last executing test programs: 10m10.636142841s ago: executing program 3 (id=80): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_usb_connect$uac2(0x0, 0x97, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4001) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000500)=ANY=[@ANYBLOB='utf8,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1534, &(0x7f0000000cc0)="$eJzs3AucTVX7OPDnWWvtMSSdJtdhrfVsTnJZJEkuSXJJktQrSW4JSZO8kpAYcksakpBchuQyhOQWk8b9fr8kJMk7SZJbbsn6fybmr97q/9568/v/5vl+Pvsza83az9rPPs+cffbe55z5pvOQmo1qVWtARPAfwUs/EgEgFgAGAMB1ABAAQLm4cnEZ49klJv5nG2F/rIdTrnYG7Gri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs87QC1/OSdRe+/5+V8ev//yLppcZ8ubZUni4AMf9sCNf//3/4H8Ry/f/XCv6Zlbj+WRvXP6uKvdoJsP8B+PmfFWT73RGuf9bG9WcsK/v5veBYuPr3o//sBSL/zfdAfM9Lj/LV38/f3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xPcNZfoQAgs32182KMMcYYY4wxxtgfx2e72hkwxhhjjDHGGGPsvw9BgAQFAcRANoiF7JADBEBM5vj1EAc3QG7IA3khH+SHAhAPBaEQaDBggSCEwlAEonAjFIWboBgUhxJQEhyUgtJwM5SBW6As3Arl4DYoD7dDBagIlaAy3AFV4E6oCndBNbgbqkMNqAm14B6oDfdCHbgP6sL9UA8egPrwIDwEf4EG8DA0hEegETwKjeExaAJNoRk0hxb/VvyL0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaJMFgGAKvw1B4A4bBmzAcRsBIeAtGwdswGsbAWBgHyTAeJsA7MBHehUkwGabAVEiBaTAd3oMZMBNmwfswGz6AOTAX5qmMx/NDWAiLIBU+gsXwMaTBElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ3wCeyCT2E37IG98Bnsg8//xfgzfxffBQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA5zY27Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oJlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78F7sBfWwTpYF+tiPayXeXsKG2ADbIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgOEzAB22N77IAdsCN2xE7YCTtjZ+yCXbFr+ovZAF/Cl7AnVhe9sDf2xj6YlK0f9sf++AoOxFfxVXwNk3AwDsHX8XV8A4fhaRx+cQSOxJFYRbyNo3EMkhiHyZiME3ACTsSJOAkn42Sciik4DafjdJyBM3Emvo+z8QP8AOfiXJyPC3ABLsRFmIqpuBjPYBouwaW4DJfjClyOq3A1rsK1uA7X4gbcgJtwE27BLbgNt+EO3IGfoALAT3EP7sEk3If7cD/uxwN4AA/iQUzHdDyEh/AwHsYjeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4fPxXDT8pviYJRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKKvCK/yC/iRbwoJAoJI4wgEeYBABEVUVFUFBXFRDFRQpQQTjhRWpQWZUQZUVaUFeXEbaK8uF1UEBVFa1dZVBZVRBtXVdwlqolqorqoIWqKWqKWqC1qizqijqgr6op6op6oLx4UD4le2A8fFhmVaSQGY2MxBJuIpkJePkK1FMOwlWgt2ognxQgcju1ES5cgnhHtxWjsIP4qxuBzopMYh53FC6KL6Cq6iRdFd9HK9RA9xSTsJXqLqdhH9BX9RH8xA2uI93F29priNZEkBosh4nUxH98Qw8SbYrgYIUaKt8Qo8bYYLcaIsWKcSBbjxQTxjpgo3hWTxGQxRUwVKWKamC7eEzPETDFLvC9miw/EHDFXzBPzxQLxoVgoFolU8ZFYLD4WaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Ru8SnYrfYI/aKz8Q+8bnYL74QB8SX4qD4m0gXX4lD4mtxWHwjjohvxVHxnTgmjosT4qQ4Jb4Xp8UZcVacE+fFD+KC+FFcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW+aReWU+mV8WkPGyoCwktTTSSpKhLCyLyKi8URaVN8lisrgsIUtKJ0vJ0vJmWUbeIsvKW2U5eZssL2+XFWRFWUlWlnfIKvJOCZFL26gua8iaspa8RybCvbKOvE/WlffLevIBWV8+mHGMyiAbykdkI/mobCwfk01kU9lMNpct5OOypXxCtpKtZRv5pGwrn5Lt5NMyQT4j20t/+U/kOdlJPi87yxdkF9lVdpM/yovSyx6yp4ReIHvLl2Uf2Vf2k/3lAPmKHChflYPkazJJDpZD5OtyqHxDDpNvyuFyhBwp35Kj5NtytBwjx8pxMlmOlxPkO3KifFdOkpPlFDlVpshpst/lmWZJ+Q/j3/mN+EE/bX2T3Cy3yK1ym9wud8id8hO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpLfy9PyjDwjz8nz8ry8cPkxAIVKKKmUClSMyqZiVXaVQ12jcqprVS51nYqo61WcukHlVnlUXpVP5VcFVLwqqAoprYyyilSoCqsiKqpuxMt/MKqEKqmcKqVKq5v/lXhVVN2kiqniv4jPzC/xd/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUAmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJVouqtXlZ9VF/VT/VXA9QrImMfBqlBKkklqSFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqpklawmqAlKqolqkpqkpqgpKkWlqOlqupqhZqhZapaarWarOWqOmqfmqQVqgVqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3Wq32qv2qn1qn9qv9qsD6oA6qA6qdJWuDqlD6rA6rI6oI+qoOqqOqWPqhDqhTqlT6rQ6rc6qs+q8Oq8uqAvqorqYcdoXiEAEKlBBTBATxAaxQY4gR5AzyBnkCnIFkSASxAVxQe4gT5A3yBfkDwoE8UHBoFCgAxPYQFwuejS4MSga3BQUC4oHJYKSgQtKBaWDm4MywS1B2eDWoFxwW1A+uD2oEFQMKgWVgzuCKsGdQdXgrqBacHdQPagR1AxqBfcEtYN7gzrBfUHd4P6gXvBAUD94MHgo+EvQIHg4aBg8EjQKHg0aB48FTYKmQbOgedDi35gf4ffm9/50vidcD91TJ+peurd+WffRfXU/3V8P0K/ogfpVPUi/ppP0YD1Ev66H6jf0MP2mHq5H6JH6LT1Kv61H6zF6rB6nk/V4PUG/oyfqd/UkPVlP0VN1ip6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8vUB/qBfqRTpVf6QX6491ml6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36k/0Lv2p3q336L36M71Pf6736y/0Af2lPqj/ptP1V/qQ/lof1t/oI/pbfVR/p4/p47qsPqlP6e/1aX1Gn9Xn9Hn9g76gf9QXtc84uc94eTfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+Q1eU1+k9/Em3hTyBQyGciQKWwKm6iJmqKmqClmipkSpoRxxpnSprQpY8qYsqasKWfKmfKmvKlgKphKppK5w9xh7jR3mrvMXeZuc7epYWqYWqaWqW1qmzqmjqlr6pp6pp6pb+qbh8xDpoFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRGSeq5m0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNKkm1Sw2i02aSTNLzVKz3Cw3K81Ks9qsNmvNWrMe1puNZqPZbDabrWar2W62m51mp9lldpndZrfZa/aafWaf2W/2mwPmgDloDpp0k24OmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJd/n10ptYm93msNfYnPZam8teZ/++n98WsPG2oC1ktc1r8/2ib6y1xWxxW8KWtM6WsqXtzb/qV7AVbSVb2d5hq9g7bdVf9Wvbe20de5+ta++3tew9v+jXsw/Y+vZR+xAigG1qG9rmtpF91Da2j9kmtqltZpvbtvYp284+bRPsM7a9ffZX/YV2kV1t19i1dp3dbffYs/acPWy/seftD7aH7WkH2FfsQPuqHWRfs0l28K/6I+1bdpR92462Y+xYO+5X/Sl2qk2x0+x0+56dYWf+qr/Afmhn21Q7x8618+z8n/oZOaXaj+xi+7FNswEstcvscrvCrrSr/m+uy+wGu9Fusrvsp3ar3Wa32x12Z+aJsN1j99rP7D77uT1kv7YH7Jf2oD1i0+1XP/Uz9u+I/dYetd/ZY/a4PWFP2lP2e5UZnbHvJ+2P9qL1FggJSJKigGIoG8VSdspB11BOupZy0XUUoespjm6g3JSH8lI+yk8FKJ4KUiHSZMgSUUiFqQhF6UbKTK8ElSRHpag03Uxl6BYqS7dSObqNytPtVIEqUiWqTHdQFbqTqtJdVI3upupUg2pSLbqHatO9VIfuo7p0P9WjB6g+PUgP0V+oAT1MDekRakSPUmN6jJpQU2pGzakFPU4t6QlqRa2pDT1JbekpakdPUwI9Q+3pWepAf6WO9Bx1ouepM71AXagrdaMXqTu9RD2oJyVSL+pNL1Mf6kv9qD8NoFdoIL1Kg+g1SqLBNIRep6H0Bg2jN2k4jaCR9BaNordpNI2hsTSOkmk8TaB3aCK9S5NoMk2hqZRC02g6vUczaCbNovdpNn1Ac2guzaP5tIA+pIW0iFLpI1pMH1MaLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJn9Au+pR20x7aS5/RPvqc9tMXdIC+pIP0N0qnr+gQfU2H6Rs6Qt/6nvQdHaPjdIJO0in6nk7TGTpL5+g8/UAX6Ee6SJ4gxFCEMlRhEMaE2cLYMHuYI7wmzBleG+YKrwsj4fVhXHhDmDvME+YN84X5wwJhfFgwLBTq0IQ2pDAMC4dFwmh4Y1g0vCksFhYPS4QlQxeWCkuHN4dlwlvCsuGtYbnwtrB8eHtYIawYPnp/5fCOsEp4Z1g1vCusFt4dVg9rhDXDWuE9Ye3w3rBOeF9YN7w/LBs+ENYPHwwfCv8SNggfDhuGj4SNwkfDxuFjYZOwadgsbB62CB8PW4ZPhK3C1mGb8JqwbfhU2C58OkwInwnbh8/+NP7AoszxJ381nhj2CnuHL4cvh97fJ+dF50cXRD+MLowuiqZGP4oujn4cTYsuiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbop6XysbOHTCSadc4GJcNhfrsrsc7hqX013rcrnrXMRd7+LcDS63y+Pyunwuvyvg4l1BV8hpZ5x15EJX2BVxUXejK+pucsVccVfClXTOlXKlXXPXwrVwLd0TrpVr7dq4J92T7in3lHvaPe2ece3ds66D+6vr6J5zndzz7nn3guviurpu7kXX3Y3Pdek5meh6u96uj+vj+rl+boAb4Aa6gW6QG+SSXJIb4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3bJboKb4Ca6iW6Sm+SmuCkuxaW46W66m+FmuCozL21ljpvj5rl5boFb4Ba6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddmtTtc/vdfnfAHXAH3d9cuvvKHXJfu8PuG3fEfeuOuu/cMXfcnXAn3Sn3vTvtzriz7pw7735wF9yP7qLzLjkyPjIh8k5kYuTdyKTI5MiUyNRISmRaZHrkvciMyMzIrMj7kdmRDyJzInMj8yLzIwsiH0YWRhZFUiMfRRZHPo6kRZZElkaWRZZHVkS8L7g19IV9ER/1N/qi/iZfzBf3JXxJ73wpX9rf7MtcyjvN+9t8eX+7r+Ar+kr+Md/EN/XNfHPfwj/uW/onfCvf2rfxT/q2/infzj/tE/wzvr1/1nfwf/Ud/XO+k3/ed/Yv+C6+q+/mX/Td/Uu+h+/pE30v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf80l+sB/iX/dD/Rt+mH/TD/cj/MiYt/yozEtkGOeT/Xg/wb/jJ/p3/SQ/2U/xU32Kn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hy/wH/oF/pFPtV/5Bf7j32aX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AMXM7+B9pU/5L/2h/03/oj/1h/13/lj/rg/4U/6U/57f9qf8Wf9OX/e/+Av+B/9Rf7OGmOMMcbYP2X8lab45cil2/m9fiNG/Gzl3gBw7bYC6T8fzzijXJ/3UruviI/N+PlMz84PZy7VqycmJl5eN01CUGQuQOY7QRl++ujB5X7Gek9BArSGMr+Zf1/R9Tz9g/mjtwHk+FlMRkKZ/SXQ5vL8XwBg4m/M//iTIxeWD8/G/T/mnwtQrMiVmOxwpb8E2vx0f6U1lP2d/PO1/Af5Z/8yGaDVz2JywpX+lfxLwxPwLCT8Yk3GGGOMMcYYY+ySvqJSx8zrz8xPfP7W9Xm8uhKTDa70r1x//vb1OWOMMcYYY4wxxq6+57p2e/rxhITWHf/1RtV/K+qfbjSG/9bM3PjNhvcAmb9RAPAfTgiQ0ZB/5l5s+VO2lXT5qfP3Q8vP+QD+Z5Tyj2hc5QMTY4wxxhhj7A935aT/l79XVyshxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/oz/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//kFH3Jw==") llistxattr(0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') 10m9.307374123s ago: executing program 3 (id=86): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x2c6, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 10m5.771889219s ago: executing program 3 (id=101): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10m1.683611007s ago: executing program 3 (id=121): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800714, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000001c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 10m1.423614063s ago: executing program 2 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) 10m1.241962877s ago: executing program 2 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x400, 0xc0, &(0x7f0000000340)=[0x4, 0x800000, 0xe, 0x80, 0x1fffffffffffffff, 0x100000001, 0x4, 0x101, 0x8, 0x8, 0x2, 0x700000000000000, 0x6, 0xfffe, 0x3, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x4, 0x2, 0x1fd, 0x80008, 0x0, 0x3, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xffffff7ffffffff9, 0x5, 0xffffffffffffffff, 0x8, 0x1, 0x7fff, 0xec, 0x8000000000000003, 0x0, 0x14f, 0x6487, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0xfffffffffffffffd, 0x2000000000000007, 0x7fffffffffffffff, 0x38f, 0x7, 0x49a28, 0x10001, 0x7fffffffffffffff, 0xa, 0x0, 0x24000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0x7, 0x4, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0x4, 0x7, 0x9, 0x20, 0xfffffffffffffbff, 0x400, 0x100000000, 0x3, 0x1e4b, 0x0, 0x79, 0x5, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xe, 0x2, 0x9, 0x8fc3, 0xfff, 0x80, 0xac87, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x401, 0x4, 0x2, 0x2, 0x9, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 10m1.035204062s ago: executing program 3 (id=126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10m0.378958628s ago: executing program 3 (id=130): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0xffffffd7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9m59.964597878s ago: executing program 32 (id=130): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0xffffffd7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9m59.953802888s ago: executing program 2 (id=132): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=""/115, 0x73}, 0x3f2}], 0x1, 0x18103, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 9m59.698460674s ago: executing program 2 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 9m59.314422043s ago: executing program 2 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500)='256\n', 0x4) write(0xffffffffffffffff, &(0x7f0000000700)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='1\n', 0x2) mount(0x0, &(0x7f0000000c00)='./dev\x00', 0x0, 0x20084a2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 9m58.702869888s ago: executing program 2 (id=138): openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) 9m58.20454774s ago: executing program 33 (id=138): openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2020) 5m2.110943107s ago: executing program 1 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fchdir(0xffffffffffffffff) syslog(0x4, &(0x7f0000000340)=""/212, 0xd4) 4m53.460084335s ago: executing program 1 (id=1027): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) r3 = socket$inet6(0xa, 0x3, 0x32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24044804) setsockopt$inet6_int(r3, 0x3a, 0x0, 0x0, 0x40) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{0x5}, {0xf9, 0x7}, 0x8, 0x7}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000", 0x1a) 4m47.197708636s ago: executing program 1 (id=1045): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 4m45.574789935s ago: executing program 1 (id=1037): r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001580), 0x49249249249256f, 0x40484) 4m44.157659829s ago: executing program 1 (id=1041): memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) 4m42.802353581s ago: executing program 1 (id=1046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/19, 0x13}], 0x4) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100026bd7000efdbdf256900000008000300c46c45e76c11070400000044fe89c429c1a500062b9aef9bef8452607e7f8d72cef9546dcee0416a9627ad6f3bf825d0adaaa7eb2a35e916", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00'], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x8, 0x6, 0x6, 0x7, 0x80, 0xf, 0x5b, 0x2, 0x42, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x22, 0x200]}}) close(0x3) 4m27.716534314s ago: executing program 34 (id=1046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/3, 0x3}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/19, 0x13}], 0x4) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100026bd7000efdbdf256900000008000300c46c45e76c11070400000044fe89c429c1a500062b9aef9bef8452607e7f8d72cef9546dcee0416a9627ad6f3bf825d0adaaa7eb2a35e916", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00'], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x8, 0x6, 0x6, 0x7, 0x80, 0xf, 0x5b, 0x2, 0x42, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x22, 0x200]}}) close(0x3) 1m9.010900513s ago: executing program 0 (id=1434): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e64}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat(0xffffffffffffff9c, 0x0, 0x80241, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) ppoll(&(0x7f0000000000)=[{r6, 0xd}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 1m7.975278958s ago: executing program 0 (id=1436): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0xac08, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x6) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=""/92) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404c057403000000000001090224000100003000090400fe020300040009"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x40, 0x21, 0x24, {0x24, 0x11, "5956eb8c9fdbf5be71ce9dbf2a8c19b8ab0855ad6c1824b77155f46237f09aea321b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000000)=0x81) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0xb881}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 1m5.890773937s ago: executing program 0 (id=1441): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r6}, &(0x7f00000006c0), 0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 1m4.774812334s ago: executing program 0 (id=1443): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f00000000c0)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0xe2ae) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r6, 0x1fc, 0x0) 1m2.913806618s ago: executing program 0 (id=1455): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) getpid() fcntl$setlease(r4, 0x400, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005c80)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8}, 0x0, 0x0, 0x6, 0x9, 0xffffffffffff7ffe, 0x0, 0x6, 0xd, 0xe6f}) 51.894972141s ago: executing program 0 (id=1462): r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) 35.830690875s ago: executing program 35 (id=1462): r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) 13.747080922s ago: executing program 7 (id=1524): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x7fffffff, 0x3017}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf701191e6f1843142a512f5fb5e28c4537c755c5390b2c44b36ea9500acf4f2a535f1f9372e797", 0x58}], 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 11.690504451s ago: executing program 7 (id=1527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, 0x0, 0x10040800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb) 11.671930061s ago: executing program 4 (id=1528): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b639a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0x80}}, {@part={'part', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'cp855'}}, {@type={'type', 0x3d, "9d4b9598"}}, {@type}, {@umask={'umask', 0x3d, 0x100}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x34a, &(0x7f0000000c40)="$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") 10.825412311s ago: executing program 6 (id=1529): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f000040a000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20c, 0x40000, 0x2, 0x2d6}, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 10.008451981s ago: executing program 7 (id=1530): r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) 10.007729601s ago: executing program 4 (id=1531): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e79") r2 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$I2C(0x0, 0x9, 0x11b080) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0) r4 = msgget$private(0x0, 0x224) msgsnd(r4, 0x0, 0x0, 0x800) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940), 0x80080, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) msgctl$IPC_INFO(r4, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) r8 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r8, r6, r7, 0x0, 0x0, 0x0) 9.911420053s ago: executing program 6 (id=1532): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x14, 0x1c, 0x68, 0x0, 0x8, 0x1, 0x0, @remote, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r3, 0x0, &(0x7f0000000cc0)={'syz', 0x1}, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) writev(r5, &(0x7f00000014c0)=[{0x0}], 0x1) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)="c9e3d29ab3e0cabfa3e76ae3d578443d07c6d16e3f", 0x15}], 0x1, &(0x7f0000000600)=ANY=[], 0xc}}], 0x1, 0x4040004) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0x2b4, &(0x7f0000000a00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) fstatfs(r6, 