate cleaned up [ 125.892099][ T6505] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.103: error while reading EA inode 32 err=-116 [ 126.062939][ T6490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.083717][ T6490] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.097137][ T6505] EXT4-fs (loop1): Remounting filesystem read-only [ 126.123760][ T6505] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 126.193555][ T6505] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 126.235375][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.262353][ T6509] loop4: detected capacity change from 0 to 512 [ 126.280548][ T6505] EXT4-fs (loop1): 1 orphan inode deleted [ 126.298847][ T6505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.379284][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.104: inode has both inline data and extents flags [ 126.381270][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.400997][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.104: couldn't read orphan inode 15 (err -117) [ 126.426905][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.448861][ T6509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.104'. [ 126.469907][ T6505] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.543039][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.744699][ T6517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.107'. [ 126.775306][ T6516] netlink: 48 bytes leftover after parsing attributes in process `syz.4.107'. [ 126.784392][ T6065] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.592448][ T6065] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.615043][ T6528] bridge0: port 3(syz_tun) entered blocking state [ 127.634101][ T6065] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 127.646481][ T6528] bridge0: port 3(syz_tun) entered disabled state [ 127.676511][ T6065] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.715747][ T6528] syz_tun: entered allmulticast mode [ 127.725814][ T6528] syz_tun: entered promiscuous mode [ 127.734573][ T6528] bridge0: port 3(syz_tun) entered blocking state [ 127.741304][ T6528] bridge0: port 3(syz_tun) entered forwarding state [ 127.751295][ T6065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.771276][ T6065] usb 3-1: Product: syz [ 127.787466][ T6065] usb 3-1: Manufacturer: syz [ 127.805130][ T6065] usb 3-1: SerialNumber: syz [ 128.070137][ T6512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.177695][ T868] Process accounting resumed [ 128.447199][ T868] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 128.614530][ T6527] loop3: detected capacity change from 0 to 32768 [ 128.614543][ T868] usb 2-1: device descriptor read/64, error -71 [ 128.637727][ T6527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.109 (6527) [ 128.676647][ T6527] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.688672][ T6512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.695900][ T6527] BTRFS info (device loop3): using crc32c checksum algorithm [ 128.745097][ T5900] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.853560][ T868] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 128.861632][ T6527] BTRFS info (device loop3): turning off barriers [ 128.879571][ T6527] BTRFS info (device loop3): enabling free space tree [ 128.899816][ T6527] BTRFS info (device loop3): use zstd compression, level 3 [ 128.903620][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 128.917219][ T5900] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 128.928315][ T6065] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 128.941160][ T5900] usb 1-1: config 0 has no interface number 0 [ 128.947481][ T6065] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 128.956095][ T5900] usb 1-1: config 0 interface 32 has no altsetting 0 [ 128.963019][ T6065] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 128.972050][ T5900] usb 1-1: New USB device found, idVendor=0856, idProduct=bc03, bcdDevice=44.6e [ 128.982472][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.990803][ T5900] usb 1-1: Product: syz [ 128.995652][ T5900] usb 1-1: Manufacturer: syz [ 129.013543][ T868] usb 2-1: device descriptor read/64, error -71 [ 129.023509][ T5900] usb 1-1: SerialNumber: syz [ 129.051657][ T5900] usb 1-1: config 0 descriptor?? [ 129.129236][ T6065] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 129.144086][ T868] usb usb2-port1: attempt power cycle [ 129.198686][ T6065] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 129.341895][ T5892] usb 3-1: USB disconnect, device number 6 [ 129.380054][ T5892] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 129.429573][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.503949][ T868] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 129.519971][ T5900] mos7840 1-1:0.32: required endpoints missing [ 129.546716][ T868] usb 2-1: device descriptor read/8, error -71 [ 129.557816][ T5900] usb 1-1: USB disconnect, device number 6 [ 129.735564][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 129.783536][ T868] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 129.842891][ T868] usb 2-1: device descriptor read/8, error -71 [ 129.976153][ T868] usb usb2-port1: unable to enumerate USB device [ 130.746100][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.117'. [ 131.369139][ T6609] loop0: detected capacity change from 0 to 2048 [ 131.424312][ T6611] loop3: detected capacity change from 0 to 2048 [ 131.445760][ T6609] udf: Unknown parameter 'ÿÿ00000000000000000000' [ 131.455639][ T6611] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 131.483514][ T6611] UDF-fs: Scanning with blocksize 512 failed [ 131.534173][ T6606] bridge0: entered allmulticast mode [ 131.608605][ T6611] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 131.610041][ T6606] pim6reg: entered allmulticast mode [ 131.652080][ T6616] bridge0: left allmulticast mode [ 131.675983][ T6611] UDF-fs: Scanning with blocksize 1024 failed [ 131.688094][ T6602] pim6reg: left allmulticast mode [ 131.759605][ T6611] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 131.846061][ T6611] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 131.885351][ T6611] UDF-fs: Scanning with blocksize 2048 failed [ 131.916154][ T6611] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 132.009458][ T6611] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 132.039435][ T6611] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 132.084860][ T6611] UDF-fs: Scanning with blocksize 4096 failed [ 132.113293][ T6611] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 132.152149][ T5148] Bluetooth: hci4: link tx timeout [ 132.157775][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.170113][ T5148] Bluetooth: hci4: link tx timeout [ 132.175426][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.184229][ T5148] Bluetooth: hci4: link tx timeout [ 132.189383][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.426372][ T6632] syz.3.128 uses obsolete (PF_INET,SOCK_PACKET) [ 132.629066][ T6637] MINIX-fs: unable to read superblock [ 132.644626][ T6635] can0: slcan on ptm0. [ 132.785064][ T6633] loop0: detected capacity change from 0 to 512 [ 132.969570][ T6633] EXT4-fs: Ignoring removed i_version option [ 133.028967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059137][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132693][ T6633] EXT4-fs: Ignoring removed bh option [ 133.614991][ T6631] can0 (unregistered): slcan off ptm0. [ 133.824766][ T6633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.883236][ T6633] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.947564][ T6619] loop4: detected capacity change from 0 to 40427 [ 134.020029][ T6619] F2FS-fs (loop4): build fault injection rate: 771 [ 134.076534][ T6619] F2FS-fs (loop4): invalid crc value [ 134.152543][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.173717][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.205374][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 134.291630][ T6651] loop3: detected capacity change from 0 to 2048 [ 134.324724][ T5837] usb 3-1: device descriptor read/64, error -71 [ 134.328665][ T6614] loop1: detected capacity change from 0 to 32768 [ 134.345804][ T6619] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 134.359272][ T6651] udf: Unknown parameter 'u' [ 134.428972][ T6619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.440478][ T6614] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.583921][ T5837] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.704499][ T6614] XFS (loop1): Ending clean mount [ 134.745236][ T6614] XFS (loop1): Quotacheck needed: Please wait. [ 134.776161][ T5837] usb 3-1: device descriptor read/64, error -71 [ 134.908989][ T5837] usb usb3-port1: attempt power cycle [ 134.972318][ T6614] XFS (loop1): Quotacheck: Done. [ 135.057864][ T5824] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.374883][ T5826] bio_check_eod: 1 callbacks suppressed [ 135.374903][ T5826] syz-executor: attempt to access beyond end of device [ 135.374903][ T5826] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 135.417415][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 135.417445][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.417457][ T5826] Call Trace: [ 135.417466][ T5826] [ 135.417475][ T5826] dump_stack_lvl+0x189/0x250 [ 135.417512][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.417538][ T5826] ? __pfx_queue_work_on+0x10/0x10 [ 135.417558][ T5826] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 135.417594][ T5826] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 135.417636][ T5826] f2fs_handle_critical_error+0x37c/0x540 [ 135.417671][ T5826] f2fs_write_end_io+0x886/0xb60 [ 135.417724][ T5826] __submit_merged_bio+0x256/0x660 [ 135.417758][ T5826] __submit_merged_write_cond+0x269/0x530 [ 135.417792][ T5826] f2fs_write_data_pages+0x2756/0x3290 [ 135.417868][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.417889][ T5826] ? is_bpf_text_address+0x26/0x2b0 [ 135.417923][ T5826] ? arch_stack_walk+0xfc/0x150 [ 135.417992][ T5826] ? lockdep_unlock+0x89/0x120 [ 135.418010][ T5826] ? __lock_acquire+0x146f/0x2cf0 [ 135.418066][ T5826] ? do_raw_spin_lock+0x121/0x290 [ 135.418110][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 135.418138][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.418166][ T5826] do_writepages+0x32e/0x550 [ 135.418211][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 135.418245][ T5826] filemap_fdatawrite+0x199/0x240 [ 135.418274][ T5826] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 135.418369][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 135.418404][ T5826] f2fs_sync_dirty_inodes+0x30f/0x810 [ 135.418455][ T5826] f2fs_write_checkpoint+0x935/0x2430 [ 135.418482][ T5826] ? stack_depot_save_flags+0x40/0x850 [ 135.418558][ T5826] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 135.418652][ T5826] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 135.418680][ T5826] ? kfree+0x1c0/0x660 [ 135.418715][ T5826] kill_f2fs_super+0x2d2/0x6c0 [ 135.418754][ T5826] ? __pfx_kill_f2fs_super+0x10/0x10 [ 135.418809][ T5826] ? shrinker_free+0x2ce/0x3e0 [ 135.418838][ T5826] deactivate_locked_super+0xbc/0x130 [ 135.418872][ T5826] cleanup_mnt+0x425/0x4c0 [ 135.418893][ T5826] ? lockdep_hardirqs_on+0x98/0x140 [ 135.418926][ T5826] task_work_run+0x1d4/0x260 [ 135.418958][ T5826] ? __pfx_task_work_run+0x10/0x10 [ 135.418995][ T5826] ? exit_to_user_mode_loop+0x55/0x4f0 [ 135.419023][ T5826] exit_to_user_mode_loop+0xff/0x4f0 [ 135.419044][ T5826] ? rcu_is_watching+0x15/0xb0 [ 135.419076][ T5826] do_syscall_64+0x2d0/0xf80 [ 135.419105][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.419125][ T5826] ? clear_bhb_loop+0x60/0xb0 [ 135.419151][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.419170][ T5826] RIP: 0033:0x7f700a190a77 [ 135.419190][ T5826] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 135.419206][ T5826] RSP: 002b:00007ffc8e990528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 135.419226][ T5826] RAX: 0000000000000000 RBX: 00007f700a213d7d RCX: 00007f700a190a77 [ 135.419239][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8e9905e0 [ 135.419250][ T5826] RBP: 00007ffc8e9905e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.419262][ T5826] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8e991670 [ 135.419274][ T5826] R13: 00007f700a213d7d R14: 0000000000021016 R15: 00007ffc8e9916b0 [ 135.419314][ T5826] [ 135.419323][ T5826] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 135.774783][ T5837] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.786098][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 135.786126][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.786137][ T5826] Call Trace: [ 135.786145][ T5826] [ 135.786154][ T5826] dump_stack_lvl+0x189/0x250 [ 135.786190][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.786216][ T5826] ? __pfx_queue_work_on+0x10/0x10 [ 135.786237][ T5826] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 135.786264][ T5826] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 135.786315][ T5826] f2fs_handle_critical_error+0x37c/0x540 [ 135.786351][ T5826] f2fs_write_end_io+0x886/0xb60 [ 135.786406][ T5826] __submit_merged_bio+0x256/0x660 [ 135.786441][ T5826] __submit_merged_write_cond+0x269/0x530 [ 135.786477][ T5826] f2fs_write_data_pages+0x2756/0x3290 [ 135.786553][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.786574][ T5826] ? is_bpf_text_address+0x26/0x2b0 [ 135.786613][ T5826] ? arch_stack_walk+0xfc/0x150 [ 135.786686][ T5826] ? lockdep_unlock+0x89/0x120 [ 135.786706][ T5826] ? __lock_acquire+0x146f/0x2cf0 [ 135.786769][ T5826] ? do_raw_spin_lock+0x121/0x290 [ 135.786813][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 135.786842][ T5826] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.786870][ T5826] do_writepages+0x32e/0x550 [ 135.786915][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 135.786949][ T5826] filemap_fdatawrite+0x199/0x240 [ 135.786977][ T5826] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 135.787076][ T5826] ? do_raw_spin_unlock+0x122/0x240 [ 135.787110][ T5826] f2fs_sync_dirty_inodes+0x30f/0x810 [ 135.787161][ T5826] f2fs_write_checkpoint+0x935/0x2430 [ 135.787185][ T5826] ? stack_depot_save_flags+0x40/0x850 [ 135.787251][ T5826] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 135.787347][ T5826] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 135.787375][ T5826] ? kfree+0x1c0/0x660 [ 135.787410][ T5826] kill_f2fs_super+0x2d2/0x6c0 [ 135.787447][ T5826] ? __pfx_kill_f2fs_super+0x10/0x10 [ 135.787499][ T5826] ? shrinker_free+0x2ce/0x3e0 [ 135.787528][ T5826] deactivate_locked_super+0xbc/0x130 [ 135.787561][ T5826] cleanup_mnt+0x425/0x4c0 [ 135.787583][ T5826] ? lockdep_hardirqs_on+0x98/0x140 [ 135.787615][ T5826] task_work_run+0x1d4/0x260 [ 135.787648][ T5826] ? __pfx_task_work_run+0x10/0x10 [ 135.787683][ T5826] ? exit_to_user_mode_loop+0x55/0x4f0 [ 135.787712][ T5826] exit_to_user_mode_loop+0xff/0x4f0 [ 135.787732][ T5826] ? rcu_is_watching+0x15/0xb0 [ 135.787765][ T5826] do_syscall_64+0x2d0/0xf80 [ 135.787792][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.787810][ T5826] ? clear_bhb_loop+0x60/0xb0 [ 135.787834][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.787850][ T5826] RIP: 0033:0x7f700a190a77 [ 135.787869][ T5826] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 135.787883][ T5826] RSP: 002b:00007ffc8e990528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 135.787904][ T5826] RAX: 0000000000000000 RBX: 00007f700a213d7d RCX: 00007f700a190a77 [ 135.787916][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8e9905e0 [ 135.787926][ T5826] RBP: 00007ffc8e9905e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.787936][ T5826] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8e991670 [ 135.787946][ T5826] R13: 00007f700a213d7d R14: 0000000000021016 R15: 00007ffc8e9916b0 [ 135.787982][ T5826] [ 135.787990][ T5826] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 136.176069][ T5837] usb 3-1: device descriptor read/8, error -71 [ 136.196745][ T6671] loop3: detected capacity change from 0 to 32768 [ 136.250332][ T6671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.133 (6671) [ 136.297001][ T6671] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.366222][ T6671] BTRFS info (device loop3): using crc32c checksum algorithm [ 136.413499][ T5837] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.457221][ T5837] usb 3-1: device descriptor read/8, error -71 [ 136.587062][ T5837] usb usb3-port1: unable to enumerate USB device [ 136.621152][ T6671] BTRFS info (device loop3): rebuilding free space tree [ 136.735596][ T6671] BTRFS info (device loop3): checking UUID tree [ 136.771366][ T6671] BTRFS info (device loop3): allowing degraded mounts [ 136.834580][ T6671] BTRFS info (device loop3): enabling ssd optimizations [ 136.843303][ T6671] BTRFS info (device loop3): enabling free space tree [ 136.894264][ T6671] BTRFS info (device loop3): force clearing of disk cache [ 136.951851][ T6671] BTRFS info (device loop3): enabling auto defrag [ 137.044349][ T6671] BTRFS info (device loop3): force zlib compression, level 3 [ 137.430716][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 137.448339][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 137.448359][ T30] audit: type=1326 audit(1766365853.491:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 137.454139][ T6671] capability: warning: `syz.3.133' uses deprecated v2 capabilities in a way that may be insecure [ 137.488820][ T30] audit: type=1326 audit(1766365853.491:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 137.637615][ T30] audit: type=1326 audit(1766365853.491:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 137.672986][ T6724] loop0: detected capacity change from 0 to 256 [ 137.728273][ T30] audit: type=1326 audit(1766365853.491:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 137.754070][ T6724] exfat: Deprecated parameter 'namecase' [ 137.759731][ T6724] exfat: Deprecated parameter 'namecase' [ 137.791367][ T6712] loop1: detected capacity change from 0 to 4096 [ 137.841704][ T30] audit: type=1326 audit(1766365853.491:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 137.970471][ T6724] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 137.983775][ T30] audit: type=1326 audit(1766365853.491:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 138.011878][ T6712] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 138.090680][ T30] audit: type=1326 audit(1766365853.491:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 138.181134][ T30] audit: type=1326 audit(1766365853.491:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 138.203813][ T30] audit: type=1326 audit(1766365853.491:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 138.227311][ T30] audit: type=1326 audit(1766365853.491:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fec2ad8f749 code=0x7ffc0000 [ 138.253031][ T6712] ntfs3(loop1): Failed to load $Extend (-2). [ 138.280023][ T6712] ntfs3(loop1): Failed to initialize $Extend. [ 138.290496][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.405016][ T6736] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.141'. [ 138.560391][ T6736] loop2: detected capacity change from 0 to 8 [ 138.605082][ T6736] squashfs image failed sanity check [ 138.892959][ T6746] loop1: detected capacity change from 0 to 1024 [ 139.256094][ T6758] loop1: detected capacity change from 0 to 256 [ 139.271687][ T6758] exfat: Deprecated parameter 'namecase' [ 139.351041][ T6758] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 139.534424][ T5837] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.683602][ T5837] usb 3-1: device descriptor read/64, error -71 [ 139.954030][ T5837] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 139.967902][ T6781] loop4: detected capacity change from 0 to 8 [ 140.022735][ T6781] SQUASHFS error: lzo decompression failed, data probably corrupt [ 140.041547][ T6781] SQUASHFS error: Failed to read block 0x82: -5 [ 140.061083][ T6781] SQUASHFS error: Unable to read metadata cache entry [80] [ 140.072347][ T6781] SQUASHFS error: Unable to read inode 0x11f [ 140.104362][ T5837] usb 3-1: device descriptor read/64, error -71 [ 140.123177][ T6777] tmpfs: Bad value for 'mpol' [ 140.124321][ T6782] tmpfs: Bad value for 'mpol' [ 140.192720][ T6777] loop1: detected capacity change from 0 to 128 [ 140.234873][ T5837] usb usb3-port1: attempt power cycle [ 140.403520][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.480883][ T6764] loop4: detected capacity change from 0 to 32768 [ 140.494795][ T6764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.147 (6764) [ 140.539283][ T6764] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.559238][ T6764] BTRFS info (device loop4): using sha256 checksum algorithm [ 140.583623][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 140.592889][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.605663][ T5837] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 140.620540][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 140.631283][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.639941][ T43] usb 4-1: Product: syz [ 140.645495][ T5837] usb 3-1: device descriptor read/8, error -71 [ 140.666853][ T43] usb 4-1: Manufacturer: syz [ 140.683621][ T43] usb 4-1: SerialNumber: syz [ 140.702786][ T43] usb 4-1: config 0 descriptor?? [ 140.726425][ T43] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 140.745064][ T43] gspca_stv06xx: st6422 sensor detected [ 140.778894][ T6764] BTRFS info (device loop4): enabling ssd optimizations [ 140.796737][ T6764] BTRFS info (device loop4): turning on async discard [ 140.814248][ T6764] BTRFS info (device loop4): enabling free space tree [ 140.923562][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.954675][ T5837] usb 3-1: device descriptor read/8, error -71 [ 141.065673][ T5837] usb usb3-port1: unable to enumerate USB device [ 141.141485][ T5826] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.248669][ T6779] delete_channel: no stack [ 141.277123][ T43] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 141.468917][ T43] usb 4-1: USB disconnect, device number 4 [ 142.013823][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.086453][ T6810] loop1: detected capacity change from 0 to 512 [ 142.104956][ T6810] EXT4-fs: Ignoring removed nobh option [ 142.152432][ T6810] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0003] [ 142.168265][ T6810] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.182357][ T43] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.183598][ T6810] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 142.192150][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.215420][ T43] usb 5-1: Product: syz [ 142.219621][ T43] usb 5-1: Manufacturer: syz [ 142.225832][ T43] usb 5-1: SerialNumber: syz [ 142.303707][ T6810] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 142.363896][ T6810] EXT4-fs error (device loop1): ext4_ext_check_inode:528: inode #13: comm syz.1.157: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 142.393254][ T6810] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.157: couldn't read orphan inode 13 (err -117) [ 142.406017][ T5948] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.421239][ T6810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.563530][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 142.564430][ T6817] loop0: detected capacity change from 0 to 4096 [ 142.570854][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.586700][ T6817] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 142.603498][ T5948] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 142.636350][ T5948] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 142.650949][ T6817] ntfs3(loop0): Failed to load $Extend (-22). [ 142.667436][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.683951][ T5948] usb 4-1: Product: syz [ 142.690241][ T6808] loop4: detected capacity change from 0 to 1024 [ 142.699740][ T6817] ntfs3(loop0): Failed to initialize $Extend. [ 142.704138][ T5948] usb 4-1: Manufacturer: syz [ 142.722369][ T5948] usb 4-1: SerialNumber: syz [ 142.743753][ T5948] usb 4-1: config 0 descriptor?? [ 142.862898][ T6808] hfsplus: catalog searching failed [ 142.870349][ T6808] hfsplus: catalog searching failed [ 142.997902][ T5948] usb 4-1: USB disconnect, device number 5 [ 143.016310][ T43] rtl8150 5-1:1.0: couldn't reset the device [ 143.028139][ T43] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 143.076307][ T43] usb 5-1: USB disconnect, device number 12 [ 143.393521][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.474818][ T143] hfsplus: b-tree write err: -5, ino 4 [ 143.577288][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.621419][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.646578][ T6810] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.157: deleted inode referenced: 12 [ 143.652774][ T6826] loop6: detected capacity change from 0 to 7 [ 143.683673][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.701644][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.710804][ T6826] Dev loop6: unable to read RDB block 7 [ 143.731162][ T6826] loop6: unable to read partition table [ 143.741322][ T43] usb 3-1: Product: syz [ 143.750447][ T43] usb 3-1: Manufacturer: syz [ 143.760468][ T6828] loop3: detected capacity change from 0 to 2048 [ 143.763124][ T6826] loop6: partition table beyond EOD, [ 143.770018][ T43] usb 3-1: SerialNumber: syz [ 143.776094][ T6826] truncated [ 143.781519][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.804943][ T6826] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.819792][ T43] usb 3-1: config 0 descriptor?? [ 143.853056][ T43] usb 3-1: selecting invalid altsetting 0 [ 143.882008][ T6828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.963768][ T6828] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 40 with incorrect tag 100 [ 144.043898][ T868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.131275][ T43] usb 3-1: USB disconnect, device number 15 [ 144.182072][ T6828] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 40 with incorrect tag 100 [ 144.206504][ T868] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 144.232370][ T868] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 144.244424][ T868] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 144.252611][ T6828] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 40 with incorrect tag 100 [ 144.268540][ T868] usb 5-1: config 220 has no interface number 2 [ 144.282238][ T868] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 144.300722][ T868] usb 5-1: config 220 interface 0 has no altsetting 0 [ 144.315286][ T868] usb 5-1: config 220 interface 76 has no altsetting 0 [ 144.333723][ T868] usb 5-1: config 220 interface 1 has no altsetting 0 [ 144.345311][ T868] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 144.405154][ T868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.413753][ T868] usb 5-1: Product: syz [ 144.418037][ T868] usb 5-1: Manufacturer: syz [ 144.422764][ T868] usb 5-1: SerialNumber: syz [ 144.964556][ T6843] trusted_key: syz.0.167 sent an empty control message without MSG_MORE. [ 144.974893][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 145.444690][ T6846] loop3: detected capacity change from 0 to 4096 [ 145.457417][ T6846] ntfs3: Unknown parameter 'GPL' [ 145.775257][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.167'. [ 145.785332][ T6845] veth1_macvtap: left promiscuous mode [ 146.362802][ T868] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 146.383565][ T868] uvcvideo 5-1:220.0: No valid video chain found. [ 146.390235][ T868] usb 5-1: selecting invalid altsetting 0 [ 146.452371][ T868] usb 5-1: selecting invalid altsetting 0 [ 146.470874][ T868] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 146.517617][ T868] usb 5-1: USB disconnect, device number 13 [ 146.918286][ T6863] loop3: detected capacity change from 0 to 2048 [ 146.925012][ T868] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 147.044279][ T6864] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.119188][ T868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.186402][ T868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 147.274320][ T868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.320263][ T868] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 147.350970][ T868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.396227][ T868] usb 5-1: config 0 descriptor?? [ 147.414672][ T6859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.701143][ T6859] netlink: 256 bytes leftover after parsing attributes in process `syz.4.172'. [ 147.752312][ T6859] loop4: detected capacity change from 0 to 1024 [ 147.895170][ T6859] syz.4.172: attempt to access beyond end of device [ 147.895170][ T6859] loop4: rw=8388608, sector=1835012, nr_sectors = 4 limit=1024 [ 147.956277][ T6859] Buffer I/O error on dev loop4, logical block 458753, async page read [ 147.995015][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 148.087547][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 148.087567][ T30] audit: type=1800 audit(1766365864.131:85): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.172" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 148.153755][ T6859] hfsplus: unable to mark blocks free: error -5 [ 148.182635][ T6859] hfsplus: can't free extent: start 68, count 1 [ 148.186143][ T6872] syz.4.172: attempt to access beyond end of device [ 148.186143][ T6872] loop4: rw=8388608, sector=1835012, nr_sectors = 4 limit=1024 [ 148.189771][ T30] audit: type=1804 audit(1766365864.191:86): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.172" name="/newroot/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=25 res=1 errno=0 [ 148.269731][ T6861] loop0: detected capacity change from 0 to 32768 [ 148.303557][ T6872] Buffer I/O error on dev loop4, logical block 458753, async page read [ 148.369455][ T6872] syz.4.172: attempt to access beyond end of device [ 148.369455][ T6872] loop4: rw=8388608, sector=1835012, nr_sectors = 4 limit=1024 [ 148.474784][ T6872] Buffer I/O error on dev loop4, logical block 458753, async page read [ 148.787798][ T6861] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.883824][ T868] usb 5-1: string descriptor 0 read error: -71 [ 148.941280][ T868] usbhid 5-1:0.0: can't add hid device: -71 [ 148.975139][ T868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 149.008142][ T868] usb 5-1: USB disconnect, device number 14 [ 149.042272][ T6861] XFS (loop0): Ending clean mount [ 149.381734][ T6903] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 150.926595][ T6905] loop3: detected capacity change from 0 to 65536 [ 151.021883][ T6905] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.087367][ T6905] XFS (loop3): Ending clean mount [ 151.100131][ T6905] XFS (loop3): Quotacheck needed: Please wait. [ 151.119171][ T5836] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.201273][ T6905] XFS (loop3): Quotacheck: Done. [ 151.211446][ T6885] mmap: syz.3.176 (6885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.959586][ T5831] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 153.161724][ T6937] loop1: detected capacity change from 0 to 16 [ 153.237836][ T6937] erofs: Unknown parameter 'ÿÐÁ﫬bùf1sű' [ 153.265024][ T6578] udevd[6578]: incorrect erofs checksum on /dev/loop1 [ 153.310702][ T6937] overlayfs: failed to resolve './file0': -2 [ 153.585935][ T6945] loop2: detected capacity change from 0 to 2048 [ 154.135854][ T6945] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 154.146553][ T6945] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 154.156670][ T6945] UDF-fs: Scanning with blocksize 512 failed [ 154.170557][ T6945] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 154.178341][ T6945] UDF-fs: Scanning with blocksize 1024 failed [ 154.193036][ T6945] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 154.202759][ T6945] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 154.210602][ T6945] UDF-fs: Scanning with blocksize 2048 failed [ 154.222452][ T6945] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 154.239425][ T6945] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 154.249530][ T6945] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 154.257260][ T6945] UDF-fs: Scanning with blocksize 4096 failed [ 154.263772][ T6945] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 155.609340][ T6962] loop4: detected capacity change from 0 to 512 [ 155.664594][ T6962] EXT4-fs: Ignoring removed nobh option [ 155.908371][ T6962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.921083][ T6962] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.411039][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.366946][ T6985] ALSA: mixer_oss: invalid OSS volume '' [ 157.578156][ T6990] loop1: detected capacity change from 0 to 64 [ 157.647089][ T6990] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 157.703593][ T6992] fuse: blksize only supported for fuseblk [ 157.750975][ T6993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.172050][ T6984] loop2: detected capacity change from 0 to 32768 [ 158.315372][ T7006] loop1: detected capacity change from 0 to 1024 [ 158.445570][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.607561][ T5837] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.653779][ T7010] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 158.783481][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 158.812273][ T5837] usb 4-1: config 0 has no interfaces? [ 158.834849][ T5837] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.865594][ T5837] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.885134][ T5948] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.903728][ T5837] usb 4-1: Manufacturer: syz [ 158.927242][ T5837] usb 4-1: config 0 descriptor?? [ 159.019316][ T7003] loop4: detected capacity change from 0 to 32768 [ 159.073462][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 159.091872][ T5948] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 159.124810][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.163565][ T5948] usb 2-1: Product: syz [ 159.167803][ T5948] usb 2-1: Manufacturer: syz [ 159.172438][ T5948] usb 2-1: SerialNumber: syz [ 159.182788][ T5900] usb 4-1: USB disconnect, device number 6 [ 159.327281][ T5948] usb 2-1: config 0 descriptor?? [ 159.351568][ T5948] cdc_phonet 2-1:0.0: skipping garbage [ 159.364910][ T5948] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 159.548338][ T5948] usb 2-1: USB disconnect, device number 9 [ 159.777467][ T7023] warning: `syz.0.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.125200][ T7028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.208'. [ 160.303612][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.373269][ T7028] loop9: detected capacity change from 0 to 7 [ 160.454881][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 160.467896][ T7028] Dev loop9: unable to read RDB block 7 [ 160.493528][ T5948] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.531712][ T7029] hsr_slave_0: left promiscuous mode [ 160.562095][ T7028] loop9: unable to read partition table [ 160.594481][ T7028] loop9: partition table beyond EOD, truncated [ 160.618087][ T7028] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.661234][ T7014] loop2: detected capacity change from 0 to 32768 [ 160.673513][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 160.696473][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.718326][ T5948] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 160.728658][ T7029] hsr_slave_1: left promiscuous mode [ 160.750241][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.772700][ T7014] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.798369][ T5948] usb 4-1: config 0 descriptor?? [ 161.069766][ T7014] XFS (loop2): Ending clean mount [ 161.608070][ T7038] ALSA: mixer_oss: invalid OSS volume '' [ 161.686373][ T7014] 9pnet_fd: Insufficient options for proto=fd [ 161.867313][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 161.877020][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 161.962490][ T5948] usb 4-1: USB disconnect, device number 7 [ 162.054756][ T5838] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.508456][ T7066] loop1: detected capacity change from 0 to 16 [ 162.516667][ T7066] erofs: Unknown parameter 'ÿÐÁ﫬bùf1sű' [ 162.555011][ T7066] overlayfs: failed to resolve './file0': -2 [ 162.639708][ T7068] loop0: detected capacity change from 0 to 64 [ 162.967575][ T7073] loop4: detected capacity change from 0 to 2048 [ 163.971609][ T7073] loop4: p1 < > p3 [ 164.047364][ T7073] loop4: p3 size 134217728 extends beyond EOD, truncated [ 164.121677][ T7071] loop3: detected capacity change from 0 to 32768 [ 164.178483][ T5198] loop4: p1 < > p3 [ 164.198738][ T7071] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.216721][ T7075] loop2: detected capacity change from 0 to 131072 [ 164.234760][ T5198] loop4: p3 size 134217728 extends beyond EOD, truncated [ 164.357877][ T6578] udevd[6578]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 164.386664][ T7075] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 164.390109][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 164.424081][ T7075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.437009][ T7071] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 164.458015][ T7075] F2FS-fs (loop2): access invalid blkaddr:0 [ 164.464294][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.2.215 Not tainted syzkaller #0 PREEMPT(full) [ 164.464320][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.464331][ T7075] Call Trace: [ 164.464338][ T7075] [ 164.464347][ T7075] dump_stack_lvl+0x189/0x250 [ 164.464380][ T7075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.464413][ T7075] ? do_raw_spin_lock+0x121/0x290 [ 164.464453][ T7075] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 164.464483][ T7075] ? make_kprojid+0x1c7/0x680 [ 164.464516][ T7075] sanity_check_extent_cache+0x1a3/0x620 [ 164.464553][ T7075] f2fs_iget+0x3e3a/0x59b0 [ 164.464617][ T7075] f2fs_lookup+0x3ef/0x9d0 [ 164.464645][ T7075] ? __pfx_f2fs_lookup+0x10/0x10 [ 164.464670][ T7075] ? __pfx_d_alloc_parallel+0x10/0x10 [ 164.464687][ T7075] ? mnt_get_write_access+0x66/0x280 [ 164.464725][ T7075] path_openat+0x119c/0x3840 [ 164.464778][ T7075] ? kasan_save_track+0x3e/0x80 [ 164.464806][ T7075] ? __pfx_path_openat+0x10/0x10 [ 164.464851][ T7075] do_filp_open+0x1fa/0x410 [ 164.464874][ T7075] ? __pfx_do_filp_open+0x10/0x10 [ 164.464920][ T7075] ? _raw_spin_unlock+0x28/0x50 [ 164.464943][ T7075] ? alloc_fd+0x64c/0x6c0 [ 164.464980][ T7075] do_sys_openat2+0x121/0x200 [ 164.465011][ T7075] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.465049][ T7075] ? rcu_is_watching+0x15/0xb0 [ 164.465079][ T7075] __x64_sys_openat+0x138/0x170 [ 164.465115][ T7075] do_syscall_64+0xfa/0xf80 [ 164.465143][ T7075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.465161][ T7075] ? clear_bhb_loop+0x60/0xb0 [ 164.465186][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.465213][ T7075] RIP: 0033:0x7f929a78f749 [ 164.465234][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.465249][ T7075] RSP: 002b:00007f929b68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.465272][ T7075] RAX: ffffffffffffffda RBX: 00007f929a9e5fa0 RCX: 00007f929a78f749 [ 164.465285][ T7075] RDX: 0000000000000101 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 164.465297][ T7075] RBP: 00007f929a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.465309][ T7075] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 164.465320][ T7075] R13: 00007f929a9e6038 R14: 00007f929a9e5fa0 R15: 00007ffc1ded22a8 [ 164.465357][ T7075] [ 164.467154][ T7075] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 164.496932][ T7071] XFS (loop3): Starting recovery (logdev: internal) [ 164.858191][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 164.891021][ T7071] XFS (loop3): Ending recovery (logdev: internal) [ 164.908284][ T6343] udevd[6343]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 165.020571][ T7089] loop4: detected capacity change from 0 to 4096 [ 165.196522][ T7089] NILFS (loop4): invalid segment: Checksum error in segment payload [ 165.268450][ T5831] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.279538][ T7089] NILFS (loop4): trying rollback from an earlier position [ 165.327566][ T7089] NILFS (loop4): invalid segment: Checksum error in segment payload [ 165.413477][ T7089] NILFS (loop4): error -22 while searching super root [ 167.643516][ T868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.844418][ T868] usb 2-1: Using ep0 maxpacket: 16 [ 167.895603][ T868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.182260][ T868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.230103][ T7107] ALSA: mixer_oss: invalid OSS volume '' [ 168.312725][ T868] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.40 [ 168.349927][ T868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.435463][ T868] usb 2-1: config 0 descriptor?? [ 168.470486][ T868] s2255 2-1:0.0: Could not find bulk-in endpoint [ 168.503674][ T868] Sensoray 2255 driver load failed: 0xfffffff4 [ 168.510195][ T868] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 168.743172][ T868] usbhid 2-1:0.0: can't add hid device: -71 [ 168.750111][ T868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 168.761744][ T868] usb 2-1: USB disconnect, device number 10 [ 169.093259][ T7131] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 169.108856][ T7131] netlink: 152 bytes leftover after parsing attributes in process `syz.3.230'. [ 169.426751][ T7138] pim6reg1: entered promiscuous mode [ 169.432547][ T7138] pim6reg1: entered allmulticast mode [ 169.480438][ T7139] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.529729][ T7139] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.579538][ T7139] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.595397][ T7146] loop1: detected capacity change from 0 to 2048 [ 169.628876][ T7139] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 169.630065][ T7146] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 170.087731][ T7156] loop2: detected capacity change from 0 to 2048 [ 170.108872][ T7156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.536402][ T7160] ALSA: mixer_oss: invalid OSS volume '' [ 173.823986][ T7176] netlink: 'syz.1.241': attribute type 4 has an invalid length. [ 173.831719][ T7176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.241'. [ 278.753339][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 278.760471][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7169 [ 278.768217][ C1] rcu: (detected by 1, t=10502 jiffies, g=19585, q=1072 ncpus=2) [ 278.776215][ C1] task:syz.4.223 state:R running task stack:25920 pid:7169 tgid:7168 ppid:5826 task_flags:0x400140 flags:0x00080000 [ 278.791286][ C1] Call Trace: [ 278.794712][ C1] [ 278.797578][ C1] sched_show_task+0x49d/0x630 [ 278.802530][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 278.807904][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 278.813537][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 278.818702][ C1] print_other_cpu_stall+0xf7a/0x1340 [ 278.824106][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 278.829942][ C1] rcu_sched_clock_irq+0xac1/0x1280 [ 278.835331][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 278.840958][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.845715][ C1] update_process_times+0x23c/0x2f0 [ 278.850907][ C1] tick_nohz_handler+0x3e9/0x710 [ 278.855835][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 278.861116][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 278.866603][ C1] ? debug_object_deactivate+0x6d/0x360 [ 278.872270][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 278.877717][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 278.883453][ C1] __hrtimer_run_queues+0x4d0/0xc30 [ 278.888644][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 278.894656][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 278.900459][ C1] ? read_tsc+0x9/0x20 [ 278.904540][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 278.909487][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 278.915516][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 278.921152][ C1] [ 278.924077][ C1] [ 278.927010][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.932999][ C1] RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 [ 278.938987][ C1] Code: 8b e8 bf 63 d8 09 65 66 8b 05 6f 44 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 f8 9e 0b 00 e8 b3 27 44 00 fb 65 8b 05 