last executing test programs: 22m40.330610048s ago: executing program 32 (id=11): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x106, 0x2}}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m55.133613885s ago: executing program 33 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) 21m53.891914136s ago: executing program 34 (id=550): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 21m34.159524325s ago: executing program 35 (id=732): mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0x81) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 21m30.093539839s ago: executing program 36 (id=768): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="0fb38f006066b8038000000f23c00f21f86635020005000f23f8f267f083b6e5940000da0f0f391cf00fc010660f61f9ba2000edb880088ee80f7982feff660f3880975700"}], 0x1, 0x0, 0x0, 0x4b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21m29.158365832s ago: executing program 37 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'netpci0\x00', 0x400}) close(r1) 21m28.359801338s ago: executing program 38 (id=775): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) capset(&(0x7f0000000040)={0x20080522}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 21m25.898397907s ago: executing program 39 (id=781): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}}) 20m28.54511097s ago: executing program 8 (id=1242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4004810) 20m28.023133372s ago: executing program 8 (id=1245): mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt_trace/trace_pipe\x00', 0x0, 0x0, 0x1000) 20m27.641409909s ago: executing program 8 (id=1249): mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='((ev))', 0x6) 20m27.390508589s ago: executing program 8 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x20440, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 20m27.074073857s ago: executing program 8 (id=1256): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x8b8, &(0x7f0000000400)=0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) io_submit(r0, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00\x00', 0x2}]) 20m26.429477195s ago: executing program 8 (id=1264): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000001040)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) 20m25.776717872s ago: executing program 40 (id=1264): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000001040)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) 13m10.551183062s ago: executing program 7 (id=4119): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13m10.437458247s ago: executing program 7 (id=4120): socket$netlink(0x10, 0x3, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x414, &(0x7f0000000580), 0x1, 0x437, &(0x7f0000000900)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 13m10.05949423s ago: executing program 7 (id=4121): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48}) 13m8.461580349s ago: executing program 7 (id=4122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="a6bc2ee4", 0x4}, {&(0x7f0000000380)="6a70cdef40a136ef0aa297692955aa884a", 0x11}], 0x2}}], 0x1, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m8.062909351s ago: executing program 7 (id=4123): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x30000, 0x200000}) 13m7.820536846s ago: executing program 7 (id=4124): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r4, r3, &(0x7f00000000c0)=0xfff, 0x4) unshare(0x6a040000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0xee01, 0xee01, 0x0, 0x180, 0x990}, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x7, 0xa3, 0xe14, 0x0, 0x7f}) 12m51.878425981s ago: executing program 41 (id=4124): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r4, r3, &(0x7f00000000c0)=0xfff, 0x4) unshare(0x6a040000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0xee01, 0xee01, 0x0, 0x180, 0x990}, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x7, 0xa3, 0xe14, 0x0, 0x7f}) 10m55.844361093s ago: executing program 1 (id=4383): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x13, 0x1, {0x6, 0x638, 0xffffffffffffff78, 0x6, 0x0, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffeffffffff, {0x0, 0x2, 0x200000000000, 0x8, 0xffffffff, 0x9, {0x2, 0xb, 0x1, 0x6221, 0xdb4, 0x2, 0xfffffff5, 0x6, 0x800, 0x1000, 0xe44, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 10m54.436008245s ago: executing program 1 (id=4387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0xff00) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 10m53.245358728s ago: executing program 1 (id=4390): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') ptrace(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x27, 0xc3, [@remote, @local, @local, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @multicast2]}, @rr={0x7, 0x1b, 0x5f, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @local, @multicast1]}, @noop, @rr={0x7, 0x1f, 0xaa, [@private=0xa010101, @empty, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @ssrr={0x89, 0x13, 0x31, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_addr={0x44, 0x34, 0x37, 0x1, 0x7, [{@remote, 0x9}, {@local, 0x2}, {@empty, 0x6}, {@broadcast, 0x5}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x7, 0xef, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$inet(0x2, 0x1, 0x6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000f80)={0x80000000, &(0x7f0000000ec0), &(0x7f0000000f00)}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) listen(r6, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) fstat(r4, &(0x7f0000000140)) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6c", 0x96}) 10m50.185221056s ago: executing program 1 (id=4397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaee0000000800"], 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m49.484188284s ago: executing program 1 (id=4399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) socket$inet6(0xa, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0xa) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000036c0)={&(0x7f00000026c0)=[0x80000000, 0x4, 0xfffffae7, 0x8, 0xb49b, 0xb9, 0x8, 0x7, 0x8, 0xc, 0x5, 0x7fffffff, 0x8000, 0x40, 0xc, 0x3, 0x2, 0x7fffffff, 0x81, 0x800, 0x2, 0xffffffff, 0xcbff, 0xd, 0x0, 0x8, 0x1, 0x5, 0x1, 0x5, 0x0, 0x1, 0x200, 0xa, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0xde, 0x4, 0x7ff, 0x4, 0x101, 0x3c8eb758, 0x5, 0x0, 0x9, 0x1, 0x8, 0xd, 0xf, 0x1, 0x0, 0x2, 0xb3, 0x9, 0x5, 0x2, 0xfffffffe, 0x2, 0x3481, 0xf, 0x3ca, 0x40, 0x7fffffff, 0x1, 0x6, 0x5, 0x645c, 0xe367, 0xff, 0x1, 0x6, 0xb5, 0x7, 0xa, 0x6, 0x2, 0x4, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fffffff, 0x1, 0x32b5c1bb, 0x1b5, 0x2, 0xa8, 0x2, 0x5, 0x163, 0x6, 0x3a, 0x7ff, 0xfffffff9, 0x9, 0x24, 0x9, 0x4, 0x3, 0xa5c, 0xfffffffb, 0x101, 0xd29, 0x5, 0x8, 0x401, 0x9, 0xfc, 0x9, 0x0, 0xffff, 0x120, 0x8, 0x7, 0x0, 0x3e0ccb75, 0x4c, 0x6, 0x1, 0xe, 0x7f, 0x0, 0xfffffff7, 0x1, 0x0, 0x115, 0x9, 0x41aeb496, 0xfffffff7, 0x6, 0x80000000, 0x2, 0x400, 0xfffffff0, 0x6, 0x485, 0x4, 0xd4e, 0x7, 0x0, 0x1, 0x1, 0x5, 0x6, 0x7fffffff, 0xc00, 0x4, 0x4, 0x6d, 0x5, 0x92, 0x7, 0x9, 0xfffff800, 0x9, 0x7, 0x8, 0x8a7, 0x2, 0x94, 0x6, 0x200, 0x4, 0x7, 0xe4, 0x80, 0x5, 0x0, 0x4, 0x8, 0x81, 0x7bcc, 0x0, 0x6, 0x1000, 0xd, 0x0, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x100, 0x4, 0x58, 0x2, 0xe956, 0x5, 0x9, 0x0, 0xfdae, 0x8, 0x0, 0x7, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x2, 0x7fff, 0xff, 0x8000, 0x10, 0x49, 0x0, 0x1, 0x55, 0x4, 0xc, 0x2, 0x8, 0xff1, 0xffffffc6, 0x1, 0x7, 0x3, 0x5, 0x7, 0x80000001, 0x10000, 0x83db, 0x2, 0xd, 0x1ff, 0x6, 0x0, 0x0, 0xb2, 0x61, 0x7, 0x80000001, 0xb9b, 0x4, 0x35, 0x8, 0x5, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0xffff, 0x5, 0xbfda, 0x3, 0x5, 0x0, 0x10001, 0x608, 0x0, 0x9, 0x6, 0x1, 0x63d, 0x6, 0xd92583, 0xa9, 0x2, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0xfffffc71, 0xfffffffe, 0xb, 0x1, 0x5, 0x9, 0x80, 0xfff, 0x2, 0x4, 0x2, 0x81, 0x3, 0x8, 0x682, 0x3, 0x5, 0x9f70, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x7f, 0x9ecd, 0x5, 0xb3d, 0x3, 0x9, 0x5, 0xeea1, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x5, 0x101, 0xf5, 0x1, 0xfffffff0, 0xd121, 0x6, 0x4, 0xffffff00, 0x80000000, 0x5, 0xd, 0xf3c, 0x7fffffff, 0x1ff, 0x7, 0x94, 0x8001, 0x0, 0x2, 0x9, 0x6, 0x6, 0x8001, 0x6, 0x0, 0x8000, 0x6, 0x9, 0x4, 0x9d, 0x9, 0x80000001, 0x7, 0x7f8, 0xcb9c, 0x1, 0x6, 0xe, 0x400, 0x1, 0x6, 0x5, 0x51e, 0x7, 0xfffffffd, 0x7, 0x97f1, 0xb, 0x80000001, 0xaa, 0xffff81f5, 0x80, 0x8, 0x9, 0x8, 0x1, 0xffffffe3, 0x5086, 0x4, 0x8, 0x2, 0x8, 0x54d8, 0x1000, 0x7, 0x5848, 0x83, 0x2, 0x10001, 0x5, 0x65b97b8b, 0x1, 0x2, 0x400, 0x3, 0x5, 0x0, 0xa65, 0x280, 0x0, 0xf74, 0x3, 0x2, 0x3, 0x7, 0x400, 0x9, 0x2, 0xfffff122, 0x7fffffff, 0x8, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8000, 0x7274, 0x8001, 0xffff46da, 0x469, 0x9, 0x6, 0x9, 0x3, 0xf, 0x0, 0x0, 0x8, 0x6, 0x3, 0x1, 0xfffffff8, 0x7df2, 0xe939, 0x7, 0x10, 0x6, 0x2, 0x1, 0x8, 0x1145, 0x7, 0xa, 0xe72, 0x2, 0x1, 0x40000, 0x9, 0xfffffffc, 0x5, 0x293400, 0x6c, 0x56, 0x9, 0xfffffff7, 0x80, 0x0, 0x9f, 0x2, 0x3, 0xfff, 0x10001, 0x2, 0x9, 0x9cd5, 0x8, 0x10001, 0x6, 0x6, 0xc02f, 0xc, 0xfffffffa, 0x0, 0x2, 0xa, 0x9, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x439b, 0x0, 0x8, 0x8, 0x1, 0x15e, 0x9, 0xfffffffa, 0x800, 0x3, 0xe, 0xfffffe01, 0xfffffffb, 0xed2, 0x800, 0xb, 0x2, 0x6, 0x2, 0xa82c, 0x100, 0x5, 0x7ff, 0x8, 0x9, 0x7f, 0xd9, 0x7d, 0x8, 0x2, 0x1, 0x2, 0x9, 0x6, 0x9, 0x8efe, 0x8, 0x5, 0xc9, 0x2, 0x81, 0x6, 0x5, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x8, 0x34, 0x0, 0xe, 0x6, 0x10, 0xe62, 0x8, 0x8, 0x4, 0x0, 0x9, 0x830, 0x3, 0x0, 0x1b3, 0x0, 0x7, 0x8, 0x7, 0x7, 0x80, 0x8, 0x0, 0x80000000, 0xfffffff8, 0x5, 0x6, 0xfffffff8, 0x4a, 0x3a2, 0x5, 0x400, 0x612, 0x401, 0x200, 0x7, 0x8000, 0x9, 0x9, 0x800, 0xfff, 0x0, 0x8, 0x10001, 0x1, 0x10000, 0x1, 0xb10, 0x43, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x40, 0x3, 0x800, 0x101, 0x0, 0x6d3a, 0x3, 0xffffffff, 0x1, 0xa59, 0x5, 0x3e6, 0x90000000, 0x101, 0x3, 0xbbd3, 0x4, 0x6, 0xfe1, 0x2, 0x8003, 0xe00, 0xfffe0000, 0x5, 0xfffffffb, 0x8001, 0x10001, 0xfa, 0xb, 0x6, 0xe4, 0x6, 0x2, 0x8, 0x1, 0x1ff, 0x84e, 0x30, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x300, 0x12c, 0x4, 0xc, 0x6, 0x9, 0x7, 0x40, 0x0, 0xcc, 0x4e6, 0x80000000, 0x2, 0xc202, 0x4cfda994, 0x2, 0x5, 0xfffffbff, 0x9, 0xb, 0x200, 0xd3, 0x0, 0x2, 0x3, 0x8, 0x1, 0x7, 0x5, 0xffffffff, 0x6, 0x8, 0x80, 0x7, 0x1, 0x0, 0x874c, 0x7f, 0x1, 0x4, 0x5, 0x9, 0x26d2, 0x8, 0x5, 0x0, 0x10, 0x2, 0x8000, 0x101, 0x22, 0x0, 0x8, 0x5, 0xf75, 0x2, 0xce, 0x0, 0x5, 0x1d, 0x32d, 0x6, 0x8, 0x1951759c, 0x7, 0x4, 0x101, 0x2, 0x81, 0x9, 0xff, 0x8, 0x1ff, 0xaad3, 0x3, 0xc7, 0x2, 0x4, 0x296, 0x8000, 0x1, 0xfffffffe, 0xc9, 0x1000000, 0x9, 0x1, 0x3, 0x5, 0x4, 0x3, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x25, 0x4, 0x6, 0xe, 0x6, 0x200, 0x1, 0x9, 0x6, 0x800, 0x5, 0xfffffffc, 0xfffffffa, 0xe6ba, 0x9, 0x8, 0x10000, 0x222eee1a, 0x4, 0x400000, 0x1000, 0xb9a3, 0x7, 0x1, 0xb0, 0x0, 0x0, 0x9, 0xc, 0x500, 0xf1b, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x8c, 0xd25, 0xfffff001, 0x80000000, 0x5, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x1, 0x3, 0x800, 0x5, 0x7, 0xff, 0x7, 0xc5aa, 0xc, 0x3, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x4, 0x80, 0x4, 0x80000001, 0x80000000, 0xe, 0x0, 0x7, 0x0, 0x9, 0x1, 0x7, 0xa3, 0xfffffffd, 0x283e, 0x3, 0x5, 0x8, 0xb6, 0x4, 0x0, 0x1, 0x7fffffff, 0x1000, 0x4, 0x4, 0xb00d, 0x4, 0x8, 0xc25c, 0x3, 0xe, 0x9, 0x6, 0x9, 0x518d1433, 0x98, 0x0, 0x7, 0x3, 0x9, 0x9, 0x3, 0x6, 0x8, 0x100, 0x5, 0x2, 0x4, 0xa, 0x0, 0x0, 0xf4, 0x27e, 0x5, 0x557a23e2, 0x5, 0x7, 0xffffffc0, 0xc, 0xb11, 0x6b8d, 0x7, 0x1ff, 0x4, 0x80, 0xf022, 0x3, 0xffffffff, 0x3, 0x7, 0x80000001, 0x10001, 0x2, 0x8, 0xffffffc0, 0xe58, 0x9, 0x7, 0x9, 0x1, 0x6, 0x401, 0x401, 0x6, 0x2, 0xfffffffd, 0x4, 0x4, 0x5, 0xef3, 0x1000, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x8f0e, 0x1, 0x3, 0x860, 0xee4, 0x7f, 0x81, 0x5, 0x2, 0x3, 0x9, 0x1, 0x6, 0x5, 0x10, 0x2, 0x1, 0xff, 0xff, 0x6, 0xc, 0xb, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf5, 0xfffffff9, 0x26ef, 0xffff95b8, 0x4, 0x76, 0x1, 0x0, 0xfff, 0x7, 0x374, 0x9, 0xff, 0x6, 0x7f, 0xffff, 0x52, 0xfffffff6, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x9, 0x2, 0x1000, 0x3, 0xf5c, 0x1908, 0xc50, 0x800, 0x0, 0x7fff, 0xffff0000, 0x1ff, 0xc019, 0x6, 0x0, 0x2, 0x9, 0x400, 0x1f95e79d, 0x10000, 0xefe, 0x8, 0x0, 0x8, 0x6fe2, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0x1, 0x6d2, 0x10000, 0x2, 0x9, 0x8, 0xe, 0xf6, 0x1, 0x8, 0x1, 0x1, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x80000000, 0x6, 0x6, 0x92, 0x1, 0xf, 0x6, 0x40000000, 0x1, 0x4, 0xc10, 0xa349, 0xfffffe00, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x6, 0x1, 0x7, 0x4, 0x854, 0x1, 0x101], 0x1, 0x400, 0x7}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m48.041530554s ago: executing program 1 (id=4404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40083) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="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"/305, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES16], 0x4, 0x301, &(0x7f0000000080)="$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") r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getpid() getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) 10m32.837058564s ago: executing program 42 (id=4404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40083) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="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"/305, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES16], 0x4, 0x301, &(0x7f0000000080)="$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") r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getpid() getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) 8m51.728184039s ago: executing program 9 (id=4622): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000200)={0x40, 0x6, 0xc, "f3f9a32596fff23320469a9d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfce) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000100)={0x0, 0x11, 0xc9, "e7ce7a26d3633fd9249e5cdfffbbab1faf5c16a297385f0e9c282ded91e14b20d761bdfa03c05bf877e53e119f6818a6ec450b278e0d06576c1fea1f47932c889e12850823ee1db32dba07259cf16551a3b46d3ec70e96e5dddbf1a300a77d0ffa588cd686871d81411fc727baee142db40c24edfe1a1d698566a099b45bfae84b8a22f9af837b81e3fa945346ce6efc73967da49b8446d5e34a5306d74a719a239491345e51b986e56528e94c0dfc85c843af20ca5dad6466c6bc3b000000000000000000ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x9, &(0x7f0000000240)) 8m47.662296864s ago: executing program 9 (id=4624): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r0, &(0x7f0000000180)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, 0x0, 0x0) unshare(0x68040000) 8m35.906414475s ago: executing program 9 (id=4643): syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9043, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x8, 0x1, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 8m34.736444752s ago: executing program 9 (id=4645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000001b40)={{0x12, 0x1, 0x300, 0xaa, 0x7c, 0x5f, 0x20, 0xeb1, 0x7007, 0x208, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x35, 0x2, 0x50, 0xa0, "", [{{0x9, 0x4, 0x9a, 0x4, 0x0, 0x66, 0x97, 0x5c, 0x1}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="f5", 0x1}], 0x1, 0x0, 0x0, 0x4044040}}], 0x1, 0x40015) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='TH', 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000a80)={'dummy0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x70bd28, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb}]}, 0x24}}, 0x0) 8m31.42252634s ago: executing program 9 (id=4650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 8m28.514825566s ago: executing program 9 (id=4652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fd, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x0, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x3, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x4001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10002, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xf, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 8m13.082537348s ago: executing program 43 (id=4652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fd, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x0, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x3, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x4001, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10002, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xf, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 7m37.021759275s ago: executing program 4 (id=4731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], 0x0, 