0x0) 9.117302482s ago: executing program 7 (id=1533): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x7, 0x77}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30, 0x5f]}}, 0x0, 0x37, 0x0, 0x1, 0x7}, 0x28) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e320d0000000000008001f9090309006faaaaaaaaaa11001089924ba976424b2b900000000000000003d6300624008000000000000000"], 0x35) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)='2', 0x1}], 0x1}, 0x24000894) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7) pwrite64(r4, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff) 9.099199552s ago: executing program 5 (id=1534): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37", 0x6f}], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/4096, 0x1000}, 0xdc1}], 0x1, 0x40000000, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) 9.065944713s ago: executing program 4 (id=1535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3a) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2382420, &(0x7f0000000200)=ANY=[]) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) munlockall() 8.947983206s ago: executing program 6 (id=1536): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x0, @empty, 0x9}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x9fc5}, @in6={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x23e}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x28, @remote, 0xffff8001}], 0x80) r3 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x1, 0x301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x10001, 0x0, "5a77bd318786aeb202cccdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21719e169a596e5fc008daefba68f6222103472bc55704cd2ccb1eaa726615380fe65a6a0a72e19c2b60bd6276fd8bb600000000000000ff3ded22c87eb2beb437bb192c9d06ea6ed04984fe5c5ca033dfce0a82575ef14eee686be0fc58e384f9e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d9044cf5a130000000000000000000000000000000000000000000000000000000800"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000002c0)={'nat\x00', 0x0, [0xbec, 0x1, 0x3, 0x7, 0x4c2]}, &(0x7f0000000340)=0x54) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r6, 0x0, 0x7ffffffd) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0xffffffffffffffee, 0x0, 0x1, 0x0, r9}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) 7.764544934s ago: executing program 5 (id=1537): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r7, &(0x7f0000002dc0)={0x2020}, 0x2020) 6.28684441s ago: executing program 5 (id=1538): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r6}, &(0x7f00000006c0), 0x0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 5.244070555s ago: executing program 5 (id=1539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) 3.906765627s ago: executing program 4 (id=1540): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x6a8d, &(0x7f0000000300)={0x0, 0x293d, 0x4, 0x2002, 0x1f0, 0x0, r0}, &(0x7f00000007c0), &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3.906104496s ago: executing program 5 (id=1549): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r1) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) getpid() fcntl$setlease(r5, 0x400, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000005c80)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8}, 0x0, 0x0, 0x6, 0x9, 0xffffffffffff7ffe, 0x0, 0x6, 0xd, 0xe6f}) 2.588335878s ago: executing program 5 (id=1541): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0x80}}, {@part={'part', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'cp855'}}, {@type={'type', 0x3d, "9d4b9598"}}, {@type}, {@umask={'umask', 0x3d, 0x100}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x34a, &(0x7f0000000c40)="$eJzs3U1P1E4cB/DvdB/Y/iH8K2BIPKIkngjgQWNMNIZ48Q14MESEJSFUTAQTITGuno3xZmLi0Ztno29BL8aDVz1xIJ70QjxYMzPt7pTOdJ+AZeH7SVi67Ty2M21/S9iCiE6s63Pf317Ylj+iBKAA4DIiuaUCFAGcxnjl4drGykZYXcorqKByyB8BnVNk0iyuVbMZBzJrApm/iCFVCh2oKIqiH01T/TqUtlDvCD33Mzw9QYvxuUHN8eOgZjvxHHfGERa72MUjDPeyOURE1Hvx9d+LrxJD8f275wGT8X14v1//U/c3u71rx5FQv/57+n0k5P75X21qxHsqhJNH30uiRFtZ1jERNXZ3GXpkpQ6AaBZVqrZ4/vJKWJ2qqQKe4WrMSDamXpeQdERxtbasf01YYtMceX3PN6j6UJJ9KDnaP9p2jR938Mpe3fznFtokPokvYl4EeI2l+v1fMRJy56j9EwC+mUG3f9pdouploFOletmI30+pSs4kR+DDu0Yvfdd+raAg22IjSxF779+DpJ0vy+5cGEH6YwXduxl371SuUWuu2fr7P9ZcY3tz+culsDq1eD/M/Shl31gjOvFC3BIT+In3mDPu/z2ZehLumZma5UKljEeG7o/jylBUKR3HMUVN4HttzUxSblgPdL7nuItLGF7f3FpdCMPqgw4XvsUDvNtyNrdWk6nSbTn7tKAHYjwc5Rr520iDilwotdd3WZw7zd8oiqybitjPDrraXFJdvfim3mV1mq3pt91Vipreh8ama+7EjdOmXJOcETqp/Uk910Duns8u/I5rX9+0D0hhtLB8sAMyqSq1qYCBlmaK30GlNx+vLoTtn1Ko/zQOOsZv71zpdXPo8Mn7LqHjPyNemVZnHfkS5EQjUbPCjRJnHBHQiHr9TzckieKaxFyD7ghuMFkIq7OyRi+bRMVcZ88D54yVsjYPSY1P9+YJ4nbiKP5V0vqnDD8vh5jDV9zh5/9ERERERERERERERERERERERERERP2m3f9G6OTfCdI1bp/AL94gIiIiIiIiIiIiIiIiIiIiIiIiIiIiIuqO8fxfoKCeGFPW38Ld3fN//Zaf/xs/Ocb4Vu2g0MLzf5PnUhBRx/4FAAD//wKYVxY=") 2.581987788s ago: executing program 6 (id=1551): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"fd5402757ac648cf2920e38afac94e776d5bcb702f5bd18722ca3c56bc46e28b", r6}) accept4$x25(r1, 0x0, 0x0, 0x80000) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x4000) ioctl$USBDEVFS_SUBMITURB(r7, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x7, 0xc5, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200, 0x7}, 0x8, 0x8004, 0x0, 0x0, 0x6f, 0x5ffffff9, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xfffd, 0x0, 0xa}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getuid() mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000, &(0x7f0000000340)={[{@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)="028d8cbfd9bbf7df020797310a2bb2d6", 0x10}, {&(0x7f00000003c0)="cb82278ec04d46183befda75", 0xc}, {&(0x7f0000000540)="9ab738cfd5eb4561f4ae10285eed1dd7ed44b889643ecd841942ca655597790a65ea42565472fa7771ac55779b964338f1f76b8e5e12961d07cb7249b710a1b3a63a58af87af8ec75ad30e88e95d3db81cc517948d9f03797e1264f2bc3ea74e24caa089acca463e23eacca179c468a3367e3d3a910786a5e25f1b60c5e7d2580c82c1252b7cd547aeb7fd526b7a4f7c3b451b5bbb3f71cc6ca433b9c0cf9e9ed1810e12f5a6970b5b73a5258c9ad7cfbd138cd4ada99787256761866110bc35d37718e06caaf25bc725d2cb56814f15c5b4dfc26ad6a59aa52124f79c08", 0xde}], 0x3}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c40)}}], 0x2, 0x4) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pread64(r9, 0x0, 0x18, 0x10000) close_range(r9, r10, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x40, 0xfa00, {{0xa, 0x4e1f, 0xe, @empty, 0x2}, {0xa, 0x4e1d, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.423311872s ago: executing program 4 (id=1542): r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) 2.374656563s ago: executing program 6 (id=1543): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x5) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffefd, 0x0, 0x40, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x6, 0x9, 0x3, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0xf1, 0x6, 0xfd, 0xfc, 0x1, 0xa, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x5}, 0x5, 0x4, 0xb4, 0x0, 0x5, 0x3, 'syz0\x00', &(0x7f0000000400)=['^\x00', '\x00', ':]))', 'connbytes\x00', '\x00'], 0x12}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES16=r1, @ANYBLOB="26efdde90d703077ef236e1ebe9a2eac05e085ec534ed5ba8a52faebcc2807d88b597054ecfcf6c6875b497135b42f972d761eeb94ade8a13e5c60f78c563ae714d1bae9e0e4c644b91d525a57a7a92769786c1d5f8fcc16cec4264a57069e02c180", @ANYBLOB=',group_', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x0) 1.629918131s ago: executing program 4 (id=1544): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000600)=""/235, 0x0, 0xeb, 0x0, 0x100}, 0x28) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0xd, 0x8}, 0xc) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.514898073s ago: executing program 7 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x38) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) dup3(r7, r7, 0x80000) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f00000007c0), 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 325.754232ms ago: executing program 6 (id=1546): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=1547): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = open(0x0, 0x241, 0x1ff) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='184', 0x3) close(r1) r2 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r2, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') unlink(0x0) kernel console output (not intermixed with test programs): dy [ 107.740182][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.781040][ T4917] device veth1_vlan entered promiscuous mode [ 107.813381][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.832434][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.845571][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.871157][ T4957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.921172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.945022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.984286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.023001][ T4917] device veth0_macvtap entered promiscuous mode [ 108.051148][ T4917] device veth1_macvtap entered promiscuous mode [ 108.104989][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.137319][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.164162][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.188926][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.207354][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.217586][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.228636][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.247693][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.258486][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.270783][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.280979][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.281635][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.282245][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.282797][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.283300][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.284766][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.291430][ T4917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.408303][ T4917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.423693][ T4917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.432434][ T4917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.599664][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.616692][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.636871][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.702914][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.724540][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.752584][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.952567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.964955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.989277][ T4957] device veth0_vlan entered promiscuous mode [ 109.003468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.020049][ T4317] gspca_sonixj: reg_w1 err -71 [ 109.031890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.085343][ T4957] device veth1_vlan entered promiscuous mode [ 109.103810][ T4317] sonixj: probe of 2-1:0.0 failed with error -71 [ 109.113899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.122489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.133519][ T4317] usb 2-1: USB disconnect, device number 5 [ 109.148007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.460684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.741894][ T4957] device veth0_macvtap entered promiscuous mode [ 109.752925][ T4957] device veth1_macvtap entered promiscuous mode [ 109.772331][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.854836][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.890577][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.901545][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.943912][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.959305][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.995244][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.006259][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.040371][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.074720][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.083116][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.106113][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.126242][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.143750][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.153598][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.183842][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.236929][ T4957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.277135][ T4957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.316226][ T5190] loop0: detected capacity change from 0 to 256 [ 110.326804][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.348541][ T4957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.383726][ T4957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.392479][ T4957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.483797][ T4957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.515831][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.528817][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.555073][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.758799][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.798470][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.830510][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.871604][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.895901][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.940731][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.112350][ T5216] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 111.216382][ T5216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog F38O3 v\+Co5³ڂ6lŽKrS"n%mEOAPࣝ&a84ץ2\jGogUvP=N.;kN)M',Û" ~I3IC:ɥ|DiT幷&&\ivpy(5D sԘ"wc$[ 112.657174][ T5260] loop6: detected capacity change from 0 to 256 [ 112.750196][ T5264] device syzkaller0 entered promiscuous mode [ 112.933909][ T4909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.040015][ T5273] binder: 5272:5273 ioctl c0306201 200000000100 returned -14 [ 113.143795][ T4909] usb 1-1: Using ep0 maxpacket: 8 [ 113.152475][ T4909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.196869][ T4909] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 113.241868][ T4909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.443954][ T5287] loop4: detected capacity change from 0 to 512 [ 113.493363][ T4909] usb 1-1: config 0 descriptor?? [ 114.018733][ T5287] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.200: corrupted inode contents [ 114.074425][ T5287] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 114.153053][ T5287] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.200: corrupted inode contents [ 114.282958][ T5287] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.200: mark_inode_dirty error [ 114.301441][ T5294] fuse: Bad value for 'fd' [ 114.314196][ T5287] EXT4-fs (loop4): 1 orphan inode deleted [ 114.323758][ T5287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.476377][ T4909] kye 0003:0458:5019.0001: unknown main item tag 0x6 [ 114.523079][ T4909] kye 0003:0458:5019.0001: ignoring exceeding usage max [ 114.538320][ T4909] kye 0003:0458:5019.0001: unbalanced collection at end of report description [ 114.552521][ T4909] kye 0003:0458:5019.0001: parse failed [ 114.562342][ T4909] kye: probe of 0003:0458:5019.0001 failed with error -22 [ 114.763923][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 114.786704][ T5261] loop0: detected capacity change from 0 to 2048 [ 114.862543][ T4909] usb 1-1: USB disconnect, device number 2 [ 115.125932][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.370882][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 115.467723][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.677064][ T22] usb 2-1: config 0 descriptor?? [ 115.708478][ T22] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 116.254780][ T4274] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.677828][ T4274] usb 6-1: Using ep0 maxpacket: 32 [ 116.692936][ T4274] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.712527][ T4274] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.745211][ T4274] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.802220][ T4274] usb 6-1: Product: syz [ 116.843714][ T4274] usb 6-1: Manufacturer: syz [ 116.856734][ T4274] usb 6-1: SerialNumber: syz [ 116.921566][ T4274] usb 6-1: config 0 descriptor?? [ 116.967629][ T5324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 117.093534][ T5339] netlink: 'syz.4.212': attribute type 39 has an invalid length. [ 117.372107][ T22] gspca_stv06xx: I2C: Read error writing address: -71 [ 117.413330][ T22] usb 2-1: USB disconnect, device number 6 [ 117.543538][ T5353] loop4: detected capacity change from 0 to 256 [ 117.570467][ T5353] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.634235][ T5353] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 117.692624][ T5353] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 118.705410][ T22] usb 6-1: USB disconnect, device number 2 [ 119.035209][ T4909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.263736][ T4909] usb 1-1: Using ep0 maxpacket: 16 [ 119.276518][ T4909] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 119.304420][ T4909] usb 1-1: config 0 has no interface number 0 [ 119.324334][ T4909] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 119.366298][ T4909] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 119.409902][ T4909] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 119.470982][ T4909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.495326][ T4909] usb 1-1: Product: syz [ 119.500373][ T4909] usb 1-1: Manufacturer: syz [ 119.523814][ T4909] usb 1-1: SerialNumber: syz [ 119.561753][ T4909] usb 1-1: config 0 descriptor?? [ 119.585827][ T5367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.599908][ T5367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.661988][ T5397] smc: net device lo applied user defined pnetid SYZ0 [ 119.868697][ T5367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.897784][ T5367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.943123][ T5406] fuse: Bad value for 'fd' [ 120.127869][ T4909] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 121.498961][ T5418] device team0 entered promiscuous mode [ 121.527443][ T5418] device team_slave_0 entered promiscuous mode [ 121.548624][ T5418] device team_slave_1 entered promiscuous mode [ 121.581543][ T5418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.600522][ T5418] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 121.658739][ T5422] bridge0: port 3(vlan2) entered blocking state [ 121.675105][ T5422] bridge0: port 3(vlan2) entered disabled state [ 121.697289][ T5422] device vlan2 entered promiscuous mode [ 121.703594][ T5422] device bond0 entered promiscuous mode [ 121.715638][ T5422] device bond_slave_0 entered promiscuous mode [ 121.722748][ T5422] device bond_slave_1 entered promiscuous mode [ 121.742140][ T5422] device macvlan2 entered promiscuous mode [ 122.033980][ T4909] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 122.429957][ T4909] asix: probe of 1-1:0.34 failed with error -71 [ 122.493755][ T4909] usb 1-1: USB disconnect, device number 3 [ 123.053697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 123.063707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 123.073691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 123.083692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 123.093685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 123.103687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 123.113684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 123.123684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 123.133682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 123.143726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 123.409441][ T5443] futex_wake_op: syz.0.242 tries to shift op by 144; fix this program [ 124.509625][ T5457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.532428][ T5457] device bond_slave_0 entered promiscuous mode [ 124.539760][ T5457] device bond_slave_1 entered promiscuous mode [ 124.546713][ T5457] device syz_tun entered promiscuous mode [ 124.556785][ T5457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.572439][ T5457] bond1: (slave macvlan2): unknown ethtool speed (20010) for port 1 (set it to 0) [ 124.582664][ T5457] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 124.591961][ T5457] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 124.618475][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 126.915435][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.080406][ T5500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.194534][ T5519] loop1: detected capacity change from 0 to 256 [ 127.223861][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.243957][ T4909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.253306][ T5464] overlayfs: failed to clone upperpath [ 127.414186][ T4261] usb 5-1: Using ep0 maxpacket: 16 [ 127.421620][ T4261] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.435598][ T4909] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.458018][ T4909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.468396][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.491490][ T4909] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 127.512108][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.524209][ T4909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.543975][ T4261] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.562322][ T4909] usb 1-1: config 0 descriptor?? [ 127.591713][ T4261] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.622591][ T4261] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.645255][ T5528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.663407][ T4261] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.682979][ T5531] device bond_slave_0 entered promiscuous mode [ 127.689940][ T5531] device bond_slave_1 entered promiscuous mode [ 127.714129][ T4261] usb 5-1: Manufacturer: syz [ 127.733554][ T4261] usb 5-1: config 0 descriptor?? [ 127.736389][ T5533] loop1: detected capacity change from 0 to 1024 [ 127.759585][ T5533] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 127.791411][ T26] audit: type=1326 audit(1786725782.692:6): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff66179e0d9 code=0x0 [ 127.799603][ T5531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.897162][ T5531] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 127.965839][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 127.976351][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.008714][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.028210][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.055787][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.073872][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.110992][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.132218][ T4909] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 128.186740][ T4261] rc_core: IR keymap rc-hauppauge not found [ 128.193281][ T4261] Registered IR keymap rc-empty [ 128.236956][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.963723][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.033590][ T4261] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 129.118880][ T4261] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 129.456405][ T4909] usb 1-1: USB disconnect, device number 4 [ 129.762261][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.803884][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.853833][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.893997][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 129.975834][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.028061][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.073823][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.108363][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.153999][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.203922][ T4261] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 130.247653][ T4261] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 130.277701][ T4261] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.307378][ T5571] loop1: detected capacity change from 0 to 16 [ 130.318434][ T4261] usb 5-1: USB disconnect, device number 3 [ 130.385867][ T5571] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.866897][ T5588] loop5: detected capacity change from 0 to 256 [ 132.697204][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.704969][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.228234][ T5602] Zero length message leads to an empty skb [ 133.319546][ T5606] loop1: detected capacity change from 0 to 128 [ 134.345513][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 134.833848][ T4909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.064849][ T4909] usb 6-1: Using ep0 maxpacket: 16 [ 135.080477][ T4909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.121165][ T4909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.168480][ T4909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.197851][ T4909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.230978][ T4909] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.274038][ T4909] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.345442][ T4909] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.385340][ T4909] usb 6-1: Manufacturer: syz [ 135.419358][ T4909] usb 6-1: config 0 descriptor?? [ 135.863856][ T4909] rc_core: IR keymap rc-hauppauge not found [ 135.873742][ T4909] Registered IR keymap rc-empty [ 135.879194][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.943847][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 135.984531][ T4909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 136.064968][ T4909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 136.120657][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.144900][ T5647] device syzkaller0 entered promiscuous mode [ 136.163956][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.191089][ T5647] tipc: Enabled bearer , priority 0 [ 136.203789][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.249201][ T5646] tipc: Resetting bearer [ 136.253841][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.303823][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.320065][ T5646] tipc: Disabling bearer [ 136.354347][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.384382][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 136.415115][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 137.242218][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 137.493765][ T4909] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 137.534845][ T4909] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 137.546751][ T4909] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.575354][ T4909] usb 6-1: USB disconnect, device number 3 [ 139.304948][ T5706] Illegal XDP return value 4291555328 on prog (id 23) dev syz_tun, expect packet loss! [ 139.692481][ T5713] loop1: detected capacity change from 0 to 32768 [ 140.037681][ T5713] XFS (loop1): Mounting V5 Filesystem [ 140.111669][ T5713] XFS (loop1): Ending clean mount [ 140.129467][ T5713] XFS (loop1): Quotacheck needed: Please wait. [ 140.330265][ T5713] XFS (loop1): Quotacheck: Done. [ 140.389180][ T5729] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.592275][ T4272] XFS (loop1): Unmounting Filesystem [ 143.270767][ T5809] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 146.495544][ T5830] IPVS: fo: FWM 3 0x00000003 - no destination available [ 146.503342][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 147.747881][ T4290] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 154.135160][ T4290] Bluetooth: hci0: failed to read key size for handle 200 [ 154.144152][ T4290] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 154.579466][ T5988] device syzkaller0 entered promiscuous mode [ 154.629799][ T5988] tipc: Started in network mode [ 154.653808][ T5988] tipc: Node identity 4e4fbac4b046, cluster identity 4711 [ 154.764599][ T5988] tipc: Enabled bearer , priority 0 [ 154.807366][ T5987] tipc: Resetting bearer [ 155.525501][ T5987] tipc: Disabling bearer [ 155.791426][ T6009] netlink: 92 bytes leftover after parsing attributes in process `syz.6.361'. [ 155.814055][ T6007] netlink: 'syz.5.360': attribute type 12 has an invalid length. [ 155.861149][ T6001] loop4: detected capacity change from 0 to 8192 [ 155.921863][ T6001] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.091000][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.362'. [ 156.235757][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880593c8000: rx timeout, send abort [ 156.746790][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880593c8000: abort rx timeout. Force session deactivation [ 156.933813][ T4909] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.194155][ T4909] usb 1-1: Using ep0 maxpacket: 16 [ 157.217612][ T4909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.924148][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 157.988824][ T4909] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 158.022996][ T4909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.053118][ T4909] usb 1-1: Product: syz [ 158.069532][ T4909] usb 1-1: Manufacturer: syz [ 158.082518][ T4909] usb 1-1: SerialNumber: syz [ 158.101529][ T6052] loop4: detected capacity change from 0 to 2048 [ 158.119021][ T4909] usb 1-1: config 0 descriptor?? [ 158.139400][ T4909] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 158.172940][ T4909] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 158.252157][ T6052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.417990][ T4909] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 159.541498][ T6077] loop4: detected capacity change from 0 to 2048 [ 159.639150][ T6077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.683911][ T6077] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.872528][ T4909] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 159.884211][ T4909] em28xx 1-1:0.0: board has no eeprom [ 159.925649][ T6077] fs-verity: sha512 using implementation "sha512-avx2" [ 160.694377][ T4648] wlan1: Trigger new scan to find an IBSS to join [ 160.713759][ T4909] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 160.722405][ T4909] em28xx 1-1:0.0: dvb set to bulk mode. [ 160.789903][ T4912] em28xx 1-1:0.0: Binding DVB extension [ 161.038333][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 161.672002][ T6075] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 161.702062][ T4317] usb 1-1: USB disconnect, device number 5 [ 161.720010][ T4317] em28xx 1-1:0.0: Disconnecting em28xx [ 161.866209][ T4912] em28xx 1-1:0.0: Registering input extension [ 161.885861][ T4317] em28xx 1-1:0.0: Closing input extension [ 162.133074][ T4317] em28xx 1-1:0.0: Freeing device [ 162.164603][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 162.341356][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.386'. [ 162.882987][ T6138] Bluetooth: hci0: service_discovery: too big uuid_count value 47230 [ 162.904655][ T6134] device bond1 entered promiscuous mode [ 162.948269][ T6139] capability: warning: `syz.6.387' uses deprecated v2 capabilities in a way that may be insecure [ 163.082336][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.131233][ T6146] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 163.149125][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 163.264125][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 163.273862][ T6157] rdma_rxe: rxe_register_device failed with error -23 [ 163.294621][ T6157] rdma_rxe: failed to add ip6gretap0 [ 163.323462][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 163.346958][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 163.363592][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 163.406857][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 163.445777][ T6154] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.492665][ T6154] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 164.362815][ T6176] loop0: detected capacity change from 0 to 1024 [ 164.370784][ T6176] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.377982][ T6176] EXT4-fs: Ignoring removed orlov option [ 164.806310][ T5803] wlan1: Trigger new scan to find an IBSS to join [ 165.031035][ T6176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.266766][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 165.481802][ T6194] device syzkaller0 entered promiscuous mode [ 166.375203][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.413757][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.445646][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.621124][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.664225][ T41] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.700170][ T41] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 166.733742][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.090550][ T41] usb 6-1: Product: syz [ 167.603841][ T41] usb 6-1: Manufacturer: syz [ 167.619194][ T41] usb 6-1: SerialNumber: syz [ 167.670616][ T41] etas_es58x 6-1:1.0: Starting syz syz (Serial Number syz) [ 167.921196][ T41] etas_es58x 6-1:1.0: Product info: Э [ 170.128959][ T22] usb 6-1: USB disconnect, device number 4 [ 170.146817][ T22] etas_es58x 6-1:1.0: Disconnecting syz syz [ 170.289688][ T6254] loop4: detected capacity change from 0 to 32768 [ 170.441284][ T6254] XFS (loop4): Mounting V5 Filesystem [ 170.567252][ T6254] XFS (loop4): Ending clean mount [ 170.576997][ T6254] XFS (loop4): Quotacheck needed: Please wait. [ 170.691875][ T6254] XFS (loop4): Quotacheck: Done. [ 170.792354][ T6262] device syzkaller0 entered promiscuous mode [ 171.171874][ T6282] tipc: Enabling of bearer rejected, failed to enable media [ 171.443497][ T4282] XFS (loop4): Unmounting Filesystem [ 171.774821][ T6296] Bluetooth: hci0: service_discovery: too big uuid_count