4b 44 1a 11 <85> c0 75 05 e8 e2 0b ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 278.958586][ C1] RSP: 0018:ffffc9000e10f8a0 EFLAGS: 00000286 [ 278.964685][ C1] RAX: 0000000080000000 RBX: 0000000000000200 RCX: 2da312c590112700 [ 278.972644][ C1] RDX: 0000000000000000 RSI: ffffffff8d997e54 RDI: ffffffff8be07960 [ 278.980608][ C1] RBP: ffffc9000e10f930 R08: ffffffff8fa22f77 R09: 1ffffffff1f445ee [ 278.988583][ C1] R10: dffffc0000000000 R11: fffffbfff1f445ef R12: ffffffff897c9ab2 [ 278.996637][ C1] R13: ffffc9000e125048 R14: dffffc0000000000 R15: 1ffff92001c21f14 [ 279.004689][ C1] ? bpf_test_run+0x192/0x7d0 [ 279.009459][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.015631][ C1] ? bpf_redirect_peer+0xbe/0x170 [ 279.020735][ C1] ? bpf_test_run+0x192/0x7d0 [ 279.025584][ C1] ? bpf_test_run+0x192/0x7d0 [ 279.030280][ C1] bpf_test_run+0x371/0x7d0 [ 279.034971][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 279.040258][ C1] ? __kasan_krealloc+0xeb/0x110 [ 279.045200][ C1] ? eth_type_trans+0x35e/0x6d0 [ 279.050042][ C1] ? convert___skb_to_skb+0x3d/0x5b0 [ 279.055407][ C1] bpf_prog_test_run_skb+0xd67/0x1d50 [ 279.060814][ C1] ? __fget_files+0x2a/0x420 [ 279.065510][ C1] ? __fget_files+0x3a0/0x420 [ 279.070213][ C1] ? __fget_files+0x2a/0x420 [ 279.074811][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 279.080618][ C1] bpf_prog_test_run+0x2c7/0x340 [ 279.085578][ C1] __sys_bpf+0x5ee/0x8a0 [ 279.089817][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 279.094588][ C1] ? rcu_is_watching+0x15/0xb0 [ 279.099372][ C1] __x64_sys_bpf+0x7c/0x90 [ 279.103802][ C1] do_syscall_64+0xfa/0xf80 [ 279.108323][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.114402][ C1] ? clear_bhb_loop+0x60/0xb0 [ 279.119088][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.124996][ C1] RIP: 0033:0x7f700a18f749 [ 279.129584][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.149193][ C1] RSP: 002b:00007f700af81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.157614][ C1] RAX: ffffffffffffffda RBX: 00007f700a3e5fa0 RCX: 00007f700a18f749 [ 279.165692][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 279.173658][ C1] RBP: 00007f700a213f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.181619][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.189784][ C1] R13: 00007f700a3e6038 R14: 00007f700a3e5fa0 R15: 00007ffc8e991298 [ 279.198020][ C1] [ 279.201046][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g19585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 279.212761][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 279.222952][ C1] rcu: RCU grace-period kthread stack dump: [ 279.228841][ C1] task:rcu_preempt state:R running task stack:27168 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 279.243270][ C1] Call Trace: [ 279.246550][ C1] [ 279.249478][ C1] __schedule+0x150e/0x5070 [ 279.253995][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 279.259199][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 279.265087][ C1] ? __pfx___schedule+0x10/0x10 [ 279.270127][ C1] ? schedule+0x91/0x360 [ 279.274464][ C1] schedule+0x165/0x360 [ 279.278634][ C1] schedule_timeout+0x12b/0x270 [ 279.283482][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 279.288856][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 279.294753][ C1] ? __pfx_process_timeout+0x10/0x10 [ 279.300033][ C1] ? prepare_to_swait_event+0x341/0x380 [ 279.305677][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 279.310650][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 279.316145][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 279.322318][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 279.327613][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 279.332818][ C1] ? finish_swait+0xcd/0x1f0 [ 279.337406][ C1] rcu_gp_kthread+0x99/0x390 [ 279.341992][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.347197][ C1] ? __kthread_parkme+0x7b/0x200 [ 279.352129][ C1] ? __kthread_parkme+0x1a1/0x200 [ 279.357234][ C1] kthread+0x711/0x8a0 [ 279.361386][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.366591][ C1] ? __pfx_kthread+0x10/0x10 [ 279.371284][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.376471][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 279.381767][ C1] ? __pfx_kthread+0x10/0x10 [ 279.386359][ C1] ret_from_fork+0x599/0xb30 [ 279.390945][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 279.396177][ C1] ? __switch_to_asm+0x39/0x70 [ 279.400960][ C1] ? __switch_to_asm+0x33/0x70 [ 279.405738][ C1] ? __pfx_kthread+0x10/0x10 [ 279.410422][ C1] ret_from_fork_asm+0x1a/0x30 [ 279.415283][ C1] [ 279.418382][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 279.424694][ C1] Sending NMI from CPU 1 to CPUs 0: [ 279.429904][ C0] NMI backtrace for cpu 0 [ 279.429918][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 279.429934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.429943][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 279.429966][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 9e 2a 00 f3 0f 1e fa fb f4 48 ee 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 279.429978][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 279.429992][ C0] RAX: 37a6faac944bdc00 RBX: ffffffff819786ba RCX: 37a6faac944bdc00 [ 279.430003][ C0] RDX: 0000000000000001 RSI: ffffffff8d997e54 RDI: ffffffff8be07960 [ 279.430013][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 279.430023][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fa22f70 [ 279.430034][ C0] R13: 1ffffffff1bd29b8 R14: 0000000000000000 R15: 0000000000000000 [ 279.430044][ C0] FS: 0000000000000000(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 279.430057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.430067][ C0] CR2: 00007f7007ff3f98 CR3: 000000002aad2000 CR4: 00000000003526f0 [ 279.430084][ C0] Call Trace: [ 279.430092][ C0] [ 279.430097][ C0] default_idle+0x13/0x20 [ 279.430111][ C0] default_idle_call+0x73/0xb0 [ 279.430125][ C0] do_idle+0x1ea/0x520 [ 279.430141][ C0] ? irqentry_exit+0x5ba/0x660 [ 279.430163][ C0] ? __pfx_do_idle+0x10/0x10 [ 279.430186][ C0] cpu_startup_entry+0x44/0x60 [ 279.430202][ C0] rest_init+0x2de/0x300 [ 279.430218][ C0] start_kernel+0x3ac/0x400 [ 279.430238][ C0] x86_64_start_reservations+0x24/0x30 [ 279.430259][ C0] x86_64_start_kernel+0x143/0x1c0 [ 279.430279][ C0] common_startup_64+0x13e/0x147 [ 279.430305][ C0]