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0xa) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m35.687798825s ago: executing program 4 (id=4735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000600)="b1", 0x1}], 0x1}}], 0x1, 0x4000000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000340)=@assoc_value, &(0x7f0000000300)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/87, 0x57}], 0x1, 0xe, 0x7) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 7m32.232018865s ago: executing program 4 (id=4740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0xa) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m31.065554768s ago: executing program 4 (id=4744): socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r0, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x3, 0x3, 0x4, 0x2}}, 0x80) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) unlinkat(r1, &(0x7f0000000700)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m26.632288928s ago: executing program 4 (id=4751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000600)="b1", 0x1}], 0x1}}], 0x1, 0x4000000) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000340)=@assoc_value, &(0x7f0000000300)=0x8) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/87, 0x57}], 0x1, 0xe, 0x7) connect$can_bcm(r4, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) fcntl$setpipe(r0, 0x407, 0x9ec2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) 7m22.68082275s ago: executing program 4 (id=4757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 7m7.49623266s ago: executing program 44 (id=4757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1m2.279265692s ago: executing program 2 (id=5790): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)="d528f5ee", 0x4}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 1m0.55448678s ago: executing program 2 (id=5796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="20000000000000001701000002000000050000000798fd717f00000000000000180000000000000017010000030000"], 0x1118, 0x20008840}], 0x1, 0x80001) 1m0.403109096s ago: executing program 2 (id=5797): unshare(0x62040200) 56.720770588s ago: executing program 6 (id=5816): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 56.593336354s ago: executing program 0 (id=5817): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x121000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 55.944836036s ago: executing program 0 (id=5819): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001780)=""/4111, 0x100f}], 0x1, 0x12d, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4100}, 0x10) eventfd2(0x1e, 0x800) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 55.371623767s ago: executing program 6 (id=5821): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x3cd}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 52.504457966s ago: executing program 6 (id=5824): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32, @ANYBLOB="1200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) 52.19272953s ago: executing program 6 (id=5827): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000080), 0x3b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 50.641104877s ago: executing program 6 (id=5831): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 50.37629234s ago: executing program 0 (id=5833): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x800800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 50.251141832s ago: executing program 3 (id=5834): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbc, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9a, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a51"}}}}}}, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x2) 49.647058913s ago: executing program 0 (id=5836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 49.600940795s ago: executing program 3 (id=5837): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001780)=""/4111, 0x100f}], 0x1, 0x12d, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4100}, 0x10) eventfd2(0x1e, 0x800) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000180)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) 49.547578789s ago: executing program 5 (id=5838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x2000000000000052, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="14", 0x1}], 0x1}, 0x0) 49.310075532s ago: executing program 5 (id=5839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}}, 0x0) 49.266816558s ago: executing program 6 (id=5840): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=ANY=[@ANYBLOB="42000000100039040000000000009df0ef0d0087", @ANYRES32, @ANYBLOB="09580100000000002000128008000100677265001400028008000700ffffffff0500080080000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) 48.73467222s ago: executing program 5 (id=5841): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) 48.57188857s ago: executing program 2 (id=5842): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00008a4000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008cb000/0x14000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchdir(r1) r4 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 48.095634673s ago: executing program 2 (id=5843): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 47.417386216s ago: executing program 5 (id=5844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x164}}, 0x0) 47.184204222s ago: executing program 5 (id=5845): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r0, &(0x7f00000001c0)='p:s/p ./file0:0\f', 0x10) 47.00113837s ago: executing program 5 (id=5846): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x800800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 46.87963851s ago: executing program 0 (id=5847): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001780)=""/4111, 0x100f}], 0x1, 0x12d, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4100}, 0x10) eventfd2(0x1e, 0x800) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000180)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x2, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.369896237s ago: executing program 3 (id=5848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd6", 0xf) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="20000000000000001701000002000000050000000798fd717f00000000000000180000000000000017010000030000"], 0x1118, 0x20008840}], 0x1, 0x80001) 46.338856012s ago: executing program 0 (id=5849): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, 0x0, 0x0) r2 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000240)="d528f5ee", 0x4}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 46.091515112s ago: executing program 3 (id=5850): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd\x00') signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00008a4000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008cb000/0x14000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchdir(r1) r4 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 45.925343334s ago: executing program 3 (id=5851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}}, 0x0) 45.843549989s ago: executing program 3 (id=5852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) 27.784797497s ago: executing program 2 (id=5853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x0, 0x4, 0x4e23, 0x0, 0x0, 0x80, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0xffffffff, 0x9, 0x6, 0xffff, 0x8250c, 0x2, 0x83, 0xfffffffffffffffd}, {0xfffffffffffffffc, 0x7fff, 0x6, 0x1ff}, {0x2, 0xfffffffc, 0x100}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfc, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000110001002bbd7000fe9122257f000001000000000000000000000000000004d402006c"], 0x28}}, 0x0) 0s ago: executing program 45 (id=5846): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x800800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : Try to recover 1th superblock, ret: 0 [ 1161.178722][T23652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1161.848399][T23686] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1164.427622][T18106] kworker/u8:19: attempt to access beyond end of device [ 1164.427622][T18106] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1164.439189][T18106] CPU: 1 UID: 0 PID: 18106 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.439295][T18106] Tainted: [L]=SOFTLOCKUP [ 1164.439324][T18106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.439367][T18106] Workqueue: writeback wb_workfn (flush-7:3) [ 1164.439475][T18106] Call Trace: [ 1164.439497][T18106] [ 1164.439528][T18106] dump_stack_lvl+0xe8/0x150 [ 1164.439615][T18106] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1164.439710][T18106] f2fs_write_end_bio+0x1211/0x16e0 [ 1164.439783][T18106] ? blkg_put+0x22/0x240 [ 1164.439901][T18106] __submit_merged_bio+0x258/0x6a0 [ 1164.439975][T18106] ? rcu_is_watching+0x16/0xb0 [ 1164.440068][T18106] __submit_merged_write_cond+0x3c9/0x4e0 [ 1164.440175][T18106] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1164.440368][T18106] f2fs_write_data_pages+0x2a27/0x36f0 [ 1164.440612][T18106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1164.440745][T18106] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1164.440963][T18106] ? __lock_acquire+0x6df/0x2e50 [ 1164.441069][T18106] ? do_raw_spin_unlock+0xf5/0x200 [ 1164.441163][T18106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1164.441250][T18106] do_writepages+0x338/0x560 [ 1164.441333][T18106] ? do_raw_spin_lock+0x12b/0x2f0 [ 1164.441434][T18106] ? reacquire_held_locks+0x117/0x1a0 [ 1164.441497][T18106] ? writeback_sb_inodes+0x450/0x1b00 [ 1164.441593][T18106] __writeback_single_inode+0x136/0x1220 [ 1164.441690][T18106] ? do_raw_spin_unlock+0xf5/0x200 [ 1164.441785][T18106] writeback_sb_inodes+0x9de/0x1b00 [ 1164.441889][T18106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1164.441963][T18106] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1164.442005][T18106] wb_writeback+0x41c/0xad0 [ 1164.442042][T18106] ? queue_io+0x1e1/0x470 [ 1164.442080][T18106] ? __pfx_wb_writeback+0x10/0x10 [ 1164.442119][T18106] ? do_raw_spin_lock+0x12b/0x2f0 [ 1164.442168][T18106] wb_workfn+0x431/0x10f0 [ 1164.442218][T18106] ? __pfx_wb_workfn+0x10/0x10 [ 1164.442250][T18106] ? rcu_is_watching+0x16/0xb0 [ 1164.442277][T18106] ? trace_hrtimer_start+0x82/0x200 [ 1164.442316][T18106] ? do_raw_spin_lock+0x12b/0x2f0 [ 1164.442355][T18106] ? lock_acquire+0x115/0x350 [ 1164.442385][T18106] ? rcu_is_watching+0x16/0xb0 [ 1164.442412][T18106] ? process_scheduled_works+0x97a/0x1630 [ 1164.442442][T18106] process_scheduled_works+0xc3d/0x1630 [ 1164.442508][T18106] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.442545][T18106] ? assign_work+0x3cf/0x5d0 [ 1164.442577][T18106] worker_thread+0xa47/0xfb0 [ 1164.442619][T18106] ? __kthread_parkme+0x71/0x1f0 [ 1164.442663][T18106] kthread+0x38b/0x480 [ 1164.442686][T18106] ? __pfx_worker_thread+0x10/0x10 [ 1164.442714][T18106] ? __pfx_kthread+0x10/0x10 [ 1164.442738][T18106] ret_from_fork+0x514/0xb70 [ 1164.442777][T18106] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.442812][T18106] ? __switch_to+0xc89/0x1420 [ 1164.442847][T18106] ? __pfx_kthread+0x10/0x10 [ 1164.442872][T18106] ret_from_fork_asm+0x1a/0x30 [ 1164.442925][T18106] [ 1164.442962][T18106] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1164.565864][ T30] loop3: lost filesystem error report for type 5 error -108 [ 1164.947056][T23692] loop2: detected capacity change from 0 to 1024 [ 1164.970193][T23692] EXT4-fs: Ignoring removed bh option [ 1165.120164][T23692] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1165.293464][T23692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.606417][T23690] loop6: detected capacity change from 0 to 40427 [ 1165.627455][T23690] F2FS-fs (loop6): invalid crc value [ 1167.055163][T23690] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1168.230208][T23723] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1168.230815][T23723] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1168.231815][T23723] veth1_virt_wifi: entered allmulticast mode [ 1168.248361][T23723] veth1_virt_wifi: left allmulticast mode [ 1169.190913][T23719] loop5: detected capacity change from 0 to 40427 [ 1169.204661][T23719] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1169.212242][T23719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1169.225553][T23719] F2FS-fs (loop5): Image doesn't support compression [ 1169.237580][T23719] F2FS-fs (loop5): invalid crc value [ 1169.310047][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.305399][ T5729] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1170.464220][T23719] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1170.482825][T23719] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 1170.482885][T23719] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1170.484409][T23719] F2FS-fs (loop5): Start checkpoint disabled! [ 1170.626434][T23719] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 1170.724043][T18017] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1170.920379][T18017] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1170.932558][T18017] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1170.932628][T18017] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1170.932664][T18017] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1170.986972][T18017] usb 3-1: string descriptor 0 read error: -22 [ 1170.987166][T18017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.401029][ T5729] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1171.405040][ T5729] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1171.405182][ T5729] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1171.405275][ T5729] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1171.418764][ T5729] usb 7-1: string descriptor 0 read error: -22 [ 1171.419245][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.572390][T18017] hid_parser_main: 192 callbacks suppressed [ 1171.579834][T18017] logitech 0003:046D:C626.0026: unknown main item tag 0x2 [ 1171.587469][T18017] logitech 0003:046D:C626.0026: unexpected long global item [ 1171.596017][T18017] logitech 0003:046D:C626.0026: parse failed [ 1171.602842][T18017] logitech 0003:046D:C626.0026: probe with driver logitech failed with error -22 [ 1171.919391][ T5729] logitech 0003:046D:C626.0027: unknown main item tag 0x2 [ 1171.929511][ T5729] logitech 0003:046D:C626.0027: unexpected long global item [ 1171.942395][ T5729] logitech 0003:046D:C626.0027: parse failed [ 1171.950256][ T5729] logitech 0003:046D:C626.0027: probe with driver logitech failed with error -22 [ 1171.991703][T23743] smpboot: CPU 1 is now offline [ 1172.118690][ T5804] usb 3-1: USB disconnect, device number 37 [ 1172.388297][T23741] loop5: detected capacity change from 0 to 32768 [ 1172.470524][T23741] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1172.602498][T23745] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1172.707960][ T5729] usb 7-1: USB disconnect, device number 15 [ 1172.758963][T23741] XFS (loop5): Ending clean mount [ 1173.134078][T23763] bridge0: port 2(veth1_virt_wifi) entered blocking state [ 1173.134199][T23763] bridge0: port 2(veth1_virt_wifi) entered disabled state [ 1173.134930][T23763] veth1_virt_wifi: entered allmulticast mode [ 1173.147692][T23763] veth1_virt_wifi: left allmulticast mode [ 1174.144184][T19003] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1174.235679][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1174.358349][T23774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5112'. [ 1174.386389][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1174.400199][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1174.400291][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1174.400322][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1174.431864][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1174.432333][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.853172][ T10] logitech 0003:046D:C626.0028: unknown main item tag 0x2 [ 1175.853239][ T10] logitech 0003:046D:C626.0028: unexpected long global item [ 1176.182704][T23784] loop5: detected capacity change from 0 to 1024 [ 1176.195910][T23784] EXT4-fs: Ignoring removed nobh option [ 1176.201875][T23784] EXT4-fs: Ignoring removed oldalloc option [ 1176.210863][T23784] EXT4-fs (loop5): Invalid log cluster size: 10756 [ 1176.805735][ T10] logitech 0003:046D:C626.0028: parse failed [ 1176.805977][ T10] logitech 0003:046D:C626.0028: probe with driver logitech failed with error -22 [ 1176.896967][ T10] usb 4-1: USB disconnect, device number 13 [ 1177.009841][T23787] loop5: detected capacity change from 0 to 764 [ 1177.548511][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.548615][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.246695][T23793] loop5: detected capacity change from 0 to 32768 [ 1178.259436][T23793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5117 (23793) [ 1178.310681][T23793] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1178.321288][T23793] BTRFS info (device loop5): using crc32c checksum algorithm [ 1178.380940][T18104] BTRFS warning (device loop5): checksum verify failed on logical 5312512 mirror 1 wanted 0x6ee40500 found 0x6ee483f7 level 0 [ 1178.395410][T23793] BTRFS error (device loop5 state C): failed to load root csum [ 1178.450248][T23815] loop2: detected capacity change from 0 to 1024 [ 1178.465610][T23815] EXT4-fs: Ignoring removed bh option [ 1178.472920][T23815] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1178.498337][ T31] audit: type=1326 audit(1786619308.414:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.6.5120" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc7d9e0d9 code=0x7fc00000 [ 1178.528450][ T31] audit: type=1800 audit(1786619308.454:298): pid=23816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5120" name="bmaControls" dev="configfs" ino=113394 res=0 errno=0 [ 1178.571109][T23815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.893713][T23793] BTRFS error (device loop5 state C): open_ctree failed: -EIO [ 1179.139768][ T31] audit: type=1326 audit(1786619309.054:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.6.5120" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdc7d3f459 code=0x7fc00000 [ 1179.385231][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.227718][T18017] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1181.375379][T18017] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1181.378638][T18017] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1181.378771][T18017] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1181.378850][T18017] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1181.395839][T18017] usb 3-1: string descriptor 0 read error: -22 [ 1181.396266][T18017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.581027][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5132'. [ 1181.642331][T23845] loop6: detected capacity change from 0 to 32768 [ 1181.669766][T23845] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1181.759541][T23845] XFS (loop6): Ending clean mount [ 1181.907104][T18017] logitech 0003:046D:C626.0029: unknown main item tag 0x2 [ 1181.907170][T18017] logitech 0003:046D:C626.0029: unexpected long global item [ 1181.912843][T18017] logitech 0003:046D:C626.0029: parse failed [ 1181.913155][T18017] logitech 0003:046D:C626.0029: probe with driver logitech failed with error -22 [ 1181.985168][T23869] loop3: detected capacity change from 0 to 1024 [ 1181.995974][T23869] EXT4-fs: Ignoring removed bh option [ 1182.005820][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.017169][T23869] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1182.048589][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.073363][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.087596][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.097975][T23869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.111937][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.136921][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.231980][T23873] loop5: detected capacity change from 0 to 8192 [ 1182.255548][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.273534][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.435838][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.447336][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.448757][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.450077][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.451330][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.452605][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.453765][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.611638][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.629713][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.646622][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.660339][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.680134][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.722065][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.746859][T21365] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1182.765455][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.791968][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.808164][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.809458][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.818185][T18017] usb 3-1: USB disconnect, device number 38 [ 1182.826277][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.841872][T23867] 9pnet_fd: p9_fd_create_tcp (23867): problem connecting socket to 127.0.0.1 [ 1182.963256][T22035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.251020][T23883] loop3: detected capacity change from 0 to 1024 [ 1183.252007][T23883] EXT4-fs: Ignoring removed nobh option [ 1183.252167][T23883] EXT4-fs: Ignoring removed oldalloc option [ 1183.255552][T23883] EXT4-fs (loop3): Invalid log cluster size: 10756 [ 1183.463711][T23886] loop3: detected capacity change from 0 to 764 [ 1183.533031][ T31] audit: type=1326 audit(1786619313.454:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.5.5139" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a9f39e0d9 code=0x0 [ 1186.311496][T23919] syzkaller0: entered promiscuous mode [ 1186.320959][T23919] syzkaller0: entered allmulticast mode [ 1186.336526][T23919] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1186.516290][T23924] smpboot: CPU 1 is now offline [ 1190.751089][T23929] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1191.128502][T23946] syzkaller0: entered promiscuous mode [ 1191.134381][T23946] syzkaller0: entered allmulticast mode [ 1192.371775][T23967] loop5: detected capacity change from 0 to 1024 [ 1192.387899][T23967] EXT4-fs: Ignoring removed bh option [ 1192.401229][T23967] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1192.436235][T23967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.754348][T23970] loop2: detected capacity change from 0 to 1024 [ 1192.764715][T23970] EXT4-fs: Ignoring removed nobh option [ 1192.764861][T23970] EXT4-fs: Ignoring removed oldalloc option [ 1192.774356][T23970] EXT4-fs (loop2): Invalid log cluster size: 10756 [ 1193.015836][T23984] loop2: detected capacity change from 0 to 764 [ 1193.305913][T19003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.425131][T23965] loop6: detected capacity change from 0 to 32768 [ 1194.511511][T23965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5164 (23965) [ 1194.541828][T23999] syzkaller0: entered promiscuous mode [ 1194.548349][T23999] syzkaller0: entered allmulticast mode [ 1194.900200][T24010] syzkaller0: entered promiscuous mode [ 1194.900259][T24010] syzkaller0: entered allmulticast mode [ 1194.922994][T24010] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1195.737901][T24021] process 24018 (syz.2.5181) no longer affine to cpu1 [ 1196.711576][ T145] wlan1: Trigger new scan to find an IBSS to join [ 1197.721699][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 1197.727180][T24023] smpboot: CPU 1 is now offline [ 1199.432398][T24024] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1200.303238][T24049] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[19003] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[24049] [ 1200.642761][T24049] loop5: detected capacity change from 0 to 512 [ 1200.836044][T24049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1200.891044][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.084407][T24053] syzkaller0: entered promiscuous mode [ 1201.084478][T24053] syzkaller0: entered allmulticast mode [ 1201.135050][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.148454][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.159003][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.170155][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.180476][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.274822][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.275898][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.277000][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.278121][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.279097][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.280281][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.281416][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.306311][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.316913][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.320013][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.323135][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.326573][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.329277][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.331751][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.348109][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.377162][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.397262][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.420668][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.447517][T19003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.460852][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.470418][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.485629][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.501047][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.512850][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.547152][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.550345][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.552946][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.608316][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.625711][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.635976][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.651024][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.694700][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.698123][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.701244][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.758657][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.776343][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.787286][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.797849][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.808228][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.819365][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.829947][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.840276][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.850701][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.862326][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.873539][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.884397][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.894957][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.906331][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.916634][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.929691][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.940085][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.950741][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1201.965113][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1202.000343][T24059] 9pnet_fd: p9_fd_create_tcp (24059): problem connecting socket to 127.0.0.1 [ 1202.035741][T24064] loop5: detected capacity change from 0 to 1024 [ 1202.043454][T24064] EXT4-fs: Ignoring removed nobh option [ 1202.052333][T24064] EXT4-fs: Ignoring removed oldalloc option [ 1202.060223][T24064] EXT4-fs (loop5): Invalid log cluster size: 10756 [ 1202.256735][T24064] loop5: detected capacity change from 0 to 764 [ 1203.270070][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 1203.279762][T24073] smpboot: CPU 1 is now offline [ 1203.844554][T24082] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1204.019164][ T31] audit: type=1800 audit(1786619333.884:301): pid=24089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5199" name="bmaControls" dev="configfs" ino=115008 res=0 errno=0 [ 1204.148443][T24098] 9pnet_fd: p9_fd_create_tcp (24098): problem connecting socket to 127.0.0.1 [ 1204.178536][T24097] loop3: detected capacity change from 0 to 1024 [ 1204.189439][T24097] EXT4-fs: Ignoring removed nobh option [ 1204.199316][T24097] EXT4-fs: Ignoring removed oldalloc option [ 1204.221741][T24097] EXT4-fs (loop3): Invalid log cluster size: 10756 [ 1204.331346][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1204.416548][T24103] loop2: detected capacity change from 0 to 1024 [ 1204.425892][T24103] EXT4-fs: Ignoring removed nobh option [ 1204.432373][T24103] EXT4-fs: Ignoring removed oldalloc option [ 1204.456846][T24103] EXT4-fs (loop2): Invalid log cluster size: 10756 [ 1205.835543][ T5749] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1206.010269][ T5749] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1206.029279][ T5749] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1206.029339][ T5749] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1206.029384][ T5749] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1206.077579][ T5749] usb 7-1: string descriptor 0 read error: -22 [ 1206.077746][ T5749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.152500][T24118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5208'. [ 1207.208263][ T5749] logitech 0003:046D:C626.002A: unknown main item tag 0x2 [ 1207.217253][ T5749] logitech 0003:046D:C626.002A: unexpected long global item [ 1207.218006][ T5749] logitech 0003:046D:C626.002A: parse failed [ 1207.218124][ T5749] logitech 0003:046D:C626.002A: probe with driver logitech failed with error -22 [ 1208.229552][T24135] 9pnet_fd: p9_fd_create_tcp (24135): problem connecting socket to 127.0.0.1 [ 1209.205612][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5212'. [ 1209.213404][T24135] 9pnet_fd: p9_fd_create_tcp (24135): problem connecting socket to 127.0.0.1 [ 1209.388470][ T10] usb 7-1: USB disconnect, device number 16 [ 1210.234074][T20830] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1211.575603][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.577919][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.608768][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.632104][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.648309][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.661804][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.676484][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.691861][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.716704][T24157] 9pnet_fd: p9_fd_create_tcp (24157): problem connecting socket to 127.0.0.1 [ 1211.784730][T20830] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1211.787904][T20830] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1211.788059][T20830] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1211.788121][T20830] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1211.805440][T20830] usb 6-1: string descriptor 0 read error: -22 [ 1211.805575][T20830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.840579][ T5749] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1211.858073][T24166] fuse: Bad value for 'fd' [ 1211.913250][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.924823][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.930810][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.939131][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.961227][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.971744][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.981867][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.989734][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1211.993734][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.010641][ T5749] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1212.011612][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.023421][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.030740][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.040444][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.048105][ T5749] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1212.048159][ T5749] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1212.048191][ T5749] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1212.093396][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.105124][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1212.105183][ T5749] usb 7-1: string descriptor 0 read error: -22 [ 1212.105316][ T5749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.130279][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.142751][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.158442][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.169928][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.181710][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.202292][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.214122][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.223620][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.236373][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.247771][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.261593][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.275881][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1212.278471][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1212.298764][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.301575][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.301656][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.329173][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.340246][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.350498][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.350578][ T10] usb 3-1: Product: syz [ 1212.350597][ T10] usb 3-1: Manufacturer: syz [ 1212.350631][ T10] usb 3-1: SerialNumber: syz [ 1212.373728][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.408125][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.426016][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.449934][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.461708][T20830] logitech 0003:046D:C626.002B: unknown main item tag 0x2 [ 1212.461783][T20830] logitech 0003:046D:C626.002B: unexpected long global item [ 1212.476867][T20830] logitech 0003:046D:C626.002B: parse failed [ 1212.483419][T20830] logitech 0003:046D:C626.002B: probe with driver logitech failed with error -22 [ 1212.484272][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.493086][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.504911][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.523224][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.545803][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.556717][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.557195][ T10] usb 3-1: 0:2 : does not exist [ 1212.573584][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.584707][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.595588][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.609178][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.620686][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.634324][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.645431][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.656673][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.667768][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.670230][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1212.688234][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.699289][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.716280][ T5749] logitech 0003:046D:C626.002C: unknown main item tag 0x2 [ 1212.725460][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.734689][ T5749] logitech 0003:046D:C626.002C: unexpected long global item [ 1212.743124][ T5749] logitech 0003:046D:C626.002C: parse failed [ 1212.750192][ T5749] logitech 0003:046D:C626.002C: probe with driver logitech failed with error -22 [ 1212.761017][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.777318][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.789735][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.809568][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.819588][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1212.840603][T24168] 9pnet_fd: p9_fd_create_tcp (24168): problem connecting socket to 127.0.0.1 [ 1213.040160][T24164] loop3: detected capacity change from 0 to 40427 [ 1213.057948][T24164] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1213.065808][T24164] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1213.081070][T24164] F2FS-fs (loop3): Image doesn't support compression [ 1213.090337][T24164] F2FS-fs (loop3): invalid crc value [ 1213.106099][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 1213.118982][T24174] smpboot: CPU 1 is now offline [ 1213.191868][ T10] usb 3-1: USB disconnect, device number 39 [ 1213.638581][T24178] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1213.647606][T20830] usb 7-1: USB disconnect, device number 17 [ 1213.692716][T24164] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1213.737740][T24164] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 1213.737793][T24164] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1213.737843][T24164] F2FS-fs (loop3): Start checkpoint disabled! [ 1213.795405][ T5749] usb 6-1: USB disconnect, device number 37 [ 1213.909398][T24085] udevd[24085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1214.188678][T24164] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 1214.204345][T24164] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1214.204393][T24164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1214.464086][T20830] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1214.535551][T24201] smpboot: CPU 1 is now offline [ 1215.021639][T24203] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1215.291484][T24211] loop5: detected capacity change from 0 to 1024 [ 1215.318872][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1215.341573][T24211] EXT4-fs: Ignoring removed bh option [ 1215.362550][T24211] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1215.417235][T24211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.451096][T24219] smpboot: CPU 1 is now offline [ 1216.211673][T19003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.161880][T20830] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1217.170582][T20830] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1217.181359][T20830] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1217.181388][T20830] usb 7-1: can't read configurations, error -71 [ 1220.616622][T24243] 9pnet_fd: p9_fd_create_tcp (24243): problem connecting socket to 127.0.0.1 [ 1221.599856][T24243] 9pnet_fd: p9_fd_create_tcp (24243): problem connecting socket to 127.0.0.1 [ 1222.202734][T24243] 9pnet_fd: p9_fd_create_tcp (24243): problem connecting socket to 127.0.0.1 [ 1222.203810][T24243] 9pnet_fd: p9_fd_create_tcp (24243): problem connecting socket to 127.0.0.1 [ 1222.279262][T24243] 9pnet_fd: p9_fd_create_tcp (24243): problem connecting socket to 127.0.0.1 [ 1223.010996][T24255] 9pnet_fd: p9_fd_create_tcp (24255): problem connecting socket to 127.0.0.1 [ 1224.851660][T24253] loop3: detected capacity change from 0 to 40427 [ 1224.874999][T24253] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1224.875035][T24253] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1224.892645][T24253] F2FS-fs (loop3): Image doesn't support compression [ 1224.906180][T24253] F2FS-fs (loop3): invalid crc value [ 1224.957310][T24277] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1225.155446][T24253] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1225.226298][T24253] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 1225.226361][T24253] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1225.226391][T24253] F2FS-fs (loop3): Start checkpoint disabled! [ 1225.314119][ T5750] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1227.612659][T24253] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 1228.150329][ T5750] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1228.164363][ T5750] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1228.174576][ T5750] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1228.174651][ T5750] usb 1-1: can't read configurations, error -71 [ 1228.988456][T24297] syzkaller0: entered promiscuous mode [ 1228.997558][T24297] syzkaller0: entered allmulticast mode [ 1229.014554][T24301] loop5: detected capacity change from 0 to 1024 [ 1229.021973][T24301] EXT4-fs: Ignoring removed bh option [ 1229.740129][T24301] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1229.797804][T24301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1230.806331][T19003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.192772][T24328] loop3: detected capacity change from 0 to 1024 [ 1231.200057][T24328] EXT4-fs: Ignoring removed bh option [ 1231.239830][T24328] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1231.275866][T24328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.738415][T22035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.252229][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1233.398857][ T5804] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1233.558680][T24360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5259'. [ 1233.582612][T24360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5259'. [ 1233.658637][T24360] bridge1: port 1(veth3) entered blocking state [ 1233.665725][T24360] bridge1: port 1(veth3) entered disabled state [ 1233.674832][T24360] veth3: entered allmulticast mode [ 1233.692235][T24360] veth3: entered promiscuous mode [ 1234.060823][T24368] loop3: detected capacity change from 0 to 1024 [ 1234.071304][T24368] EXT4-fs: Ignoring removed nobh option [ 1234.079864][T24368] EXT4-fs: Ignoring removed oldalloc option [ 1234.096699][T24368] EXT4-fs (loop3): Invalid log cluster size: 10756 [ 1234.180497][T24370] smpboot: CPU 1 is now offline [ 1234.357590][T24371] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1234.508821][T24378] loop6: detected capacity change from 0 to 1024 [ 1234.559276][T24378] EXT4-fs: Ignoring removed bh option [ 1234.569918][T24378] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1234.608693][T24378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.077949][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.462956][T24385] loop3: detected capacity change from 0 to 40427 [ 1235.587044][ T5804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1235.597803][ T5804] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1235.616830][ T5804] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1235.616894][ T5804] usb 6-1: can't read configurations, error -71 [ 1235.656101][T24385] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1235.669912][T24385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1235.679089][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.683307][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.686497][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.688463][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.688978][T24385] F2FS-fs (loop3): Image doesn't support compression [ 1235.689614][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.693059][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.696309][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.698576][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.699658][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.703144][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.706223][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.708541][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.709559][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.712799][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.716688][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.718778][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.720026][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.721471][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.723493][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.737610][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.740105][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.752969][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.785575][T24385] F2FS-fs (loop3): invalid crc value [ 1235.795648][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.825131][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.832412][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.836452][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.837485][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.838730][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.840300][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.841437][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1235.842475][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.047569][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.054887][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.057584][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.060717][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.065180][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.068129][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.094830][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.113805][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.130476][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.142237][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.160585][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.170913][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.183756][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.195501][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.212446][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.223298][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.238539][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.255863][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.266492][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.281073][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.303348][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.315668][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.337770][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.362538][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.363367][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.411017][T24395] smpboot: CPU 1 is now offline [ 1236.425091][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.447429][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.461430][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.483589][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.499056][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.513484][T24396] loop6: detected capacity change from 0 to 128 [ 1236.545731][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1236.564873][T24396] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1236.582155][T24396] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.597033][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.401647][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.605708][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.606584][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.655691][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.679427][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.697264][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.727971][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.836273][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.837054][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.875533][T21365] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1237.888372][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.960527][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.961385][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.992617][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1237.993468][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1238.027022][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1238.037007][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1238.062942][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1238.102648][T24385] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1238.113614][T24391] 9pnet_fd: p9_fd_create_tcp (24391): problem connecting socket to 127.0.0.1 [ 1238.265035][T24385] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 1238.273539][T24385] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1238.288881][T24385] F2FS-fs (loop3): Start checkpoint disabled! [ 1238.883705][T24408] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[21365] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[24408] [ 1238.888214][T24408] loop6: detected capacity change from 0 to 512 [ 1239.225953][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.226029][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.305150][T24408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.478620][T24385] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 1239.498730][T24385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1239.498766][T24385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1239.632298][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.878454][T24420] loop2: detected capacity change from 0 to 1024 [ 1239.887689][T24420] EXT4-fs: Ignoring removed bh option [ 1239.901033][T24420] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1239.952259][T24420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.839969][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.095697][T24436] loop6: detected capacity change from 0 to 1024 [ 1245.096417][T24436] EXT4-fs: Ignoring removed nobh option [ 1245.096538][T24436] EXT4-fs: Ignoring removed oldalloc option [ 1245.132908][T24436] EXT4-fs (loop6): Invalid log cluster size: 10756 [ 1245.322756][T24436] loop6: detected capacity change from 0 to 764 [ 1245.384701][T20830] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1245.549765][T20830] usb 3-1: Using ep0 maxpacket: 16 [ 1245.556143][T20830] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1245.579026][T20830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.579060][T20830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1245.609289][T20830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.609324][T20830] usb 3-1: Product: syz [ 1245.609349][T20830] usb 3-1: Manufacturer: syz [ 1245.609364][T20830] usb 3-1: SerialNumber: syz [ 1245.681848][T20830] usb 3-1: 0:2 : does not exist [ 1245.744775][T24447] loop6: detected capacity change from 0 to 1024 [ 1245.779811][T24447] EXT4-fs: Ignoring removed bh option [ 1245.791699][T24447] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1245.819752][T24449] loop3: detected capacity change from 0 to 1024 [ 1245.847042][T24447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.886104][T20830] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1246.291028][T20830] usb 3-1: USB disconnect, device number 40 [ 1246.541586][T24280] udevd[24280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.582614][T24449] hfsplus: failed to load extents file [ 1246.921530][T24460] loop2: detected capacity change from 0 to 1024 [ 1246.939270][T24460] EXT4-fs: Ignoring removed bh option [ 1246.958680][T24460] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1247.008676][T24460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.239778][T24468] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1247.275213][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.284711][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.286444][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.292679][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.299286][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.320082][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.346192][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.360544][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.373159][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.385034][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.396902][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.408111][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.418882][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.432988][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.447023][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.458397][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.470043][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.481281][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.494804][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.505984][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.517383][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.529798][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.542379][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.554766][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.566060][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.577374][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.588835][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.601597][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.613620][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.627935][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.639220][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.650831][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.662028][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.673542][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.685447][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.698126][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.710677][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.722890][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.734837][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.745944][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.757500][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.769085][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.780821][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.792424][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.805856][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.817102][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.828445][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.839593][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.851052][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.862821][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.875021][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.885913][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.897293][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.910187][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.922361][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.934845][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.959874][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.971491][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.987111][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1247.998706][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.021100][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.036187][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.048090][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.060580][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.074750][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.085851][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.092177][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.109211][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.122877][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.134616][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.147101][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.180693][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.182452][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.203122][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.216059][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.227102][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.246068][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.265782][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.289987][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.320383][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.336472][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.359504][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.372020][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.391911][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.411373][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.429331][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.446708][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.459333][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.472541][T24458] loop5: detected capacity change from 0 to 40427 [ 1248.486428][T24458] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1248.486493][T24458] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1248.487657][T24458] F2FS-fs (loop5): Image doesn't support compression [ 1248.490491][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.518572][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.531437][T24458] F2FS-fs (loop5): invalid crc value [ 1248.540750][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.551867][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.588816][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.603497][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.633411][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.655768][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.669276][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.689751][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.698017][T24471] loop3: detected capacity change from 0 to 1024 [ 1248.707173][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.716300][T24471] EXT4-fs: Ignoring removed bh option [ 1248.723982][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.730960][T24471] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1248.739635][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.757732][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.770463][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.785788][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.800571][T24467] 9pnet_fd: p9_fd_create_tcp (24467): problem connecting socket to 127.0.0.1 [ 1248.841270][T24471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.673426][T24458] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1249.706533][T24458] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 1249.714468][T24458] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1249.725603][T24458] F2FS-fs (loop5): Start checkpoint disabled! [ 1249.893470][T24458] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 1250.519747][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.049373][T24495] loop2: detected capacity change from 0 to 1024 [ 1251.066095][T24495] EXT4-fs: Ignoring removed bh option [ 1251.087138][T24495] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1251.113375][T24495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.790096][T24489] loop6: detected capacity change from 0 to 40427 [ 1252.806712][T24489] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1252.806765][T24489] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1252.853428][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.881289][T24489] F2FS-fs (loop6): Image doesn't support compression [ 1252.883620][T24489] F2FS-fs (loop6): invalid crc value [ 1252.983974][T22035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.289919][T24511] loop3: detected capacity change from 0 to 1024 [ 1253.298527][T24511] EXT4-fs: Ignoring removed bh option [ 1253.306672][T24511] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1253.356647][T24511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.417116][T24489] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1253.574466][T24489] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1253.574523][T24489] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1253.574555][T24489] F2FS-fs (loop6): Start checkpoint disabled! [ 1253.610404][T24504] loop5: detected capacity change from 0 to 40427 [ 1253.624342][T24504] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1253.637549][T24504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1253.645859][T24504] F2FS-fs (loop5): Image doesn't support compression [ 1253.658354][T24504] F2FS-fs (loop5): invalid crc value [ 1253.824174][T24489] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1254.092518][T24504] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1254.122281][T22035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.178749][T24504] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 1254.178905][T24504] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1254.178956][T24504] F2FS-fs (loop5): Start checkpoint disabled! [ 1254.548900][T24504] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 1254.566731][T24504] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1254.574733][T24504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1254.862711][T24521] loop2: detected capacity change from 0 to 1024 [ 1254.876859][T24521] EXT4-fs: Ignoring removed nobh option [ 1254.891608][T24521] EXT4-fs: Ignoring removed oldalloc option [ 1254.900079][T24521] EXT4-fs (loop2): Invalid log cluster size: 10756 [ 1255.081203][T24521] loop2: detected capacity change from 0 to 764 [ 1256.668960][T24542] smpboot: CPU 1 is now offline [ 1258.681040][T24553] loop6: detected capacity change from 0 to 1024 [ 1258.694331][T24553] EXT4-fs: Ignoring removed bh option [ 1258.714391][T24553] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1258.762240][T24553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.797982][T24557] loop2: detected capacity change from 0 to 1024 [ 1258.807143][T24557] EXT4-fs: Ignoring removed bh option [ 1258.830559][T24557] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1258.880757][T24557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.386445][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.613386][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.000019][T24572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5322'. [ 1260.089204][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 1260.211763][T24572] bridge4: port 1(veth3) entered blocking state [ 1260.213539][T24572] bridge4: port 1(veth3) entered disabled state [ 1260.213692][T24572] veth3: entered allmulticast mode [ 1260.239755][T24572] veth3: entered promiscuous mode [ 1260.570275][T24561] loop3: detected capacity change from 0 to 32768 [ 1260.593961][T24561] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5317 (24561) [ 1260.637593][T18106] kworker/u8:19: attempt to access beyond end of device [ 1260.637593][T18106] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1260.708502][T18106] CPU: 0 UID: 0 PID: 18106 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.708531][T18106] Tainted: [L]=SOFTLOCKUP [ 1260.708538][T18106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1260.708549][T18106] Workqueue: writeback wb_workfn (flush-7:5) [ 1260.708618][T18106] Call Trace: [ 1260.708625][T18106] [ 1260.708632][T18106] dump_stack_lvl+0xe8/0x150 [ 1260.708674][T18106] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1260.708719][T18106] f2fs_write_end_bio+0x1211/0x16e0 [ 1260.708747][T18106] ? blkg_put+0x22/0x240 [ 1260.708791][T18106] __submit_merged_bio+0x258/0x6a0 [ 1260.708819][T18106] ? rcu_is_watching+0x16/0xb0 [ 1260.708859][T18106] __submit_merged_write_cond+0x3c9/0x4e0 [ 1260.708889][T18106] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1260.708933][T18106] f2fs_write_data_pages+0x2a27/0x36f0 [ 1260.708984][T18106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1260.709020][T18106] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1260.709063][T18106] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1260.709099][T18106] ? __lock_acquire+0x6df/0x2e50 [ 1260.709135][T18106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1260.709162][T18106] do_writepages+0x338/0x560 [ 1260.709196][T18106] ? reacquire_held_locks+0x117/0x1a0 [ 1260.709216][T18106] ? writeback_sb_inodes+0x450/0x1b00 [ 1260.709251][T18106] __writeback_single_inode+0x136/0x1220 [ 1260.709280][T18106] ? do_raw_spin_unlock+0xf5/0x200 [ 1260.709306][T18106] writeback_sb_inodes+0x9de/0x1b00 [ 1260.709335][T18106] ? __lock_acquire+0x6df/0x2e50 [ 1260.709374][T18106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1260.709430][T18106] ? rcu_is_watching+0x16/0xb0 [ 1260.709449][T18106] ? queue_io+0x2d3/0x470 [ 1260.709477][T18106] wb_writeback+0x41c/0xad0 [ 1260.709504][T18106] ? queue_io+0x1e1/0x470 [ 1260.709533][T18106] ? __pfx_wb_writeback+0x10/0x10 [ 1260.709561][T18106] ? do_raw_spin_lock+0x12b/0x2f0 [ 1260.709602][T18106] wb_workfn+0x431/0x10f0 [ 1260.709637][T18106] ? __pfx_wb_workfn+0x10/0x10 [ 1260.709668][T18106] ? do_raw_spin_lock+0x12b/0x2f0 [ 1260.709697][T18106] ? lock_acquire+0x115/0x350 [ 1260.709720][T18106] ? rcu_is_watching+0x16/0xb0 [ 1260.709746][T18106] ? process_scheduled_works+0x97a/0x1630 [ 1260.709777][T18106] process_scheduled_works+0xc3d/0x1630 [ 1260.709821][T18106] ? __pfx_process_scheduled_works+0x10/0x10 [ 1260.709848][T18106] ? assign_work+0x3cf/0x5d0 [ 1260.709873][T18106] worker_thread+0xa47/0xfb0 [ 1260.709905][T18106] ? __kthread_parkme+0x71/0x1f0 [ 1260.709937][T18106] kthread+0x38b/0x480 [ 1260.709956][T18106] ? __pfx_worker_thread+0x10/0x10 [ 1260.709977][T18106] ? __pfx_kthread+0x10/0x10 [ 1260.709994][T18106] ret_from_fork+0x514/0xb70 [ 1260.710031][T18106] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.710057][T18106] ? __switch_to+0xc89/0x1420 [ 1260.710082][T18106] ? __pfx_kthread+0x10/0x10 [ 