value 47230 [ 173.601073][ T4290] Bluetooth: hci1: failed to read key size for handle 200 [ 175.086672][ T6316] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 175.621648][ T6353] tipc: Started in network mode [ 175.656930][ T6353] tipc: Node identity eae43343628e, cluster identity 4711 [ 175.701100][ T6353] tipc: Enabled bearer , priority 0 [ 175.709455][ T6348] device syzkaller0 entered promiscuous mode [ 175.764145][ T6346] tipc: Resetting bearer [ 176.113137][ T6346] tipc: Disabling bearer [ 176.368471][ T6359] device syzkaller0 entered promiscuous mode [ 177.572792][ T6387] loop4: detected capacity change from 0 to 128 [ 177.761262][ T6400] loop1: detected capacity change from 0 to 256 [ 177.858063][ T6400] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 177.944832][ T6407] loop0: detected capacity change from 0 to 256 [ 178.020176][ T6407] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 178.318495][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888018252000: rx timeout, send abort [ 178.827656][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888018252000: abort rx timeout. Force session deactivation [ 179.313616][ T6422] device syzkaller0 entered promiscuous mode [ 179.411562][ T6422] tipc: Enabled bearer , priority 0 [ 179.476300][ T6421] tipc: Resetting bearer [ 179.534046][ T6421] tipc: Disabling bearer [ 181.193659][ C0] sched: RT throttling activated [ 181.232397][ T6464] loop0: detected capacity change from 0 to 2048 [ 181.514693][ T6464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.583899][ T6464] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.255591][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 182.347650][ T6487] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 182.414371][ T6487] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 182.898069][ T6497] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4284] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6497] [ 184.139566][ T26] audit: type=1800 audit(1786725839.042:7): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="addr_trtype" dev="configfs" ino=43204 res=0 errno=0 [ 184.206410][ T26] audit: type=1800 audit(1786725839.072:8): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="addr_adrfam" dev="configfs" ino=43205 res=0 errno=0 [ 184.259144][ T6518] nvmet_rdma: enabling port 1 (127.0.0.1:44) [ 184.332585][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.466'. [ 184.351858][ T26] audit: type=1800 audit(1786725839.082:9): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="addr_traddr" dev="configfs" ino=43206 res=0 errno=0 [ 184.374275][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.470315][ T26] audit: type=1800 audit(1786725839.082:10): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="addr_trsvcid" dev="configfs" ino=43207 res=0 errno=0 [ 184.718790][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 184.749637][ T6525] team0 (unregistering): Port device team_slave_0 removed [ 184.802611][ T6525] team0 (unregistering): Port device team_slave_1 removed [ 185.179814][ T6539] loop5: detected capacity change from 0 to 2048 [ 185.367697][ T6539] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 185.443892][ T6539] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.478438][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.493051][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.474'. [ 185.974497][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 185.974533][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 186.431294][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 187.483062][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.506636][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.551128][ T6576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.655965][ T6576] device bridge_slave_0 left promiscuous mode [ 187.665249][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.801028][ T6576] device bridge_slave_1 left promiscuous mode [ 187.821558][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.875718][ T6576] bond0: (slave bond_slave_0): Releasing backup interface [ 187.975056][ T6576] bond0: (slave bond_slave_1): Releasing backup interface [ 188.081610][ T6584] loop1: detected capacity change from 0 to 40427 [ 188.109993][ T6584] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 188.119287][ T6584] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.165755][ T6584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.194612][ T6576] team0: Port device team_slave_0 removed [ 188.204770][ T6584] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.212550][ T6584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.325452][ T6576] team0: Port device team_slave_1 removed [ 188.362534][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.381764][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.405008][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.420325][ T26] audit: type=1804 audit(1786725843.322:11): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.490" name="/newroot/102/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 188.469754][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.442077][ T6583] team0: Port device xfrm0 added [ 189.534036][ T6591] tipc: Enabled bearer , priority 0 [ 189.863772][ T4910] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 190.066253][ T4910] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.086513][ T4910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.104920][ T4910] usb 1-1: Product: syz [ 190.116251][ T4910] usb 1-1: Manufacturer: syz [ 190.130176][ T4910] usb 1-1: SerialNumber: syz [ 190.152340][ T4910] usb 1-1: config 0 descriptor?? [ 190.427237][ T4910] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.648832][ T22] tipc: Node number set to 4262050500 [ 191.655898][ T6650] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 191.745498][ T6650] netlink: 'syz.4.491': attribute type 7 has an invalid length. [ 191.777993][ T6650] netlink: 'syz.4.491': attribute type 8 has an invalid length. [ 191.792581][ T6653] device syzkaller0 entered promiscuous mode [ 192.190667][ T4910] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 192.225056][ T4910] usb 1-1: USB disconnect, device number 6 [ 192.391302][ T6666] siw: device registration error -23 [ 192.620806][ T6671] loop5: detected capacity change from 0 to 8 [ 192.680149][ T6671] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.689412][ T6671] SQUASHFS error: Failed to read block 0x9b: -5 [ 192.696447][ T6671] SQUASHFS error: Unable to read metadata cache entry [99] [ 192.704451][ T6671] SQUASHFS error: Unable to read inode 0x127 [ 192.965276][ T4593] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.923413][ T6674] device syzkaller0 entered promiscuous mode [ 194.182561][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189649][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.282766][ T6661] loop1: detected capacity change from 0 to 32768 [ 194.425126][ T6661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.493 (6661) [ 194.500007][ T6661] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.535749][ T6689] netlink: 'syz.5.501': attribute type 1 has an invalid length. [ 194.717772][ T6661] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 194.970225][ T6661] BTRFS info (device loop1): enabling auto defrag [ 195.003313][ T6692] siw: device registration error -23 [ 195.136142][ T6661] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.159452][ T6661] BTRFS info (device loop1): use zstd compression, level 3 [ 195.174462][ T6661] BTRFS info (device loop1): turning on async discard [ 195.185722][ T6689] device bond2 entered promiscuous mode [ 195.192414][ T6661] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.204924][ T6692] rdma_rxe: rxe_register_device failed with error -23 [ 195.274226][ T6689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.282768][ T6661] BTRFS info (device loop1): trying to use backup root at mount time [ 195.283868][ T6692] rdma_rxe: failed to add ip6gretap0 [ 195.318203][ T6661] BTRFS info (device loop1): enabling ssd optimizations [ 195.389101][ T6699] loop4: detected capacity change from 0 to 512 [ 195.401853][ T6661] BTRFS info (device loop1): using spread ssd allocation scheme [ 195.421706][ T6661] BTRFS info (device loop1): setting nodatacow, compression disabled [ 195.443797][ T6661] BTRFS info (device loop1): using free space tree [ 195.538408][ T6699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.541695][ T6689] bond2: (slave bridge1): making interface the new active one [ 195.594221][ T6661] BTRFS error (device loop1): open_ctree failed: -12 [ 195.642948][ T6689] device bridge1 entered promiscuous mode [ 195.750212][ T6689] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 195.765763][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 195.872918][ T6699] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 195.927805][ T6699] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.402778][ T6744] device syzkaller0 entered promiscuous mode [ 197.439759][ T6744] tipc: Enabled bearer , priority 0 [ 197.460505][ T6740] tipc: Resetting bearer [ 197.555671][ T6740] tipc: Disabling bearer [ 197.629538][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 198.749244][ T6764] loop4: detected capacity change from 0 to 8 [ 198.896868][ T6764] SQUASHFS error: zlib decompression failed, data probably corrupt [ 198.905808][ T6764] SQUASHFS error: Failed to read block 0x9b: -5 [ 198.912709][ T6764] SQUASHFS error: Unable to read metadata cache entry [99] [ 198.920766][ T6764] SQUASHFS error: Unable to read inode 0x127 [ 199.308955][ T5786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.205738][ T6769] netlink: 'syz.6.516': attribute type 12 has an invalid length. [ 200.290973][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 200.460371][ T6784] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 200.548148][ T6784] device bond2 entered promiscuous mode [ 200.581437][ T6784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.673865][ T6788] bond2: (slave bridge1): making interface the new active one [ 200.687122][ T6788] device bridge1 entered promiscuous mode [ 200.698310][ T6788] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 200.714917][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 203.124283][ T6834] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 203.158098][ T6834] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 203.990760][ T6873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.217747][ T6881] device syzkaller0 entered promiscuous mode [ 205.551385][ T6924] loop0: detected capacity change from 0 to 1764 [ 205.732538][ T6925] netlink: 'syz.5.549': attribute type 1 has an invalid length. [ 205.970202][ T6922] netlink: 'syz.5.549': attribute type 1 has an invalid length. [ 206.567635][ T6934] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 209.093810][ T6982] loop4: detected capacity change from 0 to 512 [ 209.287582][ T6982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.298582][ T6982] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.854811][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 211.241234][ T6998] loop4: detected capacity change from 0 to 1764 [ 216.693781][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 216.807080][ T26] audit: type=1326 audit(1786725871.712:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.5.577" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac5b9e0d9 code=0x0 [ 217.006453][ T7050] device team0 entered promiscuous mode [ 217.012616][ T7050] device team_slave_0 entered promiscuous mode [ 217.046809][ T7050] device team_slave_1 entered promiscuous mode [ 217.055325][ T7050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.081224][ T7050] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 217.182482][ T7051] bridge0: port 4(vlan2) entered blocking state [ 217.220740][ T7051] bridge0: port 4(vlan2) entered disabled state [ 217.279232][ T7051] device vlan2 entered promiscuous mode [ 217.314886][ T7051] device bond0 entered promiscuous mode [ 217.332300][ T7051] device bond_slave_0 entered promiscuous mode [ 217.353043][ T7059] loop5: detected capacity change from 0 to 1764 [ 217.466419][ T7051] device bond_slave_1 entered promiscuous mode [ 217.473771][ T4319] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 217.553296][ T7051] device macvlan2 entered promiscuous mode [ 218.394332][ T4319] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.432199][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.446232][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.474491][ T4319] usb 2-1: Product: syz [ 218.479113][ T4319] usb 2-1: Manufacturer: syz [ 218.493793][ T4319] usb 2-1: SerialNumber: syz [ 218.505071][ T4319] usb 2-1: config 0 descriptor?? [ 218.556732][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium F38O3 v\+Co5³ڂ6lŽKrS"n%mEOAPࣝ&a84ץ2\jGogUvP=N.;kN)M',Û" ~I3IC:ɥ|DiT幷&&\ivpy(5D sԘ"wc$[ 218.726025][ T4319] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.152197][ T4319] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 220.187649][ T4319] usb 2-1: USB disconnect, device number 7 [ 221.328824][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'. [ 221.896956][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.595'. [ 222.025527][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.595'. F38O3 v\+Co5³ڂ6lŽKrS"n%mEOAPࣝ&a84ץ2\jGogUvP=N.;kN)M',Û" ~I3IC:ɥ|DiT幷&&\ivpy(5D sԘ"wc$[ 222.598118][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 222.932097][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.603'. [ 225.351888][ T7207] loop5: detected capacity change from 0 to 2048 [ 225.406699][ T7207] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 225.418492][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 225.801819][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 229.533741][ T4903] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 229.741846][ T4903] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.896637][ T4903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.938059][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.960500][ T4903] usb 1-1: Product: syz [ 229.969718][ T4903] usb 1-1: Manufacturer: syz [ 229.986897][ T4903] usb 1-1: SerialNumber: syz [ 230.110373][ T4903] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.112567][ T7269] device bridge_slave_0 left promiscuous mode [ 230.814178][ T6731] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.991947][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.165777][ T7269] device bridge_slave_1 left promiscuous mode [ 231.197729][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.260141][ T7269] bond0: (slave bond_slave_0): Releasing backup interface [ 231.314091][ T7269] device bond_slave_0 left promiscuous mode [ 231.362391][ T7269] bond0: (slave bond_slave_1): Releasing backup interface [ 231.385992][ T7269] device bond_slave_1 left promiscuous mode [ 231.408435][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.426203][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.440697][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.449965][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.468533][ T7269] bond1: (slave macvlan2): Removing an active aggregator [ 231.481892][ T7269] bond1: (slave macvlan2): Releasing backup interface [ 231.561399][ T7276] tipc: Enabling of bearer rejected, failed to enable media [ 231.974185][ T6731] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 231.994010][ T6731] ath9k_htc: Failed to initialize the device [ 232.059199][ T6731] usb 1-1: ath9k_htc: USB layer deinitialized [ 232.171863][ T7331] tipc: Enabling of bearer rejected, failed to enable media [ 232.632783][ T41] usb 1-1: USB disconnect, device number 7 [ 232.767622][ T7343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.372053][ T7425] netlink: 256 bytes leftover after parsing attributes in process `syz.0.656'. [ 239.405223][ T7425] unsupported nlmsg_type 40 [ 240.292790][ T7437] device syzkaller0 entered promiscuous mode [ 245.512570][ T7553] binder: 7550:7553 ioctl c0306201 200000000180 returned -14 [ 246.807650][ T7582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 250.606062][ T7628] loop4: detected capacity change from 0 to 1024 [ 250.614846][ T7628] EXT4-fs: Ignoring removed bh option [ 251.992682][ T7628] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.081818][ T7641] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 252.164738][ T7628] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 253.238842][ T7628] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 253.578635][ T7628] EXT4-fs (loop4): failed to open journal device unknown-block(0,5) -6 [ 255.576391][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.585503][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.937590][ T7705] lo speed is unknown, defaulting to 1000 [ 259.967362][ T7705] lo speed is unknown, defaulting to 1000 [ 260.101174][ T7707] loop5: detected capacity change from 0 to 32768 [ 260.148230][ T7705] lo speed is unknown, defaulting to 1000 [ 260.186857][ T7705] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 260.225119][ T7707] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 260.428668][ T7705] lo speed is unknown, defaulting to 1000 [ 260.679377][ T7705] lo speed is unknown, defaulting to 1000 [ 260.862210][ T7705] lo speed is unknown, defaulting to 1000 [ 260.882839][ T7705] lo speed is unknown, defaulting to 1000 [ 261.673615][ T7707] syz.5.711 (7707) used greatest stack depth: 18688 bytes left [ 261.935875][ T7705] lo speed is unknown, defaulting to 1000 [ 262.076196][ T4917] ocfs2: Unmounting device (7,5) on (node local) [ 264.820133][ T7750] loop5: detected capacity change from 0 to 1024 [ 266.480668][ T7772] tipc: Enabling of bearer rejected, failed to enable media [ 267.387125][ T7778] device syzkaller0 entered promiscuous mode [ 271.192811][ T26] audit: type=1326 audit(1786725925.602:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87299e0d9 code=0x7fc00000 [ 271.383502][ T26] audit: type=1326 audit(1786725925.992:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb87293f459 code=0x7fc00000 [ 273.488084][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 273.679532][ T7843] bridge2: port 1(erspan0) entered blocking state [ 273.723826][ T7843] bridge2: port 1(erspan0) entered disabled state [ 273.748520][ T7843] device erspan0 entered promiscuous mode [ 273.775761][ T7843] bridge2: port 1(erspan0) entered blocking state [ 273.782933][ T7843] bridge2: port 1(erspan0) entered forwarding state [ 273.861583][ T7846] bridge2: port 1(erspan0) entered disabled state [ 273.984916][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.021357][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.296466][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 277.328440][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 278.373432][ T7894] virtio-fs: tag not found [ 286.682023][ T7992] loop0: detected capacity change from 0 to 128 [ 289.616267][ T8003] mmap: syz.5.760 (8003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 291.391955][ T8023] UBIFS error (pid: 8023): cannot open "c:::", error -22 [ 292.418863][ T8033] loop0: detected capacity change from 0 to 512 [ 292.455673][ T8033] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.586713][ T8149] jffs2: notice: (8149) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 304.040511][ T8168] binder: 8163:8168 ioctl c0306201 200000000580 returned -14 [ 305.295374][ T8162] loop5: detected capacity change from 0 to 32768 [ 305.331721][ T8162] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.791 (8162) [ 305.416491][ T8180] binder_alloc: 8175: binder_alloc_buf, no vma [ 305.441284][ T8162] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.467564][ T8162] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 305.524705][ T8162] BTRFS info (device loop5): setting nodatasum [ 305.583854][ T8162] BTRFS info (device loop5): force zlib compression, level 3 [ 305.592031][ T8162] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 305.779000][ T8162] BTRFS info (device loop5): use lzo compression, level 0 [ 305.828483][ T8162] BTRFS info (device loop5): turning on flush-on-commit [ 305.853871][ T8162] BTRFS info (device loop5): enabling auto defrag [ 305.861033][ T8162] BTRFS info (device loop5): max_inline at 4096 [ 305.890891][ T8162] BTRFS info (device loop5): using free space tree [ 306.798706][ T8209] jffs2: notice: (8209) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.884455][ T8162] BTRFS error (device loop5): open_ctree failed: -22 [ 307.878375][ T7996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (7996) [ 308.876766][ T8233] loop1: detected capacity change from 0 to 512 [ 308.921299][ T8233] ext4: Unknown parameter 'appraise_type' [ 309.188940][ T8245] loop5: detected capacity change from 0 to 256 [ 310.767313][ T8254] "syz.0.818" (8254) uses obsolete ecb(arc4) skcipher [ 312.469782][ T8271] loop1: detected capacity change from 0 to 512 [ 312.494406][ T8271] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 312.719650][ T8271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 312.731096][ T8271] EXT4-fs (loop1): orphan cleanup on readonly fs [ 312.743857][ T8271] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.823: attempt to clear invalid blocks 1024 len 1 [ 312.765567][ T8271] EXT4-fs (loop1): Remounting filesystem read-only [ 312.774707][ T8271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.823: bg 0: block 361: padding at end of block bitmap is not set [ 312.792603][ T8271] EXT4-fs (loop1): Remounting filesystem read-only [ 312.800463][ T8271] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 312.824009][ T8271] EXT4-fs (loop1): Remounting filesystem read-only [ 312.831436][ T8271] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.823: invalid indirect mapped block 1811939328 (level 0) [ 312.847382][ T8271] EXT4-fs (loop1): Remounting filesystem read-only [ 312.854650][ T8271] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.823: invalid indirect mapped block 2185560079 (level 1) [ 312.870795][ T8271] EXT4-fs (loop1): Remounting filesystem read-only [ 312.878847][ T8271] EXT4-fs (loop1): 1 truncate cleaned up [ 312.885135][ T8271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 313.104026][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 314.104544][ T8285] loop1: detected capacity change from 0 to 32768 [ 314.144183][ T8285] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.827 (8285) [ 314.174453][ T8285] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 314.186447][ T8285] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 314.196044][ T8285] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 314.206394][ T8285] BTRFS info (device loop1): use zstd compression, level 3 [ 314.214359][ T8285] BTRFS info (device loop1): force clearing of disk cache [ 314.222159][ T8285] BTRFS info (device loop1): enabling disk space caching [ 314.229984][ T8285] BTRFS info (device loop1): disk space caching is enabled [ 314.686982][ T8285] BTRFS info (device loop1): enabling ssd optimizations [ 314.698626][ T8285] BTRFS info (device loop1): rebuilding free space tree [ 314.769745][ T8285] BTRFS info (device loop1): disabling free space tree [ 314.777750][ T8285] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 314.790800][ T8285] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 314.902399][ T8313] device bond2 left promiscuous mode [ 314.908327][ T8313] device bridge1 left promiscuous mode [ 315.947722][ T8318] device bridge_slave_1 left promiscuous mode [ 316.364051][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.389090][ T8323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 317.218447][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.229846][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.281659][ T8318] device bridge_slave_0 left promiscuous mode [ 317.331134][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.151098][ T4272] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 318.456776][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.6.835'. [ 319.235237][ T8356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.327955][ T7996] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (7996) [ 321.671673][ T8390] se_device not configured yet, cannot port link [ 321.834549][ T8401] device syzkaller0 entered promiscuous mode [ 324.118029][ T8424] file system registered [ 325.108461][ T8422] netlink: 'syz.6.852': attribute type 10 has an invalid length. [ 325.117161][ T8422] netlink: 40 bytes leftover after parsing attributes in process `syz.6.852'. [ 325.144022][ T8422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 326.554116][ T8442] tipc: Failed to remove unknown binding: 66,0,0/4262050500:1595774090/1595774091 [ 326.849617][ T8451] loop1: detected capacity change from 0 to 512 [ 327.732528][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 327.779703][ T8451] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 328.098538][ T8451] EXT4-fs (loop1): 1 truncate cleaned up [ 328.114919][ T8451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 329.665289][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 333.164785][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 333.176384][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 333.186439][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 333.197305][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 333.207154][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 335.160355][ T8548] device syzkaller0 entered promiscuous mode [ 336.342707][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 337.184298][ T8574] nvmet: adding nsid 1 to subsystem testnqn [ 337.193283][ T8574] nvmet: failed to open block device (null): (-22) [ 337.203965][ T26] audit: type=1800 audit(1786725992.092:15): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.887" name="enable" dev="configfs" ino=48314 res=0 errno=0 [ 337.410393][ T26] audit: type=1800 audit(1786725992.102:16): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.887" name="addr_adrfam" dev="configfs" ino=48315 res=0 errno=0 [ 338.001645][ T26] audit: type=1800 audit(1786725992.802:17): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.887" name="addr_trsvcid" dev="configfs" ino=48331 res=0 errno=0 [ 338.024240][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.796595][ T8625] "syz.6.901" (8625) uses obsolete ecb(arc4) skcipher [ 341.056968][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.903'. [ 342.037039][ T8633] "syz.1.902" (8633) uses obsolete ecb(arc4) skcipher [ 344.376206][ T8652] loop0: detected capacity change from 0 to 128 [ 344.472441][ T8652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 344.487612][ T8652] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.687519][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 346.108098][ T8670] loop5: detected capacity change from 0 to 32768 [ 346.132583][ T8670] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 346.354001][ T7996] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.911904][ T8679] overlayfs: overlapping lowerdir path [ 347.346475][ T8676] loop5: detected capacity change from 0 to 8192 [ 349.228180][ T8704] lo speed is unknown, defaulting to 1000 [ 353.273252][ T8372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 356.409842][ T8762] tipc: Resetting bearer [ 356.416232][ T8762] tipc: Resetting bearer [ 356.445833][ T8762] device bond1 left promiscuous mode [ 356.451802][ T8762] device bond2 left promiscuous mode [ 356.457663][ T8762] device bridge1 left promiscuous mode [ 357.185571][ T4374] tipc: Resetting bearer [ 357.352696][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.936'. [ 358.408293][ T8764] kvm [8763]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x7fd9000000c0 [ 358.495397][ T8764] kvm [8763]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffff7fef000000b2 [ 358.507158][ T8764] kvm [8763]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffff7fd400000072 [ 358.518883][ T8764] kvm [8763]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff7fca000000de [ 359.898701][ T8796] loop0: detected capacity change from 0 to 256 [ 359.929898][ T8796] FAT-fs (loop0): Unrecognized mount option "uni_xlate=3" or missing value [ 361.012780][ T8805] loop5: detected capacity change from 0 to 512 [ 361.036120][ T8805] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 361.062681][ T8807] "syz.0.956" (8807) uses obsolete ecb(arc4) skcipher [ 361.094291][ T8805] EXT4-fs (loop5): 1 truncate cleaned up [ 361.103820][ T8805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 362.116215][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 365.553913][ T8226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.832208][ T26] audit: type=1800 audit(1786726020.732:18): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.955" name="enable" dev="configfs" ino=48639 res=0 errno=0 [ 365.832748][ T8847] nvmet: failed to open block device (null): (-22) [ 365.950979][ T26] audit: type=1800 audit(1786726020.812:19): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.955" name="addr_adrfam" dev="configfs" ino=49573 res=0 errno=0 [ 365.980616][ T26] audit: type=1800 audit(1786726020.812:20): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.955" name="addr_trsvcid" dev="configfs" ino=49574 res=0 errno=0 [ 366.015888][ T8226] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.067303][ T8226] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 366.212062][ T8849] loop1: detected capacity change from 0 to 32768 [ 366.248978][ T8849] XFS (loop1): Mounting V5 Filesystem [ 366.264218][ T8226] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 366.278330][ T8849] XFS (loop1): Ending clean mount [ 366.291387][ T8849] XFS (loop1): Quotacheck needed: Please wait. [ 366.292175][ T8863] "syz.6.959" (8863) uses obsolete ecb(arc4) skcipher [ 366.334660][ T8226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.530688][ T8226] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 366.570835][ T8226] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 367.187841][ T8849] XFS (loop1): Quotacheck: Done. [ 367.981935][ T4272] XFS (loop1): Unmounting Filesystem [ 368.478477][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.960'. [ 369.723106][ T8372] usb 1-1: USB disconnect, device number 8 [ 369.806375][ T8372] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 369.856589][ T8372] spcp8x5 1-1:1.0: device disconnected [ 369.941693][ T8887] loop0: detected capacity change from 0 to 512 [ 370.041129][ T8887] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 370.107579][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.965'. [ 370.778010][ T8887] EXT4-fs (loop0): 1 truncate cleaned up [ 370.804007][ T8887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 372.216405][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 374.333896][ T8912] "syz.5.972" (8912) uses obsolete ecb(arc4) skcipher [ 377.772041][ T8956] lo speed is unknown, defaulting to 1000 [ 378.355458][ T8950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.456624][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.463761][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.756368][ T8974] "syz.0.986" (8974) uses obsolete ecb(arc4) skcipher [ 382.707045][ T9006] device syzkaller0 entered promiscuous mode [ 382.739211][ T9006] simple: bas]9oς>Q/ic_0 [ 382.745165][ T9006] simple: bas]9oς>Q/ic_0 [ 382.750488][ T9006] simple: bas]9oς>Q/ic_0 [ 382.755840][ T9006] simple: bas]9oς>Q/ic_0 [ 382.761157][ T9006] simple: bas]9oς>Q/ic_0 [ 382.766510][ T9006] simple: bas]9oς>Q/ic_0 [ 382.771843][ T9006] simple: bas]9oς>Q/ic_0 [ 382.777212][ T9006] simple: bas]9oς>Q/ic_0 [ 382.782563][ T9006] simple: bas]9oς>Q/ic_0 [ 382.787914][ T9006] simple: bas]9oς>Q/ic_0 [ 382.793231][ T9006] simple: bas]9oς>Q/ic_0 [ 382.798569][ T9006] simple: bas]9oς>Q/ic_0 [ 382.803906][ T9006] simple: bas]9oς>Q/ic_0 [ 382.809218][ T9006] simple: bas]9oς>Q/ic_0 [ 382.814552][ T9006] simple: bas]9oς>Q/ic_0 [ 382.819873][ T9006] simple: bas]9oς>Q/ic_0 [ 382.825233][ T9006] simple: bas]9oς>Q/ic_0 [ 382.830575][ T9006] simple: bas]9oς>Q/ic_0 [ 382.835934][ T9006] simple: bas]9oς>Q/ic_0 [ 382.841273][ T9006] simple: bas]9oς>Q/ic_0 [ 382.846651][ T9006] simple: bas]9oς>Q/ic_0 [ 382.851984][ T9006] simple: bas]9oς>Q/ic_0 [ 382.857358][ T9006] simple: bas]9oς>Q/ic_0 [ 382.862687][ T9006] simple: bas]9oς>Q/ic_0 [ 382.868061][ T9006] simple: bas]9oς>Q/ic_0 [ 382.873388][ T9006] simple: bas]9oς>Q/ic_0 [ 382.878751][ T9006] simple: bas]9oς>Q/ic_0 [ 382.884103][ T9006] simple: bas]9oς>Q/ic_0 [ 382.889418][ T9006] simple: bas]9oς>Q/ic_0 [ 382.894799][ T9006] simple: bas]9oς>Q/ic_0 [ 382.900126][ T9006] simple: bas]9oς>Q/ic_0 [ 382.905521][ T9006] simple: bas]9oς>Q/ic_0 [ 382.910849][ T9006] TC_ACT_REPEAT abuse ? [ 383.612572][ T9009] "syz.4.997" (9009) uses obsolete ecb(arc4) skcipher [ 384.333221][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 385.213856][ T9027] "syz.4.1001" (9027) uses obsolete ecb(arc4) skcipher [ 386.653725][ T8226] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 386.950665][ T8226] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 386.984056][ T8226] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 387.023770][ T8226] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 387.085336][ T8226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.138392][ T8226] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 387.179738][ T8226] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 390.221256][ T8226] usb 6-1: USB disconnect, device number 5 [ 390.254120][ T8226] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 390.263294][ T8226] spcp8x5 6-1:1.0: device disconnected [ 391.955759][ T9066] "syz.1.1011" (9066) uses obsolete ecb(arc4) skcipher [ 396.231104][ T9092] syz.5.1019 (9092): drop_caches: 0 [ 400.055544][ T9127] "syz.5.1025" (9127) uses obsolete ecb(arc4) skcipher [ 404.816159][ T9159] "syz.5.1029" (9159) uses obsolete ecb(arc4) skcipher [ 410.233742][ T9191] "syz.1.1037" (9191) uses obsolete ecb(arc4) skcipher [ 412.485392][ T9215] "syz.5.1043" (9215) uses obsolete ecb(arc4) skcipher [ 416.393851][ T9243] "syz.6.1052" (9243) uses obsolete ecb(arc4) skcipher [ 421.503855][ T9275] "syz.4.1058" (9275) uses obsolete ecb(arc4) skcipher [ 428.979691][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1065'. [ 429.427794][ T9305] bridge2: port 1(erspan0) entered blocking state [ 429.443239][ T9305] bridge2: port 1(erspan0) entered disabled state [ 429.493297][ T9305] device erspan0 entered promiscuous mode [ 429.532727][ T9307] tipc: Resetting bearer [ 429.880605][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.892447][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.901791][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.921193][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.929528][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 429.937484][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.961841][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.974536][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.982733][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.991344][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.018522][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 430.027659][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.167703][ T9323] input: syz0 as /devices/virtual/input/input15 [ 431.376034][ T9326] "syz.6.1070" (9326) uses obsolete ecb(arc4) skcipher [ 432.720259][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 432.790736][ T9319] lo speed is unknown, defaulting to 1000 [ 432.962913][ T9319] chnl_net:caif_netlink_parms(): no params data found [ 434.635071][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.683609][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.703115][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 434.742007][ T9319] device bridge_slave_0 entered promiscuous mode [ 434.790692][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.828971][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.894145][ T9319] device bridge_slave_1 entered promiscuous mode [ 434.955671][ T9319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.185539][ T9319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.140530][ T9319] team0: Port device team_slave_0 added [ 436.189091][ T9319] team0: Port device team_slave_1 added [ 436.770950][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 437.811773][ T9374] "syz.5.1081" (9374) uses obsolete ecb(arc4) skcipher [ 438.468791][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.476473][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.508960][ T9319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.529016][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1080'. [ 438.567106][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.580189][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.618565][ T9319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.643510][ T9377] bridge1: port 1(erspan0) entered blocking state [ 438.663373][ T9377] bridge1: port 1(erspan0) entered disabled state [ 438.783097][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 438.825967][ T9377] device erspan0 entered promiscuous mode [ 438.931814][ T9377] bridge1: port 1(erspan0) entered blocking state [ 438.939030][ T9377] bridge1: port 1(erspan0) entered forwarding state [ 439.273306][ T9378] bridge1: port 1(erspan0) entered disabled state [ 439.651378][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.658362][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.436861][ T9389] input: syz0 as /devices/virtual/input/input16 [ 440.818608][ T9319] device hsr_slave_0 entered promiscuous mode [ 440.833517][ T9394] loop0: detected capacity change from 0 to 512 [ 440.845607][ T9394] EXT4-fs: Ignoring removed i_version option [ 440.852681][ T9394] EXT4-fs: Ignoring removed nobh option [ 441.032072][ T9394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 441.442407][ T9319] device hsr_slave_1 entered promiscuous mode [ 441.465835][ T9394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 441.488510][ T9319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.497195][ T9319] Cannot create hsr debugfs directory [ 441.527518][ T9394] EXT4-fs (loop0): 1 truncate cleaned up [ 441.534104][ T9394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 441.766079][ T9319] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.805641][ T9319] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 441.830949][ T9319] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 441.902223][ T9319] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 442.317122][ T9319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.335732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.347830][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.371999][ T9319] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.608168][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 442.620656][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 442.661933][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.023354][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.031255][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.474536][ T9416] "syz.0.1090" (9416) uses obsolete ecb(arc4) skcipher [ 443.928613][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.945147][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.961491][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.972335][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.980193][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.989089][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 444.152701][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 444.184740][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 444.361722][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.546762][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.310836][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.321778][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.557113][ T9319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.609277][ T9319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.856769][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.866143][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.961952][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.040394][ T9436] loop5: detected capacity change from 0 to 1024 [ 447.093894][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.110215][ T9436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 447.151459][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.870682][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.885622][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.915848][ T9319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.232246][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 448.908051][ T9467] loop5: detected capacity change from 0 to 512 [ 449.072750][ T9467] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 449.181155][ T9467] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.006729][ T9477] "syz.4.1103" (9477) uses obsolete ecb(arc4) skcipher [ 450.596213][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 450.660951][ T26] audit: type=1800 audit(1787774681.986:21): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1104" name="bus" dev="ramfs" ino=50696 res=0 errno=0 [ 451.148948][ T9487] "syz.0.1106" (9487) uses obsolete ecb(arc4) skcipher [ 452.387638][ T9501] "syz.6.1119" (9501) uses obsolete ecb(arc4) skcipher [ 453.071698][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.099125][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.199835][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.246662][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.296999][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 453.333377][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1112'. [ 453.360678][ T9319] device veth0_vlan entered promiscuous mode [ 453.406536][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.421107][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.448478][ T9512] bridge2: port 1(erspan0) entered blocking state [ 453.482940][ T9512] bridge2: port 1(erspan0) entered disabled state [ 453.509251][ T9512] device erspan0 entered promiscuous mode [ 453.535207][ T9512] bridge2: port 1(erspan0) entered blocking state [ 453.544013][ T9512] bridge2: port 1(erspan0) entered forwarding state [ 453.655405][ T9507] bridge2: port 1(erspan0) entered disabled state [ 453.819608][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.828904][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.855493][ T9319] device veth1_vlan entered promiscuous mode [ 453.862900][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 454.538689][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 454.585211][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.644796][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.783652][ T9319] device veth0_macvtap entered promiscuous mode [ 454.856131][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 455.187858][ T9319] device veth1_macvtap entered promiscuous mode [ 455.407234][ T9319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.498204][ T9319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.513903][ T9319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.613736][ T9319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.657680][ T9319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.735951][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.208806][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.241138][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.278427][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.290018][ T9319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.307114][ T9319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.318218][ T9319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.330238][ T9319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.343143][ T9319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.356288][ T9319] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.366201][ T9319] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.376140][ T9319] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.385938][ T9319] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.396930][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.406945][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.580600][ T5789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.604380][ T5789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.620137][ T5789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.629989][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.638400][ T5789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.717144][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.959289][ T9541] loop5: detected capacity change from 0 to 128 [ 458.534415][ T9555] "syz.6.1122" (9555) uses obsolete ecb(arc4) skcipher [ 458.919294][ T9563] jffs2: notice: (9563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 459.262057][ T26] audit: type=1800 audit(1787774690.765:22): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1121" name="bus" dev="ramfs" ino=52239 res=0 errno=0 [ 460.436947][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 461.705234][ T9586] MTD: Couldn't look up './dev/mtdblock0': -2 [ 462.907228][ T9598] loop7: detected capacity change from 0 to 1024 [ 464.651566][ T9615] "syz.4.1136" (9615) uses obsolete ecb(arc4) skcipher [ 465.053167][ T9613] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1135'. [ 465.423679][ T22] usb 6-1: device descriptor read/all, error -71 [ 465.639024][ T9628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.689098][ T9631] loop0: detected capacity change from 0 to 1024 [ 465.728093][ T9631] hfsplus: unable to parse mount options [ 467.369618][ T9649] jffs2: notice: (9649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 468.210892][ T9649] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 468.230488][ T9653] loop0: detected capacity change from 0 to 256 [ 468.252076][ T9653] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 470.348223][ T9673] "syz.0.1148" (9673) uses obsolete ecb(arc4) skcipher [ 474.086036][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1156'. [ 474.867232][ T9714] "syz.0.1168" (9714) uses obsolete ecb(arc4) skcipher [ 475.320127][ T9719] jffs2: notice: (9719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 480.747555][ T9756] "syz.4.1170" (9756) uses obsolete ecb(arc4) skcipher [ 483.009088][ T26] audit: type=1800 audit(1787774714.418:23): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1172" name="pnp_string" dev="configfs" ino=52673 res=0 errno=0 [ 483.468033][ T9783] fuse: Bad value for 'fd' [ 483.587360][ T9782] MTD: Couldn't look up './dev/mtdblock0': -2 [ 484.715796][ T9794] kvm [9793]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 486.237550][ T9806] "syz.4.1182" (9806) uses obsolete ecb(arc4) skcipher [ 487.802871][ T9816] "syz.6.1184" (9816) uses obsolete ecb(arc4) skcipher [ 488.525664][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 489.482870][ T9830] binder: 9829:9830 ioctl c0306201 0 returned -14 [ 492.899326][ T9855] loop7: detected capacity change from 0 to 512 [ 493.050646][ T9855] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 493.618679][ T9861] "syz.5.1195" (9861) uses obsolete ecb(arc4) skcipher [ 494.996369][ T9867] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 496.502932][ T9872] "syz.7.1198" (9872) uses obsolete ecb(arc4) skcipher [ 497.476062][ T9878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.248061][ T9911] device bridge0 entered promiscuous mode [ 500.504802][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.085228][ T9916] "syz.4.1207" (9916) uses obsolete ecb(arc4) skcipher [ 502.594378][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.097009][ T26] audit: type=1107 audit(1787774734.835:24): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 503.872280][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1214'. [ 507.099268][ T9955] "syz.4.1209" (9955) uses obsolete ecb(arc4) skcipher [ 507.423334][ T9959] loop7: detected capacity change from 0 to 32768 [ 508.971433][ T9959] (syz.7.1218,9959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 508.990047][ T9959] (syz.7.1218,9959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 509.298667][ T9959] JBD2: Ignoring recovery information on journal [ 509.941707][ T9959] JBD2: recovery failed [ 509.946413][ T9959] (syz.7.1218,9959,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 509.956151][ T9959] (syz.7.1218,9959,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 509.966432][ T9959] (syz.7.1218,9959,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 509.975004][ T9959] (syz.7.1218,9959,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 510.027856][ T9959] (syz.7.1218,9959,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 511.882098][ T9969] "syz.7.1220" (9969) uses obsolete ecb(arc4) skcipher [ 512.598724][ T9977] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1222'. [ 514.819175][T10001] zram0: detected capacity change from 0 to 8 [ 515.529052][T10002] lo speed is unknown, defaulting to 1000 [ 516.231844][T10011] loop5: detected capacity change from 0 to 512 [ 517.351101][T10011] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.414352][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.465626][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.614352][T10029] "syz.6.1234" (10029) uses obsolete ecb(arc4) skcipher [ 520.959348][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.468038][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 523.278279][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.512779][T10063] loop7: detected capacity change from 0 to 512 [ 525.541799][T10063] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 525.740393][ T49] Bluetooth: hci0: command 0x0405 tx timeout [ 528.366771][ T22] usb 1-1: device descriptor read/all, error -110 [ 528.548567][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 528.954743][ T22] usb 1-1: device descriptor read/64, error -32 [ 529.082559][ T22] usb usb1-port1: attempt power cycle [ 529.807703][T10105] "syz.6.1250" (10105) uses obsolete ecb(arc4) skcipher [ 530.227516][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 530.287372][ T22] usb 1-1: device descriptor read/8, error -32 [ 530.564128][T10116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.585297][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 530.658013][ T22] usb 1-1: device descriptor read/8, error -32 [ 530.850368][ T22] usb usb1-port1: unable to enumerate USB device [ 531.562289][T10130] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 532.742820][T10131] tipc: Enabling of bearer rejected, failed to enable media [ 532.891681][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 533.607031][T10142] siw: device registration error -23 [ 534.200324][T10149] "syz.7.1258" (10149) uses obsolete ecb(arc4) skcipher [ 537.952707][T10178] "syz.6.1263" (10178) uses obsolete ecb(arc4) skcipher [ 538.657623][ T57] device hsr_slave_0 