1260.710098][T18106] ret_from_fork_asm+0x1a/0x30 [ 1260.710136][T18106] [ 1260.927684][T18106] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1261.068492][T24561] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1261.079294][T24561] BTRFS info (device loop3): using crc32c checksum algorithm [ 1261.438229][T18106] BTRFS warning (device loop3): checksum verify failed on logical 5312512 mirror 1 wanted 0x6ee40500 found 0x6ee483f7 level 0 [ 1261.438362][T24561] BTRFS error (device loop3 state C): failed to load root csum [ 1261.983375][T24561] BTRFS error (device loop3 state C): open_ctree failed: -EIO [ 1263.073061][T24606] loop3: detected capacity change from 0 to 1024 [ 1263.172262][T24606] hfsplus: failed to load extents file [ 1263.281569][T24606] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1263.574118][T24619] loop2: detected capacity change from 0 to 1024 [ 1263.593070][T24619] EXT4-fs: Ignoring removed nobh option [ 1263.599320][T24619] EXT4-fs: Ignoring removed oldalloc option [ 1263.606417][T24619] EXT4-fs (loop2): Invalid log cluster size: 10756 [ 1263.840768][T24619] loop2: detected capacity change from 0 to 764 [ 1264.882777][T24633] loop6: detected capacity change from 0 to 1024 [ 1264.946455][T24633] EXT4-fs: Ignoring removed bh option [ 1264.979600][T24633] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1265.021861][T24633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1265.224897][T18103] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1266.068297][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.324647][ T31] audit: type=1800 audit(1786619396.244:302): pid=24652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5340" name="bmaControls" dev="configfs" ino=117370 res=0 errno=0 [ 1266.882339][T24631] loop2: detected capacity change from 0 to 40427 [ 1266.912568][T24631] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1266.912603][T24631] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1266.930614][T24631] F2FS-fs (loop2): Image doesn't support compression [ 1266.950359][T24631] F2FS-fs (loop2): invalid crc value [ 1267.329928][T24631] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1267.545889][T24631] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1267.545929][T24631] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1267.545961][T24631] F2FS-fs (loop2): Start checkpoint disabled! [ 1267.595205][T24666] syzkaller0: entered promiscuous mode [ 1267.595239][T24666] syzkaller0: entered allmulticast mode [ 1267.647386][T24666] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1267.884285][T24631] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1274.755005][ T5804] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1274.926878][ T5804] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1274.940319][ T5804] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1274.940367][ T5804] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1274.940399][ T5804] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1274.986434][ T5804] usb 1-1: string descriptor 0 read error: -22 [ 1274.986555][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.233735][ T5804] usbhid 1-1:1.0: can't add hid device: -71 [ 1276.241931][ T5804] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1277.217513][ T5804] usb 1-1: USB disconnect, device number 58 [ 1281.042286][ T31] audit: type=1326 audit(1786619410.964:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24738 comm="syz.0.5369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2d19e0d9 code=0x7fc00000 [ 1281.125696][ T5804] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1281.164484][T24718] loop2: detected capacity change from 0 to 40427 [ 1281.213709][T24721] loop5: detected capacity change from 0 to 40427 [ 1281.230029][T24718] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1281.240982][T24718] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1281.254526][T24718] F2FS-fs (loop2): Image doesn't support compression [ 1281.262412][T24718] F2FS-fs (loop2): invalid crc value [ 1281.278900][T24721] F2FS-fs (loop5): invalid crc value [ 1281.297730][ T5804] usb 7-1: not running at top speed; connect to a high speed hub [ 1281.297774][ T5804] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1281.329377][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.329413][ T5804] usb 7-1: Product: syz [ 1281.329436][ T5804] usb 7-1: Manufacturer: syz [ 1281.329450][ T5804] usb 7-1: SerialNumber: syz [ 1281.404041][ T5804] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 1281.520626][ T5804] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1281.576562][ T5804] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1281.622898][ T5804] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1281.656299][ T5804] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1281.685499][ C0] usb 7-1: malformed indat packet [ 1281.685727][ C0] usb 7-1: malformed indat packet [ 1281.690949][ C0] usb 7-1: malformed indat packet [ 1281.696473][ C0] usb 7-1: malformed indat packet [ 1281.697504][ C0] usb 7-1: malformed indat packet [ 1281.702737][ C0] usb 7-1: malformed indat packet [ 1281.708209][ C0] usb 7-1: malformed indat packet [ 1281.708441][ C0] usb 7-1: malformed indat packet [ 1281.764463][ T31] audit: type=1326 audit(1786619411.684:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24738 comm="syz.0.5369" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e2d13f459 code=0x7fc00000 [ 1282.915841][T17394] usb 7-1: USB disconnect, device number 20 [ 1283.030794][T17394] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1283.046651][T24718] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1283.165905][T24718] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1283.177767][T24718] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1283.191708][T24718] F2FS-fs (loop2): Start checkpoint disabled! [ 1283.218022][T24721] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1283.252839][T17394] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1283.275156][T17394] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1283.335676][T17394] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1283.356377][T17394] keyspan 7-1:1.0: device disconnected [ 1283.419002][T24721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1283.589279][T24718] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1289.120281][T24776] loop6: detected capacity change from 0 to 1024 [ 1289.135391][T24776] EXT4-fs: Ignoring removed bh option [ 1289.150870][T24776] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1289.567059][T24776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1290.685934][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.919319][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5381'. [ 1291.090456][T24790] bridge3: port 1(veth9) entered blocking state [ 1291.097399][T24790] bridge3: port 1(veth9) entered disabled state [ 1291.109003][T24790] veth9: entered allmulticast mode [ 1291.123348][T24790] veth9: entered promiscuous mode [ 1291.733121][T24797] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1293.193055][T24792] loop6: detected capacity change from 0 to 40427 [ 1293.210703][T24792] F2FS-fs (loop6): invalid crc value [ 1293.570205][T24792] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1293.593335][T24792] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1294.083942][ T30] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1294.662375][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 1294.669048][ T30] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1294.680288][ T30] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1294.680337][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.680375][ T30] usb 3-1: config 0 has no interface number 0 [ 1294.680425][ T30] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1294.680460][ T30] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1294.680491][ T30] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1294.680520][ T30] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1294.680549][ T30] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1294.775544][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.775594][ T30] usb 3-1: Product: syz [ 1294.775629][ T30] usb 3-1: Manufacturer: syz [ 1294.775664][ T30] usb 3-1: SerialNumber: syz [ 1294.826447][ T30] usb 3-1: config 0 descriptor?? [ 1294.834893][T24826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1294.881911][T21365] syz-executor: attempt to access beyond end of device [ 1294.881911][T21365] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1294.964233][T21365] CPU: 0 UID: 0 PID: 21365 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1294.964274][T21365] Tainted: [L]=SOFTLOCKUP [ 1294.964284][T21365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1294.964298][T21365] Call Trace: [ 1294.964309][T21365] [ 1294.964319][T21365] dump_stack_lvl+0xe8/0x150 [ 1294.964363][T21365] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1294.964404][T21365] f2fs_write_end_bio+0x1211/0x16e0 [ 1294.964432][T21365] ? blkg_put+0x22/0x240 [ 1294.964481][T21365] __submit_merged_bio+0x258/0x6a0 [ 1294.964513][T21365] ? rcu_is_watching+0x16/0xb0 [ 1294.964549][T21365] __submit_merged_write_cond+0x3c9/0x4e0 [ 1294.964592][T21365] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1294.964657][T21365] f2fs_write_data_pages+0x2a27/0x36f0 [ 1294.964694][T21365] ? __lock_acquire+0x6df/0x2e50 [ 1294.964755][T21365] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1294.964850][T21365] ? __bfs+0x153/0x290 [ 1294.964873][T21365] ? __pfx_hlock_conflict+0x10/0x10 [ 1294.964920][T21365] ? lockdep_unlock+0x5c/0xd0 [ 1294.964952][T21365] ? __lock_acquire+0x14b9/0x2e50 [ 1294.965005][T21365] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1294.965043][T21365] do_writepages+0x338/0x560 [ 1294.965086][T21365] ? do_raw_spin_unlock+0xf5/0x200 [ 1294.965122][T21365] filemap_fdatawrite+0x1e9/0x2f0 [ 1294.965157][T21365] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1294.965236][T21365] ? do_raw_spin_unlock+0xf5/0x200 [ 1294.965273][T21365] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1294.965314][T21365] f2fs_write_checkpoint+0xa3d/0x2710 [ 1294.965338][T21365] ? __lock_acquire+0x6df/0x2e50 [ 1294.965394][T21365] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1294.965459][T21365] ? try_to_wake_up+0x8b6/0x14d0 [ 1294.965502][T21365] kill_f2fs_super+0x2dd/0x700 [ 1294.965550][T21365] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1294.965600][T21365] ? call_rcu+0x64d/0x8b0 [ 1294.965636][T21365] ? lockdep_hardirqs_on+0x7b/0x110 [ 1294.965798][T21365] deactivate_locked_super+0xbc/0x110 [ 1294.965849][T21365] cleanup_mnt+0x3d3/0x460 [ 1294.965883][T21365] task_work_run+0x1d9/0x270 [ 1294.965912][T21365] ? __pfx_task_work_run+0x10/0x10 [ 1294.965948][T21365] exit_to_user_mode_loop+0x204/0x770 [ 1294.965972][T21365] ? rcu_is_watching+0x16/0xb0 [ 1294.966005][T21365] do_syscall_64+0x328/0x520 [ 1294.966038][T21365] ? trace_irq_disable+0x3b/0x140 [ 1294.966071][T21365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.966107][T21365] ? clear_bhb_loop+0x70/0xc0 [ 1294.966137][T21365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.966161][T21365] RIP: 0033:0x7fbdc7d9f317 [ 1294.966184][T21365] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1294.966204][T21365] RSP: 002b:00007ffc201668e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1294.966238][T21365] RAX: 0000000000000000 RBX: 00007fbdc7e34474 RCX: 00007fbdc7d9f317 [ 1294.966255][T21365] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc201669a0 [ 1294.966271][T21365] RBP: 00007ffc201669a0 R08: 00007ffc201679a0 R09: 00000000ffffffff [ 1294.966288][T21365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc20167a30 [ 1294.966303][T21365] R13: 00007fbdc7e34474 R14: 000000000013c116 R15: 00007ffc20167a70 [ 1294.966340][T21365] [ 1294.977337][T21365] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1295.162939][T24826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.180614][T24826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.323273][T24826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.336161][T24826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.370129][ T30] usb 3-1: NFC: intf ffff888081945000 id ffffffff8f84d260 [ 1295.618486][ T30] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 1295.637839][ T30] usb 3-1: USB disconnect, device number 41 [ 1295.652176][ T30] usb 3-1: NFC: intf ffff888081945000 [ 1295.703561][T24843] loop5: detected capacity change from 0 to 1024 [ 1295.746557][T24843] hfsplus: failed to load extents file [ 1296.584017][ T5749] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1296.744802][ T5749] usb 6-1: Using ep0 maxpacket: 32 [ 1296.751290][ T5749] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1296.766735][ T5749] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1296.777023][ T5749] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.787706][ T5749] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1296.797087][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.809419][ T5749] usb 6-1: config 0 descriptor?? [ 1297.160712][ T5749] usb 6-1: string descriptor 0 read error: -71 [ 1297.169422][ T5749] usb 6-1: USB disconnect, device number 40 [ 1297.228021][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1299.167310][T24876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5409'. [ 1299.258037][T24873] loop5: detected capacity change from 0 to 512 [ 1299.318382][T24873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.394413][T19003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.178546][T24901] fuse: Bad value for 'fd' [ 1300.430750][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.430836][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.869589][T24911] bridge0: port 2(hsr0) entered blocking state [ 1301.870584][T24911] bridge0: port 2(hsr0) entered disabled state [ 1301.871872][T24911] hsr0: entered allmulticast mode [ 1301.872124][T24911] hsr_slave_0: entered allmulticast mode [ 1301.872356][T24911] hsr_slave_1: entered allmulticast mode [ 1301.875890][T24911] hsr0: entered promiscuous mode [ 1301.877282][T24911] bridge0: port 2(hsr0) entered blocking state [ 1301.877401][T24911] bridge0: port 2(hsr0) entered forwarding state [ 1303.283411][T24912] loop2: detected capacity change from 0 to 40427 [ 1303.291688][T24912] F2FS-fs (loop2): invalid crc value [ 1303.589946][T24912] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1308.575546][T24988] tipc: Enabling of bearer rejected, failed to enable media [ 1312.820773][ T31] audit: type=1107 audit(1786619442.414:305): pid=25021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1313.504605][T25030] fuse: Bad value for 'fd' [ 1313.626900][T25036] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1314.710975][T25053] syzkaller0: entered promiscuous mode [ 1314.720992][T25053] syzkaller0: entered allmulticast mode [ 1315.303992][ T31] audit: type=1107 audit(1786619445.094:306): pid=25056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1316.055865][T25070] fuse: Unknown parameter 'grou00000000000000000000' [ 1316.131391][T25072] loop2: detected capacity change from 0 to 256 [ 1316.141853][T25072] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 1316.141907][T25072] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1316.361826][T25074] 9pnet_fd: p9_fd_create_tcp (25074): problem connecting socket to 127.0.0.1 [ 1316.466548][T25078] zero sized request [ 1319.026546][T25099] overlayfs: failed to clone upperpath [ 1320.450539][T25119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1320.498554][T25088] loop6: detected capacity change from 0 to 40427 [ 1320.508404][T25117] fuse: Unknown parameter 'grou00000000000000000000' [ 1320.531987][T25088] F2FS-fs (loop6): invalid crc value [ 1321.389205][T25119] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1321.839575][T25088] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1321.856929][T25088] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1322.581726][ T31] audit: type=1107 audit(1786619452.494:307): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1323.644135][T25148] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1324.843807][T25163] overlayfs: failed to clone upperpath [ 1328.072082][T25173] 9pnet_fd: p9_fd_create_tcp (25173): problem connecting socket to 127.0.0.1 [ 1328.286681][T25195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1328.364583][T25193] fuse: Bad value for 'fd' [ 1328.411772][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5505'. [ 1329.264165][T18104] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1329.295231][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5508'. [ 1330.875456][ T31] audit: type=1107 audit(1786619460.694:308): pid=25233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1331.374172][T25242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5521'. [ 1331.383823][T25242] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5521'. [ 1333.902448][T25281] overlayfs: failed to resolve './bus': -2 [ 1335.903157][T25265] loop2: detected capacity change from 0 to 40427 [ 1335.914923][T25265] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1335.914969][T25265] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1335.921510][T25265] F2FS-fs (loop2): Unable to read 2th superblock [ 1336.489720][T25272] loop6: detected capacity change from 0 to 40427 [ 1336.499866][T25272] F2FS-fs (loop6): invalid crc value [ 1336.670503][T25272] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1337.007655][T25304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.718767][T25293] loop2: detected capacity change from 0 to 40427 [ 1337.755663][T25293] F2FS-fs (loop2): invalid crc value [ 1338.243511][T25293] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1338.325044][T25293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1339.475374][T20244] syz-executor: attempt to access beyond end of device [ 1339.475374][T20244] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1339.499284][T20244] CPU: 0 UID: 0 PID: 20244 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.499346][T20244] Tainted: [L]=SOFTLOCKUP [ 1339.499362][T20244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1339.499390][T20244] Call Trace: [ 1339.499399][T20244] [ 1339.499411][T20244] dump_stack_lvl+0xe8/0x150 [ 1339.499451][T20244] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1339.499490][T20244] f2fs_write_end_bio+0x1211/0x16e0 [ 1339.499518][T20244] ? blkg_put+0x22/0x240 [ 1339.499564][T20244] __submit_merged_bio+0x258/0x6a0 [ 1339.499596][T20244] ? rcu_is_watching+0x16/0xb0 [ 1339.499630][T20244] __submit_merged_write_cond+0x3c9/0x4e0 [ 1339.499671][T20244] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1339.499727][T20244] f2fs_write_data_pages+0x2a27/0x36f0 [ 1339.499763][T20244] ? __lock_acquire+0x6df/0x2e50 [ 1339.499823][T20244] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1339.499909][T20244] ? __bfs+0x153/0x290 [ 1339.499930][T20244] ? __pfx_hlock_conflict+0x10/0x10 [ 1339.499978][T20244] ? lockdep_unlock+0x5c/0xd0 [ 1339.500010][T20244] ? __lock_acquire+0x14b9/0x2e50 [ 1339.500059][T20244] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1339.500095][T20244] do_writepages+0x338/0x560 [ 1339.500135][T20244] ? do_raw_spin_unlock+0xf5/0x200 [ 1339.500172][T20244] filemap_fdatawrite+0x1e9/0x2f0 [ 1339.500206][T20244] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1339.500285][T20244] ? do_raw_spin_unlock+0xf5/0x200 [ 1339.500321][T20244] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1339.500362][T20244] f2fs_write_checkpoint+0xa3d/0x2710 [ 1339.500393][T20244] ? __lock_acquire+0x6df/0x2e50 [ 1339.500450][T20244] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1339.500513][T20244] ? try_to_wake_up+0x8b6/0x14d0 [ 1339.500556][T20244] kill_f2fs_super+0x2dd/0x700 [ 1339.500602][T20244] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1339.500651][T20244] ? call_rcu+0x64d/0x8b0 [ 1339.500678][T20244] ? lockdep_hardirqs_on+0x7b/0x110 [ 1339.500729][T20244] deactivate_locked_super+0xbc/0x110 [ 1339.500769][T20244] cleanup_mnt+0x3d3/0x460 [ 1339.500803][T20244] task_work_run+0x1d9/0x270 [ 1339.500830][T20244] ? __pfx_task_work_run+0x10/0x10 [ 1339.500864][T20244] exit_to_user_mode_loop+0x204/0x770 [ 1339.500886][T20244] ? rcu_is_watching+0x16/0xb0 [ 1339.500918][T20244] do_syscall_64+0x328/0x520 [ 1339.500952][T20244] ? trace_irq_disable+0x3b/0x140 [ 1339.500974][T20244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.500997][T20244] ? clear_bhb_loop+0x70/0xc0 [ 1339.501026][T20244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.501049][T20244] RIP: 0033:0x7f4f3839f317 [ 1339.501072][T20244] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1339.501092][T20244] RSP: 002b:00007ffd016a26e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1339.501119][T20244] RAX: 0000000000000000 RBX: 00007f4f38434474 RCX: 00007f4f3839f317 [ 1339.501135][T20244] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd016a27a0 [ 1339.501150][T20244] RBP: 00007ffd016a27a0 R08: 00007ffd016a37a0 R09: 00000000ffffffff [ 1339.501167][T20244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd016a3830 [ 1339.501182][T20244] R13: 00007f4f38434474 R14: 0000000000146f9a R15: 00007ffd016a3870 [ 1339.501218][T20244] [ 1339.771747][T20244] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1341.829762][T25359] loop2: detected capacity change from 0 to 1024 [ 1341.839779][T25359] EXT4-fs: Ignoring removed bh option [ 1341.848763][T25359] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1341.877051][T25359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.027312][T25366] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1342.027312][T25366] The task syz.0.5555 (25366) triggered the difference, watch for misbehavior. [ 1343.592008][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.946302][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5566'. [ 1344.026457][T25400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5566'. [ 1344.117965][T25400] bridge1: port 1(veth3) entered blocking state [ 1344.118224][T25400] bridge1: port 1(veth3) entered disabled state [ 1344.118789][T25400] veth3: entered allmulticast mode [ 1344.148130][T25400] veth3: entered promiscuous mode [ 1344.615090][T25398] loop2: detected capacity change from 0 to 40427 [ 1344.633940][T25398] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1344.641486][T25398] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1344.652174][T25398] F2FS-fs (loop2): Image doesn't support compression [ 1344.662148][T25398] F2FS-fs (loop2): invalid crc value [ 1344.854407][T25398] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1344.884112][T25398] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 1344.884162][T25398] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1344.884211][T25398] F2FS-fs (loop2): Start checkpoint disabled! [ 1344.957753][T25398] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 1345.011838][T25398] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1345.019088][T25398] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1345.036567][T25417] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5571'. [ 1346.225860][T18103] kworker/u8:16: attempt to access beyond end of device [ 1346.225860][T18103] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1346.241503][T18103] CPU: 1 UID: 0 PID: 18103 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.241542][T18103] Tainted: [L]=SOFTLOCKUP [ 1346.241552][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.241568][T18103] Workqueue: writeback wb_workfn (flush-7:2) [ 1346.241616][T18103] Call Trace: [ 1346.241626][T18103] [ 1346.241638][T18103] dump_stack_lvl+0xe8/0x150 [ 1346.241675][T18103] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1346.241716][T18103] f2fs_write_end_bio+0x1211/0x16e0 [ 1346.241745][T18103] ? blkg_put+0x22/0x240 [ 1346.241802][T18103] __submit_merged_bio+0x258/0x6a0 [ 1346.241835][T18103] ? rcu_is_watching+0x16/0xb0 [ 1346.241871][T18103] __submit_merged_write_cond+0x3c9/0x4e0 [ 1346.241916][T18103] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1346.241980][T18103] f2fs_write_data_pages+0x2a27/0x36f0 [ 1346.242062][T18103] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1346.242117][T18103] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1346.242187][T18103] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1346.242245][T18103] ? __lock_acquire+0x6df/0x2e50 [ 1346.242290][T18103] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1346.242426][T18103] ? f2fs_update_inode+0x1394/0x25c0 [ 1346.242455][T18103] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1346.242493][T18103] do_writepages+0x338/0x560 [ 1346.242534][T18103] ? reacquire_held_locks+0x117/0x1a0 [ 1346.242562][T18103] ? writeback_sb_inodes+0x450/0x1b00 [ 1346.242604][T18103] __writeback_single_inode+0x136/0x1220 [ 1346.242645][T18103] ? do_raw_spin_unlock+0xf5/0x200 [ 1346.242693][T18103] writeback_sb_inodes+0x9de/0x1b00 [ 1346.242727][T18103] ? __lock_acquire+0x6df/0x2e50 [ 1346.242771][T18103] ? lock_acquire+0x115/0x350 [ 1346.242816][T18103] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1346.242909][T18103] ? rcu_is_watching+0x16/0xb0 [ 1346.242937][T18103] ? queue_io+0x2d3/0x470 [ 1346.242978][T18103] wb_writeback+0x41c/0xad0 [ 1346.243017][T18103] ? queue_io+0x1e1/0x470 [ 1346.243060][T18103] ? __pfx_wb_writeback+0x10/0x10 [ 1346.243093][T18103] ? do_raw_spin_lock+0x12b/0x2f0 [ 1346.243146][T18103] wb_workfn+0x431/0x10f0 [ 1346.243201][T18103] ? __pfx_wb_workfn+0x10/0x10 [ 1346.243236][T18103] ? rcu_is_watching+0x16/0xb0 [ 1346.243264][T18103] ? trace_hrtimer_start+0x82/0x200 [ 1346.243306][T18103] ? do_raw_spin_lock+0x12b/0x2f0 [ 1346.243350][T18103] ? lock_acquire+0x115/0x350 [ 1346.243385][T18103] ? rcu_is_watching+0x16/0xb0 [ 1346.243415][T18103] ? process_scheduled_works+0x97a/0x1630 [ 1346.243448][T18103] process_scheduled_works+0xc3d/0x1630 [ 1346.243522][T18103] ? __pfx_process_scheduled_works+0x10/0x10 [ 1346.243562][T18103] ? assign_work+0x3cf/0x5d0 [ 1346.243599][T18103] worker_thread+0xa47/0xfb0 [ 1346.243649][T18103] ? __kthread_parkme+0x71/0x1f0 [ 1346.243698][T18103] kthread+0x38b/0x480 [ 1346.243722][T18103] ? __pfx_worker_thread+0x10/0x10 [ 1346.243751][T18103] ? __pfx_kthread+0x10/0x10 [ 1346.243776][T18103] ret_from_fork+0x514/0xb70 [ 1346.243824][T18103] ? __pfx_ret_from_fork+0x10/0x10 [ 1346.243856][T18103] ? __switch_to+0xc89/0x1420 [ 1346.243889][T18103] ? __pfx_kthread+0x10/0x10 [ 1346.243913][T18103] ret_from_fork_asm+0x1a/0x30 [ 1346.243970][T18103] [ 1346.403359][T18103] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1346.837146][T25424] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1347.801223][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5576'. [ 1347.841223][T25429] loop6: detected capacity change from 0 to 512 [ 1347.861873][T25429] ext4: Unknown parameter 'subj_type' [ 1349.650070][T25451] overlayfs: missing 'lowerdir' [ 1351.111193][T25454] Process accounting resumed [ 1351.349820][T25463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5584'. [ 1351.905604][T25477] overlayfs: failed to clone upperpath [ 1353.166559][T25500] overlayfs: failed to clone upperpath [ 1354.018552][T25501] loop2: detected capacity change from 0 to 512 [ 1354.045237][T25501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1354.088018][T25501] EXT4-fs (loop2): 1 truncate cleaned up [ 1354.125192][T25501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.483208][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.042206][T25515] overlayfs: failed to clone upperpath [ 1358.508099][T25543] loop2: detected capacity change from 0 to 512 [ 1358.529151][T25543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1358.552290][T25543] EXT4-fs (loop2): 1 truncate cleaned up [ 1358.570506][T25543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.341396][T25561] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5613'. [ 1360.558524][T25566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5619'. [ 1360.618948][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.707555][T25571] overlayfs: failed to clone upperpath [ 1361.327741][T25566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5619'. [ 1361.905081][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.905187][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.873473][T25608] loop2: detected capacity change from 0 to 164 [ 1363.642934][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5629'. [ 1364.015365][T25624] overlayfs: failed to clone upperpath [ 1364.493193][T25629] loop2: detected capacity change from 0 to 1024 [ 1364.528974][T25629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.529108][T25629] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.794015][T25629] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.5636: lblock 3 mapped to illegal pblock 3 (length 3) [ 1364.815423][T25629] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1364.815481][T25629] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1364.815481][T25629] [ 1366.960867][ T1282] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 1366.977136][ T1282] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1366.977187][ T1282] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1366.977187][ T1282] [ 1367.061981][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1368.311355][T25696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1368.326464][T25696] ip6gre1: entered promiscuous mode [ 1368.326490][T25696] ip6gre1: entered allmulticast mode [ 1368.471056][T25699] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5655'. [ 1370.031160][T25739] overlayfs: failed to clone upperpath [ 1371.035063][T18017] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1371.081234][T25765] 9pnet: p9_errstr2errno: server reported unknown error [ 1371.193978][T18017] usb 3-1: Using ep0 maxpacket: 16 [ 1371.195972][T18017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1371.198933][T18017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.199073][T18017] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1371.209137][T18017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.209213][T18017] usb 3-1: Product: syz [ 1371.209258][T18017] usb 3-1: Manufacturer: syz [ 1371.209301][T18017] usb 3-1: SerialNumber: syz [ 1371.293674][T18017] usb 3-1: 0:2 : does not exist [ 1371.327587][T25771] fuse: Bad value for 'fd' [ 1371.444185][T25750] loop6: detected capacity change from 0 to 40427 [ 1371.468829][T25750] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1371.468875][T25750] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1371.469336][T25750] F2FS-fs (loop6): Image doesn't support compression [ 1371.471012][T25750] F2FS-fs (loop6): invalid crc value [ 1371.551451][T18017] usb 3-1: USB disconnect, device number 42 [ 1371.804357][T25781] overlayfs: failed to clone upperpath [ 1372.463566][T25750] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1372.483681][T25750] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1372.491648][T25750] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1372.509009][T25750] F2FS-fs (loop6): Start checkpoint disabled! [ 1372.530082][T25750] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1372.541747][T25750] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1372.549164][T25750] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1372.620521][T24748] udevd[24748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1373.363295][ T145] kworker/u8:6: attempt to access beyond end of device [ 1373.363295][ T145] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1373.363509][ T145] CPU: 0 UID: 0 PID: 145 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.363594][ T145] Tainted: [L]=SOFTLOCKUP [ 1373.363677][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1373.363720][ T145] Workqueue: writeback wb_workfn (flush-7:6) [ 1373.363841][ T145] Call Trace: [ 1373.363865][ T145] [ 1373.363895][ T145] dump_stack_lvl+0xe8/0x150 [ 1373.364020][ T145] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1373.364136][ T145] f2fs_write_end_bio+0x1211/0x16e0 [ 1373.364204][ T145] ? blkg_put+0x22/0x240 [ 1373.364327][ T145] __submit_merged_bio+0x258/0x6a0 [ 1373.364398][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.364486][ T145] f2fs_submit_merged_write+0x27d/0x380 [ 1373.364591][ T145] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1373.364714][ T145] f2fs_sync_node_pages+0x1055/0x1210 [ 1373.364864][ T145] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1373.364975][ T145] ? __percpu_counter_sum+0x1c6/0x1f0 [ 1373.365280][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.365366][ T145] ? blk_start_plug+0x51/0x1b0 [ 1373.365486][ T145] f2fs_write_node_pages+0x311/0x700 [ 1373.365584][ T145] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1373.365700][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.365744][ T145] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1373.365837][ T145] do_writepages+0x338/0x560 [ 1373.365941][ T145] ? reacquire_held_locks+0x117/0x1a0 [ 1373.366005][ T145] ? writeback_sb_inodes+0x450/0x1b00 [ 1373.366118][ T145] __writeback_single_inode+0x136/0x1220 [ 1373.366224][ T145] ? do_raw_spin_unlock+0xf5/0x200 [ 1373.366329][ T145] writeback_sb_inodes+0x9de/0x1b00 [ 1373.366429][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.366570][ T145] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1373.366799][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.366874][ T145] ? queue_io+0x2d3/0x470 [ 1373.367014][ T145] wb_writeback+0x41c/0xad0 [ 1373.367120][ T145] ? queue_io+0x1e1/0x470 [ 1373.367230][ T145] ? __pfx_wb_writeback+0x10/0x10 [ 1373.367309][ T145] ? do_raw_spin_lock+0x12b/0x2f0 [ 1373.367452][ T145] wb_workfn+0x431/0x10f0 [ 1373.367593][ T145] ? __pfx_wb_workfn+0x10/0x10 [ 1373.367681][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.367771][ T145] ? trace_hrtimer_start+0x82/0x200 [ 1373.367889][ T145] ? do_raw_spin_lock+0x12b/0x2f0 [ 1373.367992][ T145] ? lock_acquire+0x115/0x350 [ 1373.368081][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.368158][ T145] ? process_scheduled_works+0x97a/0x1630 [ 1373.368251][ T145] process_scheduled_works+0xc3d/0x1630 [ 1373.368427][ T145] ? __pfx_process_scheduled_works+0x10/0x10 [ 1373.368543][ T145] ? assign_work+0x3cf/0x5d0 [ 1373.368632][ T145] worker_thread+0xa47/0xfb0 [ 1373.368803][ T145] kthread+0x38b/0x480 [ 1373.368866][ T145] ? __pfx_worker_thread+0x10/0x10 [ 1373.368940][ T145] ? __pfx_kthread+0x10/0x10 [ 1373.368998][ T145] ret_from_fork+0x514/0xb70 [ 1373.369122][ T145] ? __pfx_ret_from_fork+0x10/0x10 [ 1373.369233][ T145] ? __switch_to+0xc89/0x1420 [ 1373.369323][ T145] ? __pfx_kthread+0x10/0x10 [ 1373.369396][ T145] ret_from_fork_asm+0x1a/0x30 [ 1373.369549][ T145] [ 1373.432757][T25785] 9pnet_fd: p9_fd_create_tcp (25785): problem connecting socket to 127.0.0.1 [ 1373.491803][ T145] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1373.492079][ T145] CPU: 0 UID: 0 PID: 145 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.492162][ T145] Tainted: [L]=SOFTLOCKUP [ 1373.492191][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1373.492226][ T145] Workqueue: writeback wb_workfn (flush-7:6) [ 1373.492344][ T145] Call Trace: [ 1373.492368][ T145] [ 1373.492399][ T145] dump_stack_lvl+0xe8/0x150 [ 1373.492491][ T145] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1373.492596][ T145] f2fs_write_end_bio+0x1211/0x16e0 [ 1373.492708][ T145] __submit_merged_bio+0x258/0x6a0 [ 1373.492794][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.492897][ T145] f2fs_submit_merged_write+0x27d/0x380 [ 1373.493007][ T145] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1373.493133][ T145] f2fs_sync_node_pages+0x1055/0x1210 [ 1373.493263][ T145] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1373.493348][ T145] ? __percpu_counter_sum+0x1c6/0x1f0 [ 1373.493522][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.493606][ T145] ? blk_start_plug+0x51/0x1b0 [ 1373.493680][ T145] f2fs_write_node_pages+0x311/0x700 [ 1373.493775][ T145] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1373.493881][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.493944][ T145] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1373.494028][ T145] do_writepages+0x338/0x560 [ 1373.494124][ T145] ? reacquire_held_locks+0x117/0x1a0 [ 1373.494189][ T145] ? writeback_sb_inodes+0x450/0x1b00 [ 1373.494293][ T145] __writeback_single_inode+0x136/0x1220 [ 1373.494404][ T145] ? do_raw_spin_unlock+0xf5/0x200 [ 1373.494478][ T145] writeback_sb_inodes+0x9de/0x1b00 [ 1373.494506][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.494589][ T145] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1373.494787][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.494851][ T145] ? queue_io+0x2d3/0x470 [ 1373.494955][ T145] wb_writeback+0x41c/0xad0 [ 1373.495099][ T145] ? queue_io+0x1e1/0x470 [ 1373.495198][ T145] ? __pfx_wb_writeback+0x10/0x10 [ 1373.495284][ T145] ? do_raw_spin_lock+0x12b/0x2f0 [ 1373.495402][ T145] wb_workfn+0x431/0x10f0 [ 1373.495521][ T145] ? __pfx_wb_workfn+0x10/0x10 [ 1373.495597][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.495668][ T145] ? trace_hrtimer_start+0x82/0x200 [ 1373.495783][ T145] ? do_raw_spin_lock+0x12b/0x2f0 [ 1373.495901][ T145] ? lock_acquire+0x115/0x350 [ 1373.495999][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.496072][ T145] ? process_scheduled_works+0x97a/0x1630 [ 1373.496148][ T145] process_scheduled_works+0xc3d/0x1630 [ 1373.496308][ T145] ? __pfx_process_scheduled_works+0x10/0x10 [ 1373.496409][ T145] ? assign_work+0x3cf/0x5d0 [ 1373.496499][ T145] worker_thread+0xa47/0xfb0 [ 1373.496668][ T145] kthread+0x38b/0x480 [ 1373.496731][ T145] ? __pfx_worker_thread+0x10/0x10 [ 1373.496805][ T145] ? __pfx_kthread+0x10/0x10 [ 1373.496868][ T145] ret_from_fork+0x514/0xb70 [ 1373.496964][ T145] ? __pfx_ret_from_fork+0x10/0x10 [ 1373.497065][ T145] ? __switch_to+0xc89/0x1420 [ 1373.497151][ T145] ? __pfx_kthread+0x10/0x10 [ 1373.497215][ T145] ret_from_fork_asm+0x1a/0x30 [ 1373.497294][ T145] [ 1373.560318][ T145] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1373.560651][ T145] CPU: 0 UID: 0 PID: 145 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.560735][ T145] Tainted: [L]=SOFTLOCKUP [ 1373.560757][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1373.560793][ T145] Workqueue: writeback wb_workfn (flush-7:6) [ 1373.560908][ T145] Call Trace: [ 1373.560930][ T145] [ 1373.560958][ T145] dump_stack_lvl+0xe8/0x150 [ 1373.561053][ T145] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1373.561150][ T145] f2fs_write_end_bio+0x1211/0x16e0 [ 1373.561287][ T145] __submit_merged_bio+0x258/0x6a0 [ 1373.561379][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.561462][ T145] f2fs_submit_merged_write+0x27d/0x380 [ 1373.561559][ T145] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1373.561693][ T145] f2fs_sync_node_pages+0x1055/0x1210 [ 1373.561818][ T145] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1373.561866][ T145] ? __percpu_counter_sum+0x1c6/0x1f0 [ 1373.562070][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.562153][ T145] ? blk_start_plug+0x51/0x1b0 [ 1373.562227][ T145] f2fs_write_node_pages+0x311/0x700 [ 1373.562360][ T145] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1373.562465][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.562529][ T145] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1373.562615][ T145] do_writepages+0x338/0x560 [ 1373.562714][ T145] ? reacquire_held_locks+0x117/0x1a0 [ 1373.562775][ T145] ? writeback_sb_inodes+0x450/0x1b00 [ 1373.562891][ T145] __writeback_single_inode+0x136/0x1220 [ 1373.562989][ T145] ? do_raw_spin_unlock+0xf5/0x200 [ 1373.563085][ T145] writeback_sb_inodes+0x9de/0x1b00 [ 1373.563171][ T145] ? __lock_acquire+0x6df/0x2e50 [ 1373.563307][ T145] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1373.563535][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.563607][ T145] ? queue_io+0x2d3/0x470 [ 1373.563704][ T145] wb_writeback+0x41c/0xad0 [ 1373.563794][ T145] ? queue_io+0x1e1/0x470 [ 1373.563900][ T145] ? __pfx_wb_writeback+0x10/0x10 [ 1373.563985][ T145] ? do_raw_spin_lock+0x12b/0x2f0 [ 1373.564112][ T145] wb_workfn+0x431/0x10f0 [ 1373.564239][ T145] ? __pfx_wb_workfn+0x10/0x10 [ 1373.564331][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.564403][ T145] ? trace_hrtimer_start+0x82/0x200 [ 1373.564507][ T145] ? do_raw_spin_lock+0x12b/0x2f0 [ 1373.564605][ T145] ? lock_acquire+0x115/0x350 [ 1373.564689][ T145] ? rcu_is_watching+0x16/0xb0 [ 1373.564771][ T145] ? process_scheduled_works+0x97a/0x1630 [ 1373.564862][ T145] process_scheduled_works+0xc3d/0x1630 [ 1373.565025][ T145] ? __pfx_process_scheduled_works+0x10/0x10 [ 1373.565123][ T145] ? assign_work+0x3cf/0x5d0 [ 1373.565216][ T145] worker_thread+0xa47/0xfb0 [ 1373.565376][ T145] kthread+0x38b/0x480 [ 1373.565439][ T145] ? __pfx_worker_thread+0x10/0x10 [ 1373.565512][ T145] ? __pfx_kthread+0x10/0x10 [ 1373.565577][ T145] ret_from_fork+0x514/0xb70 [ 1373.565674][ T145] ? __pfx_ret_from_fork+0x10/0x10 [ 1373.565769][ T145] ? __switch_to+0xc89/0x1420 [ 1373.565853][ T145] ? __pfx_kthread+0x10/0x10 [ 1373.565921][ T145] ret_from_fork_asm+0x1a/0x30 [ 1373.566051][ T145] [ 1373.637409][ T145] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1374.399060][T25804] syzkaller0: entered promiscuous mode [ 1374.404996][T25804] syzkaller0: entered allmulticast mode [ 1376.613217][T25832] fuse: Invalid rootmode [ 1377.075623][ T5767] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1377.254749][ T5767] usb 7-1: Using ep0 maxpacket: 16 [ 1377.261222][ T5767] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1377.286464][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.286510][ T5767] usb 7-1: Product: syz [ 1377.286559][ T5767] usb 7-1: Manufacturer: syz [ 1377.286578][ T5767] usb 7-1: SerialNumber: syz [ 1377.322963][ T5767] usb 7-1: config 0 descriptor?? [ 1377.331725][ T5767] asix 7-1:0.0: probe with driver asix failed with error -22 [ 1377.556241][ T5767] usb 7-1: USB disconnect, device number 21 [ 1379.335419][T25867] fuse: Bad value for 'fd' [ 1382.959718][T25836] batadv_slave_0: entered promiscuous mode [ 1382.961071][T25845] batadv_slave_0: entered promiscuous mode [ 1382.961831][T25845] batadv_slave_0: left promiscuous mode [ 1382.963136][T25836] batadv_slave_0: left promiscuous mode [ 1383.231538][T25904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1383.245953][T25904] ip6gre2: entered promiscuous mode [ 1383.246030][T25904] ip6gre2: entered allmulticast mode [ 1383.308032][ T31] audit: type=1326 audit(1786619513.234:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25909 comm="syz.0.5727" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e2d19e0d9 code=0x0 [ 1384.370823][T25926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.546674][T25935] 9p: Bad value for 'rfdno' [ 1385.565763][T25946] fuse: Unknown parameter 'use00000000000000000000' [ 1387.878074][T25988] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1388.707134][T26004] loop2: detected capacity change from 0 to 1024 [ 1388.718541][T26004] EXT4-fs: Ignoring removed bh option [ 1388.726401][T26004] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1388.836864][T26004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.362311][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.305066][ T1274] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1396.023162][T26081] loop2: detected capacity change from 0 to 1024 [ 1396.225007][T26086] fuse: Bad value for 'fd' [ 1396.249696][T26081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.262556][T26081] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.439608][T26089] bridge0: port 3(vlan2) entered blocking state [ 1396.450391][T26089] bridge0: port 3(vlan2) entered disabled state [ 1396.461715][T26089] vlan2: entered allmulticast mode [ 1396.469425][T26089] bridge0: entered allmulticast mode [ 1396.475432][T26089] bridge0: entered promiscuous mode [ 1396.549262][T26089] vlan2: left allmulticast mode [ 1396.567320][T26089] bridge0: left allmulticast mode [ 1396.621534][T26091] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.5783: Freeing blocks not in datazone - block = 0, count = 16 [ 1396.853518][T20244] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1396.947538][ T5804] bridge0: left promiscuous mode [ 1396.982811][T26093] loop6: detected capacity change from 0 to 2048 [ 1397.045525][T26093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.061373][T26093] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.556679][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.921841][T26108] uprobe: syz.2.5790:26108 failed to unregister, leaking uprobe [ 1398.976332][T26108] uprobe: syz.2.5790:26108 failed to unregister, leaking uprobe [ 1399.931475][T26127] fuse: Unknown parameter 'user_id00000000000000000000' [ 1402.491715][T26156] fuse: Bad value for 'fd' [ 1407.267956][T26195] fuse: Bad value for 'fd' [ 1407.728715][T26203] loop6: detected capacity change from 0 to 1024 [ 1407.759595][T26203] EXT4-fs: Ignoring removed bh option [ 1407.770322][T26203] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1407.848960][T26203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1408.364929][T26213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1409.074612][T21365] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.324246][T26237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1410.631462][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5839'. [ 1413.780190][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5851'. [ 1415.798261][ C1] sched: DL replenish lagged too much [ 1425.108847][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.123025][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.192110][T26265] uprobe: syz.0.5849:26265 failed to unregister, leaking uprobe [ 1428.942935][T18104] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1485.018900][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.026679][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.066293][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.074538][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.881407][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.898582][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.240937][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1622.495024][ T33] INFO: task syz.0.5849:26265 blocked for more than 144 seconds. [ 1622.512821][ T33] Tainted: G L syzkaller #0 [ 1622.530649][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1622.548337][ T33] task:syz.0.5849 state:D stack:25624 pid:26265 tgid:26264 ppid:17465 task_flags:0x400140 flags:0x00080002 [ 1622.584579][ T33] Call Trace: [ 1622.603223][ T33] [ 1622.621956][ T33] __schedule+0x1b4d/0x59e0 [ 1622.640648][ T33] ? __lock_acquire+0x6df/0x2e50 [ 1622.659819][ T33] ? __pfx__prb_read_valid+0x10/0x10 [ 1622.678806][ T33] ? __asan_memcpy+0x40/0x70 [ 1622.697700][ T33] ? register_lock_class+0x31/0x2e0 [ 1622.716775][ T33] ? __pfx___schedule+0x10/0x10 [ 1622.735537][ T33] ? lock_acquire+0x115/0x350 [ 1622.754520][ T33] ? schedule+0x90/0x2b0 [ 1622.773439][ T33] schedule+0x164/0x2b0 [ 1622.792201][ T33] schedule_timeout+0xc0/0x2c0 [ 1622.811103][ T33] ? __pfx_schedule_timeout+0x10/0x10 [ 1622.829910][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 1622.848823][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.867714][ T33] ? wait_for_completion+0x272/0x5e0 [ 1622.886578][ T33] wait_for_completion+0x2ca/0x5e0 [ 1622.905377][ T33] ? __pfx_wait_for_completion+0x10/0x10 [ 1622.925612][ T33] __synchronize_srcu+0x23b/0x2f0 [ 1622.945574][ T33] ? __pfx___synchronize_srcu+0x10/0x10 [ 1622.964350][ T33] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 1622.983207][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1623.002015][ T33] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1623.020886][ T33] ? synchronize_srcu+0x20a/0x260 [ 1623.039682][ T33] bpf_uprobe_multi_link_attach+0xf88/0x11b0 [ 1623.058691][ T33] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1623.078109][ T33] ? __fget_files+0x2a/0x420 [ 1623.097425][ T33] ? __fget_files+0x2a/0x420 [ 1623.116443][ T33] ? __fget_files+0x2a/0x420 [ 1623.135291][ T33] ? bpf_prog_attach_check_attach_type+0x46a/0x570 [ 1623.154225][ T33] link_create+0x621/0x850 [ 1623.173616][ T33] __sys_bpf+0x760/0xd90 [ 1623.193014][ T33] ? __pfx___sys_bpf+0x10/0x10 [ 1623.211900][ T33] ? do_futex+0x3e7/0x4e0 [ 1623.230966][ T33] ? rcu_is_watching+0x16/0xb0 [ 1623.249999][ T33] __x64_sys_bpf+0xba/0xd0 [ 1623.268821][ T33] do_syscall_64+0x166/0x520 [ 1623.287730][ T33] ? trace_irq_disable+0x3b/0x140 [ 1623.306562][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.325403][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1623.344282][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.362987][ T33] RIP: 0033:0x7f0e2d19e0d9 [ 1623.382889][ T33] RSP: 002b:00007f0e2e147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1623.421312][ T33] RAX: ffffffffffffffda RBX: 00007f0e2d425fa0 RCX: 00007f0e2d19e0d9 [ 1623.440465][ T33] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 1623.459763][ T33] RBP: 00007f0e2d235024 R08: 0000000000000000 R09: 0000000000000000 [ 1623.478912][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.497944][ T33] R13: 00007f0e2d426038 R14: 00007f0e2d425fa0 R15: 00007fffc5c16c88 [ 1623.517240][ T33] [ 1623.535957][ T33] [ 1623.535957][ T33] Showing all locks held in the system: [ 1623.554613][ T33] locks held by kworker/0:1/10: 4, last CPU#0: [ 1623.573300][ T33] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1623.688805][ T33] #1: ffffc900000f7c40 ((work_completion)(&ht->run_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1623.804501][ T33] #2: ffff888034e49830 (&ht->mutex#10){+.+.}-{4:4}, at: rht_deferred_worker+0x43/0x2250 [ 1623.940055][ T33] #3: ffffffff8eea49f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1624.055963][ T33] locks held by kworker/u8:2/32: 3, last CPU#1: [ 1624.074631][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1624.189508][ T33] #1: ffffc90000a87c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630