left promiscuous mode [ 539.340150][ T57] device hsr_slave_1 left promiscuous mode [ 540.052683][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.076369][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.156064][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.172228][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.192260][ T57] device vlan2 left promiscuous mode [ 540.198114][ T57] device bond0 left promiscuous mode [ 540.221500][ T57] device bond_slave_0 left promiscuous mode [ 540.228344][ T57] device bond_slave_1 left promiscuous mode [ 540.257486][ T57] device macvlan2 left promiscuous mode [ 540.278355][ T57] bridge0: port 3(vlan2) entered disabled state [ 541.143498][ T57] device bridge_slave_1 left promiscuous mode [ 541.249845][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.337950][ T57] device bridge_slave_0 left promiscuous mode [ 541.486868][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.571194][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1260'. [ 542.313390][ T57] device team0 left promiscuous mode [ 542.355997][ T57] device team_slave_0 left promiscuous mode [ 542.384161][ T57] device team_slave_1 left promiscuous mode [ 542.458373][ T57] device veth1_macvtap left promiscuous mode [ 542.468811][ T57] device veth0_macvtap left promiscuous mode [ 542.490957][ T57] device veth1_vlan left promiscuous mode [ 542.506276][ T57] device veth0_vlan left promiscuous mode [ 543.009754][T10223] "syz.6.1276" (10223) uses obsolete ecb(arc4) skcipher [ 543.948240][ T57] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 546.711258][T10261] siw: device registration error -23 [ 547.820822][ T57] team0 (unregistering): Port device team_slave_1 removed [ 547.955491][T10278] "syz.6.1285" (10278) uses obsolete ecb(arc4) skcipher [ 548.106168][ T57] team0 (unregistering): Port device team_slave_0 removed [ 548.210964][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.400990][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.704559][ T57] bond0 (unregistering): Released all slaves [ 549.846344][ T57] smc: removing net device lo with user defined pnetid SYZ0 [ 549.926060][T10222] device syzkaller0 entered promiscuous mode [ 549.990059][ T8226] lo speed is unknown, defaulting to 1000 [ 550.181439][T10298] loop5: detected capacity change from 0 to 512 [ 550.197937][T10298] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 550.692514][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 551.318708][T10316] Bluetooth: MGMT ver 1.22 [ 551.373139][T10318] netlink: 'syz.4.1292': attribute type 12 has an invalid length. [ 551.995412][ T26] audit: type=1800 audit(1787774783.653:25): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1295" name="pnp_string" dev="configfs" ino=55344 res=0 errno=0 [ 552.845506][T10335] "syz.5.1296" (10335) uses obsolete ecb(arc4) skcipher [ 557.491455][T10386] device syzkaller0 entered promiscuous mode [ 560.933466][T10437] usb usb1: usbfs: process 10437 (syz.0.1319) did not claim interface 2 before use [ 561.760963][T10440] "syz.6.1320" (10440) uses obsolete ecb(arc4) skcipher [ 561.882188][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.889156][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.100602][T10455] device syzkaller0 entered promiscuous mode [ 562.219386][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1323'. [ 562.238523][T10456] netlink: 'syz.5.1323': attribute type 5 has an invalid length. [ 562.275061][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1323'. [ 562.316311][T10456] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 562.348507][T10456] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 562.375561][T10456] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 562.407551][T10456] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 562.436141][T10456] device geneve2 entered promiscuous mode [ 562.466798][T10455] tipc: Enabled bearer , priority 0 [ 562.512702][T10449] tipc: Resetting bearer [ 562.619771][ T4917] ffs_data_put(): freeing [ 562.698455][T10449] tipc: Disabling bearer [ 563.890133][T10474] loop5: detected capacity change from 0 to 2048 [ 563.901832][T10474] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 563.917780][T10474] NILFS (loop5): mounting unchecked fs [ 563.971526][T10474] NILFS (loop5): recovery complete [ 564.006074][T10476] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 564.225244][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1327'. [ 569.170578][T10510] "syz.6.1334" (10510) uses obsolete ecb(arc4) skcipher [ 569.361104][T10529] netlink: 'syz.7.1336': attribute type 12 has an invalid length. [ 569.619043][T10537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1338'. [ 570.315268][ T26] audit: type=1326 audit(1787774801.962:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10544 comm="syz.5.1340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac5b9e0d9 code=0x0 [ 570.682280][T10543] "syz.6.1341" (10543) uses obsolete ecb(arc4) skcipher [ 570.953460][T10553] fuse: Bad value for 'fd' [ 571.083765][T10557] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 573.017518][T10565] loop7: detected capacity change from 0 to 512 [ 573.830690][T10565] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 573.872109][T10566] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 573.882772][T10566] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 573.893645][T10566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 573.921845][T10566] syz.4.1346 (10566) used greatest stack depth: 17136 bytes left [ 574.208352][T10565] EXT4-fs (loop7): 1 truncate cleaned up [ 574.248359][T10565] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 575.873162][T10582] "syz.6.1349" (10582) uses obsolete ecb(arc4) skcipher [ 578.053764][T10594] "syz.0.1354" (10594) uses obsolete ecb(arc4) skcipher [ 579.296269][T10602] loop5: detected capacity change from 0 to 1024 [ 580.373863][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1358'. [ 580.383855][T10618] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1358'. [ 582.307471][ T9319] EXT4-fs (loop7): unmounting filesystem. [ 584.612659][T10646] fuse: Unknown parameter '0x0000000000000009' [ 586.833397][T10650] "syz.4.1365" (10650) uses obsolete ecb(arc4) skcipher [ 587.780706][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 587.790819][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 587.802894][ T4278] Bluetooth: hci0: hardware error 0x00 [ 588.477365][T10664] "syz.7.1366" (10664) uses obsolete ecb(arc4) skcipher [ 589.658609][T10667] "syz.0.1378" (10667) uses obsolete ecb(arc4) skcipher [ 589.966169][ T57] hfsplus: b-tree write err: -5, ino 25 [ 590.025997][ T57] hfsplus: b-tree write err: -5, ino 4 [ 590.077463][ T57] hfsplus: b-tree write err: -5, ino 2 [ 590.909995][ T4278] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 591.473943][T10694] tipc: Enabling of bearer rejected, failed to enable media [ 591.549008][T10694] rt1719: probe of 0-0049 failed with error -5 [ 591.712793][T10694] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 591.755691][T10696] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 591.850923][T10696] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 593.497132][T10714] Console: switching to colour VGA+ 80x25 [ 596.908128][T10739] "syz.6.1381" (10739) uses obsolete ecb(arc4) skcipher [ 597.204891][T10747] usb usb1: usbfs: process 10747 (syz.5.1382) did not claim interface 2 before use [ 598.435350][T10755] "syz.4.1384" (10755) uses obsolete ecb(arc4) skcipher [ 598.605899][T10765] loop7: detected capacity change from 0 to 256 [ 602.861809][T10803] overlayfs: failed to clone upperpath [ 603.020627][T10807] loop7: detected capacity change from 0 to 2048 [ 604.259947][T10807] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 604.320395][T10807] NILFS (loop7): mounting unchecked fs [ 604.354323][T10294] udevd[10294]: incorrect nilfs2 checksum on /dev/loop7 [ 604.708180][T10836] fuse: Unknown parameter '0xffffffffffffffff' [ 605.778506][T10807] NILFS (loop7): recovery complete [ 605.857720][T10807] NILFS (loop7): error -4 creating segctord thread [ 606.567604][T10846] "syz.0.1394" (10846) uses obsolete ecb(arc4) skcipher [ 607.704766][T10860] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 608.038000][T10865] loop7: detected capacity change from 0 to 2048 [ 608.067195][T10865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.187720][ T26] audit: type=1800 audit(1787774841.000:27): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1401" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=1370 res=0 errno=0 [ 612.288984][T10902] "syz.4.1409" (10902) uses obsolete ecb(arc4) skcipher [ 613.505340][T10912] fuse: Unknown parameter '0xffffffffffffffff' [ 613.514831][T10912] netlink: 'syz.0.1411': attribute type 21 has an invalid length. [ 614.602889][T10921] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1395'. [ 615.675423][T10941] loop5: detected capacity change from 0 to 512 [ 616.277175][ T26] audit: type=1326 audit(1787774848.000:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10942 comm="syz.0.1415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27959e0d9 code=0x0 [ 616.381670][T10941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 616.410787][T10941] ext4 filesystem being mounted at /240/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.204108][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 617.438827][T10963] "syz.7.1420" (10963) uses obsolete ecb(arc4) skcipher [ 618.177915][T10967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.607501][T10996] capability: warning: `syz.6.1424' uses 32-bit capabilities (legacy support in use) [ 620.704453][T10995] "syz.5.1425" (10995) uses obsolete ecb(arc4) skcipher [ 623.308882][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.315846][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.536000][T11025] loop5: detected capacity change from 0 to 512 [ 624.072368][T11021] tc_dump_action: action bad kind [ 624.103552][T11025] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 624.340672][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 624.654003][T11033] "syz.5.1432" (11033) uses obsolete ecb(arc4) skcipher [ 627.910608][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 628.796837][T11061] "syz.4.1440" (11061) uses obsolete ecb(arc4) skcipher [ 632.107309][ T26] audit: type=1326 audit(1787774863.921:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.6.1445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6c299e0d9 code=0x0 [ 633.009319][T11097] loop7: detected capacity change from 0 to 8 [ 633.211010][T11099] loop5: detected capacity change from 0 to 32768 [ 634.225434][T11099] XFS (loop5): Mounting V5 Filesystem [ 634.384893][T11099] XFS (loop5): Ending clean mount [ 634.479796][T11099] XFS (loop5): Quotacheck needed: Please wait. [ 634.544681][T11099] XFS (loop5): Quotacheck: Done. [ 634.856562][ T26] audit: type=1800 audit(1787774866.672:30): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1447" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 635.330285][T11123] tipc: Enabling of bearer rejected, failed to enable media [ 635.353026][T11123] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 635.366151][T11123] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 636.483839][T11125] "syz.4.1444" (11125) uses obsolete ecb(arc4) skcipher [ 638.486109][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1450'. [ 639.375056][ T4917] XFS (loop5): Unmounting Filesystem [ 641.432803][T11176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.547846][ T4902] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 641.648162][T11180] "syz.5.1454" (11180) uses obsolete ecb(arc4) skcipher [ 641.766737][ T4902] usb 8-1: Using ep0 maxpacket: 8 [ 642.615763][ T4902] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 642.646410][ T4902] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.735757][ T4902] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 642.785526][ T4902] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 642.815850][ T4902] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.600538][ T4902] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 643.682166][ T4902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.768214][ T4902] usb 8-1: can't set config #16, error -71 [ 643.819856][ T4902] usb 8-1: USB disconnect, device number 2 [ 644.112596][T11208] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 645.478885][T11214] atomic_op ffff88802f9e7998 conn xmit_atomic 0000000000000000 [ 647.860417][T11231] loop7: detected capacity change from 0 to 512 [ 647.933228][T11231] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 650.793837][T11255] autofs4:pid:11255:autofs_fill_super: called with bogus options [ 652.355029][T11264] "syz.4.1476" (11264) uses obsolete ecb(arc4) skcipher [ 655.414378][ T94] block nbd5: Attempted send on invalid socket [ 655.421839][ T94] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.432442][T11294] FAT-fs (nbd5): unable to read boot sector [ 657.293798][T11310] loop7: detected capacity change from 0 to 1024 [ 657.325801][T11310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 657.363835][T11310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 657.393104][T11310] System zones: 0-1, 3-12 [ 657.428692][T11310] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 658.975939][ T9319] EXT4-fs (loop7): unmounting filesystem. [ 659.939838][T11328] "syz.5.1489" (11328) uses obsolete ecb(arc4) skcipher [ 661.822450][T11348] overlayfs: failed to clone upperpath [ 663.957233][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 663.970483][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 663.981057][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 664.074568][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.085939][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 664.093854][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 664.319823][T11369] virtio-fs: tag not found [ 664.731901][T11379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.009784][T11359] chnl_net:caif_netlink_parms(): no params data found [ 666.184390][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 666.693457][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.772722][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.822842][T11359] device bridge_slave_0 entered promiscuous mode [ 666.832693][T11359] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.863731][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.609615][T11396] "syz.7.1501" (11396) uses obsolete ecb(arc4) skcipher [ 667.890808][T11359] device bridge_slave_1 entered promiscuous mode [ 668.055858][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.122150][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.204807][T11359] team0: Port device team_slave_0 added [ 668.213486][T11359] team0: Port device team_slave_1 added [ 668.807481][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 668.830674][T11359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.856648][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.104104][T11359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.191586][T11413] libceph: resolve ' [ 669.191586][T11413] -&fYǝa2i [ 669.191586][T11413] .?&*&' (ret=-3): failed [ 669.890628][T11359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.915000][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.002335][T11359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.881979][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 671.303399][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1509'. [ 672.104781][ T4284] bond0: (slave syz_tun): Releasing backup interface [ 672.568816][T11455] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1510'. [ 673.132496][T11456] "syz.5.1512" (11456) uses obsolete ecb(arc4) skcipher [ 674.832609][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 675.673398][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.751912][T11471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.779605][T11469] loop7: detected capacity change from 0 to 128 [ 675.858084][T11469] FAT-fs (loop7): Directory bread(block 414) failed [ 675.865857][T11469] FAT-fs (loop7): Directory bread(block 415) failed [ 675.873319][T11469] FAT-fs (loop7): Directory bread(block 416) failed [ 675.880944][T11469] FAT-fs (loop7): Directory bread(block 417) failed [ 675.888448][T11469] FAT-fs (loop7): Directory bread(block 418) failed [ 675.895905][T11469] FAT-fs (loop7): Directory bread(block 419) failed [ 675.903337][T11469] FAT-fs (loop7): Directory bread(block 420) failed [ 675.910837][T11469] FAT-fs (loop7): Directory bread(block 421) failed [ 676.387809][T11359] device hsr_slave_0 entered promiscuous mode [ 676.398513][T11359] device hsr_slave_1 entered promiscuous mode [ 676.595309][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.811431][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.143792][ T4330] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 677.388091][ T4330] usb 1-1: Dual-Role OTG device on HNP port [ 677.491163][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.510785][ T4330] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.01 [ 677.642992][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.676649][ C1] configfs-gadget.g1 gadget.0: Using interface 1 [ 677.735897][ T4330] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input19 [ 677.799415][ T4330] usblp 1-1:1.1: usblp0: USB Bidirectional printer dev 13 if 1 alt 0 proto 2 vid 0x1234 pid 0x5678 [ 678.711032][ T4330] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 680.008425][T11359] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 680.766635][T11359] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 680.823921][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 680.882334][T11359] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 681.011876][T11359] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 681.057433][T11533] tipc: Enabling of bearer rejected, failed to enable media [ 682.277897][T11359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.410123][T11542] loop8: detected capacity change from 0 to 7 [ 682.473691][T11542] Dev loop8: unable to read RDB block 7 [ 682.480393][T11542] loop8: unable to read partition table [ 682.487511][T11542] loop8: partition table beyond EOD, truncated [ 682.494500][T11542] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 682.870838][ T57] tipc: Left network mode [ 682.950923][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 682.960762][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.355636][T11560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.597478][T11555] overlayfs: missing 'lowerdir' [ 684.744921][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.752000][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.807064][T11359] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.827974][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.872178][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.021962][T11567] "syz.7.1530" (11567) uses obsolete ecb(arc4) skcipher [ 685.695475][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.703408][ T5786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.859626][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.908999][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 687.013759][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 687.072036][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.079954][ T5786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.550202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 687.571883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.792463][T11598] overlayfs: failed to resolve './bus': -2 [ 688.066136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 688.098102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 688.171627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 688.217960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 688.263985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 688.327062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 688.366141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 688.468323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 688.505523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 688.536906][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.612590][T11612] loop7: detected capacity change from 0 to 1024 [ 689.730754][ T57] bridge2: port 1(erspan0) entered disabled state [ 689.758987][T11612] EXT4-fs: Ignoring removed bh option [ 690.236134][ T57] device erspan0 left promiscuous mode [ 690.347220][ T57] bridge2: port 1(erspan0) entered disabled state [ 690.387130][T11612] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 690.403986][T11612] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.587761][T11625] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1533: bg 0: block 112: padding at end of block bitmap is not set [ 690.614441][T11625] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 50 with error 28 [ 690.629269][T11625] EXT4-fs (loop7): This should not happen!! Data will be lost [ 690.629269][T11625] [ 690.640330][T11625] EXT4-fs (loop7): Total free blocks count 0 [ 690.647077][T11625] EXT4-fs (loop7): Free/Dirty block details [ 690.653969][T11625] EXT4-fs (loop7): free_blocks=0 [ 690.659722][T11625] EXT4-fs (loop7): dirty_blocks=64 [ 690.665553][T11625] EXT4-fs (loop7): Block reservation details [ 690.672270][T11625] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 692.321302][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.344703][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.402422][T11359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.511779][T11642] "syz.4.1542" (11642) uses obsolete ecb(arc4) skcipher [ 693.196085][ T9319] EXT4-fs (loop7): unmounting filesystem. [ 693.274988][T11650] fuse: Unknown parameter '0xffffffffffffffff' [ 693.284918][T11650] netlink: 'syz.6.1543': attribute type 21 has an invalid length. [ 693.656639][ T26] audit: type=1326 audit(1787774925.445:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.343260][ T26] audit: type=1326 audit(1787774925.445:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.378720][ T26] audit: type=1326 audit(1787774925.445:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.435154][ T26] audit: type=1326 audit(1787774925.445:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.542861][ T26] audit: type=1326 audit(1787774925.445:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.722896][ T26] audit: type=1326 audit(1787774925.445:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.892652][ T26] audit: type=1326 audit(1787774925.445:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 694.933427][ T57] device hsr_slave_0 left promiscuous mode [ 694.957392][ T57] device hsr_slave_1 left promiscuous mode [ 694.965515][T11670] [ 694.968102][T11670] ====================================================== [ 694.975831][T11670] WARNING: possible circular locking dependency detected [ 694.983550][T11670] syzkaller #0 Not tainted [ 694.988386][T11670] ------------------------------------------------------ [ 694.996077][T11670] syz.7.1547/11670 is trying to acquire lock: [ 695.002722][T11670] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 695.015063][T11670] [ 695.015063][T11670] but task is already holding lock: [ 695.023138][T11670] ffff888053241aa0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 695.034595][T11670] [ 695.034595][T11670] which lock already depends on the new lock. [ 695.034595][T11670] [ 695.046107][T11670] [ 695.046107][T11670] the existing dependency chain (in reverse order) is: [ 695.055997][T11670] [ 695.055997][T11670] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 695.065532][T11670] down_write+0x36/0x60 [ 695.070660][T11670] configfs_depend_item_unlocked+0x14f/0x430 [ 695.077795][T11670] usbg_make_tpg+0x1f3/0x580 [ 695.083399][T11670] target_fabric_make_tpg+0xa0/0x6d0 [ 695.089764][T11670] configfs_mkdir+0x511/0x9e0 [ 695.095466][T11670] vfs_mkdir+0x386/0x570 [ 695.100684][T11670] do_mkdirat+0x1d8/0x440 [ 695.106021][T11670] __x64_sys_mkdir+0x6a/0x80 [ 695.111622][T11670] do_syscall_64+0x4c/0xa0 [ 695.117037][T11670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.124071][T11670] [ 695.124071][T11670] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 695.132455][T11670] __mutex_lock+0x12d/0xae0 [ 695.137966][T11670] tcm_set_name+0x26/0x90 [ 695.143282][T11670] function_make+0x195/0x350 [ 695.148881][T11670] configfs_mkdir+0x511/0x9e0 [ 695.154676][T11670] vfs_mkdir+0x386/0x570 [ 695.159898][T11670] do_mkdirat+0x1d8/0x440 [ 695.165215][T11670] __x64_sys_mkdir+0x6a/0x80 [ 695.170818][T11670] do_syscall_64+0x4c/0xa0 [ 695.176230][T11670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.183288][T11670] [ 695.183288][T11670] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 695.192341][T11670] __lock_acquire+0x2d18/0x7c40 [ 695.198234][T11670] lock_acquire+0x1bb/0x4a0 [ 695.203775][T11670] __mutex_lock+0x12d/0xae0 [ 695.209287][T11670] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 695.216613][T11670] configfs_symlink+0x5a4/0x13c0 [ 695.222787][T11670] vfs_symlink+0x245/0x3d0 [ 695.228195][T11670] do_symlinkat+0x1b6/0x400 [ 695.233698][T11670] __x64_sys_symlink+0x7a/0x90 [ 695.239494][T11670] do_syscall_64+0x4c/0xa0 [ 695.244904][T11670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.251940][T11670] [ 695.251940][T11670] other info that might help us debug this: [ 695.251940][T11670] [ 695.263165][T11670] Chain exists of: [ 695.263165][T11670] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 695.263165][T11670] [ 695.279296][T11670] Possible unsafe locking scenario: [ 695.279296][T11670] [ 695.287468][T11670] CPU0 CPU1 [ 695.293345][T11670] ---- ---- [ 695.299221][T11670] lock(&sb->s_type->i_mutex_key#24); [ 695.305215][T11670] lock(&opts->dep_lock); [ 695.312839][T11670] lock(&sb->s_type->i_mutex_key#24); [ 695.321608][T11670] lock(gadget_subsys.su_mutex); [ 695.327126][T11670] [ 695.327126][T11670] *** DEADLOCK *** [ 695.327126][T11670] [ 695.336058][T11670] 2 locks held by syz.7.1547/11670: [ 695.341748][T11670] #0: ffff88801a750460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 695.351879][T11670] #1: ffff888053241aa0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 695.363825][T11670] [ 695.363825][T11670] stack backtrace: [ 695.370297][T11670] CPU: 0 PID: 11670 Comm: syz.7.1547 Not tainted syzkaller #0 [ 695.378486][T11670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.389540][T11670] Call Trace: [ 695.393132][T11670] [ 695.396336][T11670] dump_stack_lvl+0x188/0x24e [ 695.401469][T11670] ? load_image+0x410/0x410 [ 695.406401][T11670] ? show_regs_print_info+0x12/0x12 [ 695.412102][T11670] ? print_circular_bug+0x12b/0x1a0 [ 695.417804][T11670] check_noncircular+0x296/0x330 [ 695.423222][T11670] ? add_chain_block+0x9b0/0x9b0 [ 695.428644][T11670] ? lockdep_lock+0xf1/0x1f0 [ 695.433676][T11670] ? _find_first_zero_bit+0xd2/0x100 [ 695.439474][T11670] __lock_acquire+0x2d18/0x7c40 [ 695.444793][T11670] ? __kernel_text_address+0x9/0x30 [ 695.450493][T11670] ? stack_trace_save+0xf0/0xf0 [ 695.455827][T11670] ? verify_lock_unused+0x140/0x140 [ 695.461527][T11670] ? mark_lock+0x94/0x320 [ 695.466270][T11670] ? __lock_acquire+0x1465/0x7c40 [ 695.471781][T11670] lock_acquire+0x1bb/0x4a0 [ 695.476714][T11670] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 695.483662][T11670] ? __might_sleep+0xd0/0xd0 [ 695.488689][T11670] ? read_lock_is_recursive+0x10/0x10 [ 695.494583][T11670] ? mark_lock+0x94/0x320 [ 695.499328][T11670] __mutex_lock+0x12d/0xae0 [ 695.504265][T11670] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 695.511211][T11670] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 695.518159][T11670] ? mutex_lock_nested+0x10/0x10 [ 695.523574][T11670] ? rwsem_write_trylock+0x135/0x1c0 [ 695.529370][T11670] ? clear_nonspinnable+0x60/0x60 [ 695.534899][T11670] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 695.541655][T11670] ? inode_permission+0xef/0x480 [ 695.547063][T11670] ? bpf_lsm_inode_permission+0x5/0x10 [ 695.553060][T11670] ? security_inode_permission+0xac/0xf0 [ 695.559249][T11670] configfs_symlink+0x5a4/0x13c0 [ 695.564669][T11670] ? end_current_label_crit_section+0x14b/0x170 [ 695.571527][T11670] ? common_perm+0x15d/0x1b0 [ 695.576565][T11670] ? from_kgid+0x14f/0x6a0 [ 695.581406][T11670] ? make_kgid+0x650/0x650 [ 695.586243][T11670] ? apparmor_path_symlink+0x1ac/0x230 [ 695.592241][T11670] ? lookup_one_qstr_excl+0x11c/0x240 [ 695.598129][T11670] ? detach_groups+0x370/0x370 [ 695.603374][T11670] ? inode_permission+0xef/0x480 [ 695.608781][T11670] ? bpf_lsm_inode_symlink+0x5/0x10 [ 695.614483][T11670] ? security_inode_symlink+0xb2/0x100 [ 695.620466][T11670] vfs_symlink+0x245/0x3d0 [ 695.625305][T11670] do_symlinkat+0x1b6/0x400 [ 695.630243][T11670] ? vfs_symlink+0x3d0/0x3d0 [ 695.635274][T11670] ? getname_flags+0x206/0x500 [ 695.640492][T11670] __x64_sys_symlink+0x7a/0x90 [ 695.645731][T11670] do_syscall_64+0x4c/0xa0 [ 695.650573][T11670] ? clear_bhb_loop+0x60/0xb0 [ 695.655697][T11670] ? clear_bhb_loop+0x60/0xb0 [ 695.660828][T11670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.667301][T11670] RIP: 0033:0x7fce23f9e0d9 [ 695.672146][T11670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.693691][T11670] RSP: 002b:00007fce24da5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 695.702926][T11670] RAX: ffffffffffffffda RBX: 00007fce24225fa0 RCX: 00007fce23f9e0d9 [ 695.711675][T11670] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000200000000800 [ 695.720432][T11670] RBP: 00007fce24035024 R08: 0000000000000000 R09: 0000000000000000 [ 695.729177][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.737926][T11670] R13: 00007fce24226038 R14: 00007fce24225fa0 R15: 00007ffcce1df1c8 [ 695.746681][T11670] [ 695.794046][ T26] audit: type=1326 audit(1787774925.445:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 695.839124][ T57] device bond_slave_0 left promiscuous mode [ 695.845682][ T57] device bond_slave_1 left promiscuous mode [ 695.850750][ T26] audit: type=1326 audit(1787774925.445:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 695.898812][ T57] device veth1_macvtap left promiscuous mode [ 695.922125][ T26] audit: type=1326 audit(1787774925.445:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.7.1545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f9e0d9 code=0x7ffc0000 [ 695.922433][ T57] device veth0_macvtap left promiscuous mode [ 696.063643][ T57] device veth1_vlan left promiscuous mode [ 696.107813][ T57] device veth0_vlan left promiscuous mode [ 696.269725][T11685] loop5: detected capacity change from 0 to 64 [ 696.279623][T11685] hfs: unable to parse mount options [ 696.565306][ T57] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 696.627756][ T57] bond2 (unregistering): Released all slaves [ 696.637214][ T57] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 696.646919][ T57] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 696.866811][ T57] bond1 (unregistering): Released all slaves [ 697.008737][ T57] team0 (unregistering): Port device team_slave_1 removed [ 697.020054][ T57] team0 (unregistering): Port device team_slave_0 removed [ 697.050176][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.082539][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.195529][ T57] bond0 (unregistering): Released all slaves [ 697.362131][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 697.371762][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.395443][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 697.404834][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 697.416135][T11359] device veth0_vlan entered promiscuous mode [ 697.435977][T11359] device veth1_vlan entered promiscuous mode [ 697.448454][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 697.459078][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 697.468624][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 697.477595][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 697.496789][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 697.506626][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 697.520463][T11359] device veth0_macvtap entered promiscuous mode [ 697.531146][T11359] device veth1_macvtap entered promiscuous mode [ 697.550815][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.566325][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.577244][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.591446][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.624645][T11359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.635292][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.647223][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.658917][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.670594][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.684907][T11359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.694183][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 697.705379][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 697.715359][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 697.726373][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 697.736965][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 697.746799][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 697.760482][T11359] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.771314][T11359] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.781351][T11359] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.792307][T11359] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.835704][T11359] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 697.856891][ T5786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.870217][T11359] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 697.880144][ T5786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.890997][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 697.909940][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.920667][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.929127][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready