last executing test programs: 27m31.46458006s ago: executing program 32 (id=193): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000140), &(0x7f0000000340)=0xe, 0x80800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) 23m1.392434674s ago: executing program 33 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getgid() write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x232) sendmsg$inet(0xffffffffffffffff, 0x0, 0x106) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x5c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/123, 0x7b, 0x2e, 0x0, 0x5, 0x5, 0x3}}, 0x120) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21m41.430621907s ago: executing program 34 (id=1437): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000200)=ANY=[], 0xffffff6a) 20m6.904504397s ago: executing program 35 (id=1773): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x9b383f7e246c17a5, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x149181, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m44.795403515s ago: executing program 36 (id=1831): socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x10001) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) acct(&(0x7f0000000140)='./file0/file2\x00') 19m2.52814612s ago: executing program 37 (id=1906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 17m0.746779808s ago: executing program 38 (id=2160): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x1}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) r3 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 15m59.416136001s ago: executing program 39 (id=2270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0xfff5, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0x1}}}, 0x24}}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {0x0, 0x1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) futex(0x0, 0x4, 0x80000000, 0x0, 0x0, 0x2) r9 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="b873375e38bd", 0x34000}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000580)="d1", 0x1}], 0x1}}], 0x2, 0x40) 15m41.780105408s ago: executing program 40 (id=2303): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1, 0x400000000000000}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r4 = dup2(r3, r0) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 12m0.109146575s ago: executing program 41 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6m49.068236994s ago: executing program 2 (id=3214): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 6m48.734916604s ago: executing program 2 (id=3215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000800060006"], 0xfce) 6m48.066023832s ago: executing program 2 (id=3219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x1004}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6m47.158206843s ago: executing program 2 (id=3221): getpgid(0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) getdents(r0, &(0x7f0000001900)=""/76, 0x20000) 6m45.540774876s ago: executing program 2 (id=3223): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000dc0)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000018c0)=""/120, 0x78}], 0x2) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="b49f7b3f010080cea4915a4f429f0968", 0x10}], 0x1, 0x0, 0x0, 0x20004084}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001080)="396bbf5d47675ca6ca5bbc42fb2e0f216f2e9d3ebe9790318ef11039f76ba9701b8675a6157405345e40891039e95e8ba3311824888d6d6589d6ef12bf9a81056c978773698dbdc9a62d0ebd3cb850170d3b4c09514bd664a60d36f5c374d4b7d311423684dbba9be2a78c034369c9b8281e3ee2146317242f0ba96f373ca146c8", 0x81}], 0x1, &(0x7f0000001280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000000}], 0x1, 0x800) 6m44.411803361s ago: executing program 2 (id=3229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x38, 0x14, 0x67, 0x0, 0x2, 0x5e, 0x0, @private=0xa010101, @rand_addr=0x64010101}}}}}, 0x0) 6m43.572571271s ago: executing program 42 (id=3229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x38, 0x14, 0x67, 0x0, 0x2, 0x5e, 0x0, @private=0xa010101, @rand_addr=0x64010101}}}}}, 0x0) 6m9.871514212s ago: executing program 6 (id=3347): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40080b4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0xfffffffffffffe07) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents(r3, &(0x7f00000001c0)=""/255, 0xff) syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 6m7.724119129s ago: executing program 6 (id=3351): fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 6m6.225127225s ago: executing program 6 (id=3355): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$eJzs28uu0lAUxvFv94KINxQviXHgkIkUMEFNHOijEKiEWJSIE4iJ+h4OdObDSYwzR2LoBaUSRbS7OYf/b3L26tq302TDSgEBOFqPdFtGRpV1cKtaf90wZW8JgCWr9O+3FYDj4379m96muI0AsGz5WJpK+vTl1UBuJSsLbmSNdd7P8tVf64flW+mml+ZNVWfz9cUHPVwmzYFMbef4Wja/Obcz31Q9yTvndUEXdUl1XdYVNdL8MBkvmev/UAkBAHA8jFr5eOuCoyfjKGxvYj+OO6p5SgqDtWZ3k6/E+bub+EwctwbPo2Fx/wSAgzhqffw5zp9/N3f+vfT8Azj5ZvPF034UhS8sNZLnA05xq6+2r3j/b2a9sXmj/tAwSj6nPXC4LytbzZ4n/abP570mfF/aDfetL+qp2CVc7dW5pBckANYELyfTYDZf3BlP+qNwFD7rdXu9B+379zpBXPgH2+U/gFPkx5t+2TsBAAAAAAAAAAAAAACHuqprZW8BAAAAgCUF/kBNeie+WQwAAAAAAAAAAAAAAAAAQAG+BwAA//8UAww+") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40080b4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0xfffffffffffffe07) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents(r3, &(0x7f00000001c0)=""/255, 0xff) syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 6m5.118812908s ago: executing program 6 (id=3360): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@rodir}, {@utf8}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@fat=@flush}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 6m4.466334515s ago: executing program 6 (id=3366): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000040)={0xfa, &(0x7f0000000000)=[{}]}) 6m2.414537601s ago: executing program 6 (id=3372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1022802, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) unshare(0x4000000) getxattr(0x0, 0x0, 0x0, 0x0) 5m58.987041295s ago: executing program 43 (id=3372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1022802, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) unshare(0x4000000) getxattr(0x0, 0x0, 0x0, 0x0) 5m40.780308815s ago: executing program 3 (id=3415): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x3, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000a00)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000380)="06497c803872fa4674b8b246d8a47b1c3ad26e707fe06047e134cd091f5578900ed12e9d66a18fbb15da63783a4229231c7519308a1ffba50da612640632c1802f0e5f2f81281ea9", 0x48, 0x6fe9}]) 5m39.703660311s ago: executing program 3 (id=3418): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xd, 0x412002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000080)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x6c0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000003d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000001a80)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'cp862'}}]}, 0x43, 0x708, &(0x7f0000000c00)="$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") r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 5m38.410018834s ago: executing program 3 (id=3419): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$hidraw(r2, 0x0, 0x0) 5m38.181496717s ago: executing program 0 (id=3422): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000002c0)) 5m37.566103126s ago: executing program 3 (id=3425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x1, {0x0, 0x1, 0x1}, {0x2, 0xf0}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x4}, {0x2, 0x1}, 0xfe, 0x1}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5m37.349800439s ago: executing program 0 (id=3426): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000006c0)=""/233, 0xe9}], 0x1}, 0x5}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 5m36.52941981s ago: executing program 3 (id=3428): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) 5m34.632287193s ago: executing program 0 (id=3434): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x895, &(0x7f0000000200)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5m33.213864324s ago: executing program 0 (id=3437): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x30) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 5m31.970874191s ago: executing program 0 (id=3440): socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 5m30.989875235s ago: executing program 3 (id=3443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 5m30.47249051s ago: executing program 0 (id=3445): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 5m14.599008636s ago: executing program 44 (id=3443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 5m14.10020989s ago: executing program 45 (id=3445): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 4m12.754202513s ago: executing program 9 (id=3640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) 4m11.382075215s ago: executing program 9 (id=3643): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xd, 0x412002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000080)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x6c0}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000003d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000001a80)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'cp862'}}]}, 0x43, 0x708, &(0x7f0000000c00)="$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") r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 4m9.187869541s ago: executing program 9 (id=3647): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40080b4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0xfffffffffffffe07) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents(r3, &(0x7f00000001c0)=""/255, 0xff) syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 4m5.712529681s ago: executing program 9 (id=3654): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 4m3.375689024s ago: executing program 8 (id=3662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f6164205f235a66756c742074727573747175656e636572320020303030edb11a5f324d30303030"], 0x43, r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x804) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 4m1.856390464s ago: executing program 9 (id=3666): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40080b4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0xfffffffffffffe07) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents(r3, &(0x7f00000001c0)=""/255, 0xff) syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 3m59.125695381s ago: executing program 9 (id=3673): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x8, 0x5, 0x7fffffff}]}) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r1, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x4000) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") 3m59.066294212s ago: executing program 8 (id=3674): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xd, 0x412002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000080)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x6c0}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000003d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000001a80)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'cp862'}}]}, 0x43, 0x708, &(0x7f0000000c00)="$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") r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 3m57.05015203s ago: executing program 46 (id=3673): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x8, 0x5, 0x7fffffff}]}) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r1, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x4000) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") 3m56.197338109s ago: executing program 8 (id=3680): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 3m54.063844136s ago: executing program 8 (id=3685): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaee2, 0x1000, 0xffffffff, 0x9fdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) 3m50.523867905s ago: executing program 8 (id=3691): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 3m48.632724371s ago: executing program 8 (id=3695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x401, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070b924, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4000003}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3m31.424894489s ago: executing program 47 (id=3695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x401, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070b924, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4000003}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m23.456674114s ago: executing program 4 (id=3857): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x9c}}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {0x0}], 0x2) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") 2m20.853530548s ago: executing program 4 (id=3859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, 'P'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_emit_vhci(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") 2m17.4099828s ago: executing program 4 (id=3862): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000391000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000628000480240001800b000100657874686472000014000280080006400000008108000340000000ae0900010073797a30000000000900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x8, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2000100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x5, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x6]}) 2m14.690060475s ago: executing program 4 (id=3868): r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60}) r1 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x800, 0xfffffffe, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r5, 0xffffffffffffffff}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r10, 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r11}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.49851091s ago: executing program 4 (id=3873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2m8.969019987s ago: executing program 4 (id=3874): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1m52.866830488s ago: executing program 48 (id=3874): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 11.912832966s ago: executing program 7 (id=4047): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) 7.77401364s ago: executing program 1 (id=4053): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000005c0)={0x3, 0xf9e, {0x54, 0x6, 0x4091, {0xb}, {0x8, 0x3}, @period={0x5c, 0x2, 0x7fff, 0x4, 0x8, {0xa52, 0x8000, 0x3, 0xb0e}, 0x3, &(0x7f0000000540)=[0xf001, 0x9ce, 0x1000]}}, {0x53, 0x4, 0x8, {0x0, 0x81}, {0x7, 0xb6}, @period={0x5a, 0x800, 0x8, 0x101, 0x2, {0x2bc, 0x7, 0x8001, 0x1}, 0x0, 0x0}}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="96a6e813e9dc2622cc2a8d67dc473099f9e31ecd937492e682a3832ceaf89f02a9a22aa861f348edd0c01e89c9c5dae58a0b6681fc912d9ff1cefadc4414bf9d6d52111f61116ba0fda15e5b0f088958b87ee29fcaa4c69b"], 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) close(0xffffffffffffffff) listen(r0, 0x404) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, 0x0, 0x0) 7.566968522s ago: executing program 1 (id=4054): fanotify_init(0x10, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace$setregset(0x4205, r0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) connect$can_bcm(r4, &(0x7f0000001cc0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) close(0x3) 7.192678923s ago: executing program 7 (id=4056): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x0, &(0x7f0000000000)={0x249, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) syz_emit_ethernet(0x1f0, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1ba, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x7f, 0x0, [{}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd46"}, {0x0, 0x1b, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670"}, {0x21}, {}]}}}}}}, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 6.062087701s ago: executing program 1 (id=4057): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x4000006, 0x1, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0x3, 0x7fff, 0x8, 0x1, 0x8, 0x40000002, 0x6, 0x809, 0x1, 0x9, 0x5, 0x40000003, 0x89, 0x10d, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10000, 0xfffffff4]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0xff03, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 5.375372502s ago: executing program 1 (id=4059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000006c0)={0x14, 0x0, 0x0}, &(0x7f0000001840)={0x44, &(0x7f0000000700)={0x20, 0xe}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001700)={0x20, 0x81, 0x1, "de"}, &(0x7f0000001740)={0x20, 0x82, 0x3, "48c4d9"}, 0x0, &(0x7f00000017c0)={0x20, 0x84, 0x2, "c0b8"}, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x7, 0x8, 0x8, 0x9, 0xfffffff7, 0x7, 0x7e1, 0x7}}) 5.096430668s ago: executing program 7 (id=4060): r0 = syz_open_dev$mouse(0x0, 0x0, 0x2) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={@remote, @remote, @empty, 0x4, 0x40, 0x81, 0x100, 0x800, 0x90003f, r8}) 3.877891714s ago: executing program 7 (id=4061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x176) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x41, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d1"}]}, 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) fsync(0xffffffffffffffff) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x6) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) 3.787050935s ago: executing program 5 (id=4062): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x80) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x793, &(0x7f0000001040)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0xd, 0x0, 0x80c5}, 0x20000000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5) read$FUSE(r5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0x7, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x9, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0xc2, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x4, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x9, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x5, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x5, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x5, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 3.709170424s ago: executing program 1 (id=4063): socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0xa8301, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x23a, &(0x7f00000002c0)={0x0, 0x59ef, 0x10100, 0x2, 0x2ce}, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x4005eda, 0x10100, 0x7ffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x18, 0x0, @fd, 0x4, 0x0, 0x9, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0xa, 0x4000, @fd_index, 0x8, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.875741215s ago: executing program 5 (id=4064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x7, 0x40, 0x68, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x1ff, 0x0, 0x3, 0x7, 0x1, 0x1, 0x9, 0x3ff, 0x2, 0x4e23, 0x4e22}, 0x4, 0x1}, 0x2, 0x1}, 0x3}}}}}}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x124) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_complete(0x0) 2.73662588s ago: executing program 7 (id=4065): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042", 0x2e, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x3, @remote, 0xfff}}}, &(0x7f0000000040)=0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x7, 0x7, 0x6, 0x3447504d, [0x8000, 0x8], [0x3, 0x1], 0x13a}}) 2.559685862s ago: executing program 5 (id=4066): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4c000) 2.035634061s ago: executing program 1 (id=4067): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@mb_optimize_scan}, {@block_validity}, {@journal_checksum}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@dioread_nolock}, {@nodioread_nolock}]}, 0x1, 0x478, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) r1 = io_uring_setup(0x1414, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) getdents(r0, &(0x7f0000000780)=""/210, 0xd2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, 0x0, r5, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0xe6, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000001c0)={r6}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1.816088264s ago: executing program 5 (id=4068): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r7 = dup2(r6, r6) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) syz_fuse_handle_req(r7, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r7, &(0x7f0000000180)=""/171, 0xab) truncate(&(0x7f0000000940)='./file1\x00', 0x101) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000) creat(&(0x7f00000000c0)='./file1/file0\x00', 0xa0) 1.769995837s ago: executing program 7 (id=4069): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0x4000}, 0xc) getpeername$qrtr(r0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101a40, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x240282, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) pselect6(0x40, &(0x7f0000000040)={0x300, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030b000000ff0e000000000000010009000000000003000600002000000200000000000000000000000000000002"], 0x58}, 0x1, 0x7}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") socket(0x840000000002, 0x3, 0xff) 628.1301ms ago: executing program 5 (id=4070): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x2e, 0x1, @thr={0x0, &(0x7f0000001640)}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0xa, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = getpgid(r2) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, 0x0) r6 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) readlinkat(r6, 0x0, &(0x7f0000000140)=""/189, 0xbd) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x7ffe}}, 0x48) writev(r1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0x10, 0xffffffff) 0s ago: executing program 5 (id=4071): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000"], 0x122}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="db84fd4c4ce9627c6278392c6c0000000008010300000000000000000500000306000240891400000500030021000000340004800800014000000004080001400000000708000140fffffff6080001400000004f080001ad6c31e161a6681ee75744c6d9400000000008000140000000090900010073797a310000000005000300"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) kernel console output (not intermixed with test programs): rror: unable to find root dir [ 1423.479579][ T6038] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1423.579479][ T6038] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1423.649908][T20573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1423.685729][T17983] Bluetooth: hci6: command 0x0406 tx timeout [ 1423.709371][ T6038] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1423.749422][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.770851][T20575] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1423.785421][ T6038] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1424.135960][T20575] loop0: detected capacity change from 0 to 512 [ 1424.310459][T20575] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3342: inode has both inline data and extents flags [ 1424.433439][ T6038] usb 4-1: USB disconnect, device number 33 [ 1424.456668][T20575] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1424.463989][T20575] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3342: couldn't read orphan inode 15 (err -117) [ 1424.473303][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1424.473333][ C0] EXT4-fs (loop0): initial error at time 1774320830: ext4_orphan_get:1391: inode 15 [ 1424.473374][ C0] EXT4-fs (loop0): last error at time 1774320830: ext4_orphan_get:1391: inode 15 [ 1424.559834][T20590] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 1424.639324][T20575] loop0: lost filesystem error report for type 5 error -117 [ 1424.753329][T20575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.841354][T20597] loop6: detected capacity change from 0 to 64 [ 1424.981081][T20590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1425.112913][ T5906] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1425.612054][T20601] loop5: detected capacity change from 0 to 64 [ 1425.657514][T18561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.667808][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1425.703415][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1425.713061][T18195] usb 1-1: USB disconnect, device number 60 [ 1425.790586][ T5906] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1426.321742][ T5906] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1426.423690][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1426.499293][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.507355][ T5906] usb 5-1: Product: syz [ 1426.561292][ T5906] usb 5-1: Manufacturer: syz [ 1426.596799][T12934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.615104][ T5906] usb 5-1: SerialNumber: syz [ 1426.938269][ T5906] smsusb:smsusb_probe: board id=8, interface number 0 [ 1426.988324][ T5906] smsusb:smsusb_probe: Device initialized with return code -19 [ 1427.037420][T20622] loop5: detected capacity change from 0 to 64 [ 1427.756592][T20632] loop0: detected capacity change from 0 to 1024 [ 1428.114372][T20626] hfsplus: bad catalog entry type [ 1428.446405][ T33] hfsplus: b-tree write err: -5, ino 25 [ 1428.476445][T20638] loop6: detected capacity change from 0 to 64 [ 1428.577543][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1428.635089][ T5906] usb 5-1: USB disconnect, device number 29 [ 1428.650764][ T33] hfsplus: b-tree write err: -5, ino 2 [ 1429.309380][T20642] loop3: detected capacity change from 0 to 4096 [ 1429.370725][T20651] loop6: detected capacity change from 0 to 128 [ 1429.446896][T20651] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 1429.550712][T20657] loop5: detected capacity change from 0 to 64 [ 1429.626737][T20642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1429.681390][T20655] loop4: detected capacity change from 0 to 2048 [ 1430.343296][T20661] loop0: detected capacity change from 0 to 64 [ 1431.074524][ T30] audit: type=1326 audit(1774320837.140:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.3363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab779c799 code=0x0 [ 1431.569373][T20681] loop5: detected capacity change from 0 to 256 [ 1431.607404][T20683] loop3: detected capacity change from 0 to 256 [ 1431.807224][T20681] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0c598ef, utbl_chksum : 0xe619d30d) [ 1431.846914][T20683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0xe2a79b0f, utbl_chksum : 0xe619d30d) [ 1432.922357][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 1432.922547][T20695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.950306][T20696] loop0: detected capacity change from 0 to 1024 [ 1432.970479][ T5838] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1433.201879][T20696] hfsplus: bad catalog entry type [ 1433.221051][T20695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.744483][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1433.750251][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1433.925398][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1434.077317][T20701] loop5: detected capacity change from 0 to 64 [ 1434.740397][ T6038] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1434.995155][ T6038] usb 1-1: Using ep0 maxpacket: 16 [ 1435.027337][ T6038] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1435.035436][ T6038] usb 1-1: config 0 has no interface number 0 [ 1435.087207][ T6038] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1435.113474][ T6038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.121543][ T6038] usb 1-1: Product: syz [ 1435.174932][ T6038] usb 1-1: Manufacturer: syz [ 1435.186353][ T6038] usb 1-1: SerialNumber: syz [ 1435.212690][ T6038] usb 1-1: config 0 descriptor?? [ 1435.237585][ T6038] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1435.804016][T17983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1435.818718][T17983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1435.832028][T17983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1435.859697][T17983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1435.872772][T17983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1436.041547][T20722] lo speed is unknown, defaulting to 1000 [ 1436.998003][T20717] loop4: detected capacity change from 0 to 4096 [ 1437.092881][ T6038] gspca_spca1528: reg_r err -71 [ 1437.102992][ T6038] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1437.161157][ T6038] usb 1-1: USB disconnect, device number 61 [ 1437.656394][T20722] chnl_net:caif_netlink_parms(): no params data found [ 1438.544077][T20717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1438.554379][T17983] Bluetooth: hci1: command tx timeout [ 1438.648274][T20734] loop3: detected capacity change from 0 to 64 [ 1440.729719][T20769] overlayfs: failed to clone lowerpath [ 1440.787952][ T5838] Bluetooth: hci1: command tx timeout [ 1441.060042][T20722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.349122][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3388'. [ 1441.742127][T20722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.814875][T20722] bridge_slave_0: entered allmulticast mode [ 1441.864016][T20722] bridge_slave_0: entered promiscuous mode [ 1441.952671][T20722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.085537][T20788] loop3: detected capacity change from 0 to 64 [ 1442.173533][T20722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.230478][T20722] bridge_slave_1: entered allmulticast mode [ 1442.383572][T20722] bridge_slave_1: entered promiscuous mode [ 1443.138122][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1443.144993][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1443.154736][ T5838] Bluetooth: hci1: command tx timeout [ 1444.115699][T20722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.419179][T20722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.159065][T20811] loop5: detected capacity change from 0 to 1024 [ 1445.297571][T20810] hfsplus: bad catalog entry type [ 1445.318643][ T5838] Bluetooth: hci1: command tx timeout [ 1445.600991][T20722] team0: Port device team_slave_0 added [ 1446.130838][T20823] loop0: detected capacity change from 0 to 1024 [ 1446.244858][T20823] hfsplus: bad catalog entry type [ 1446.341802][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1446.396189][T20722] team0: Port device team_slave_1 added [ 1446.461712][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1446.536697][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1446.556648][T20826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1446.629197][ T87] hfsplus: b-tree write err: -5, ino 25 [ 1446.684366][ T87] hfsplus: b-tree write err: -5, ino 4 [ 1446.729304][ T87] hfsplus: b-tree write err: -5, ino 2 [ 1446.963704][T20722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.993049][T20722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.170221][T20722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.195961][T20841] loop0: detected capacity change from 0 to 64 [ 1447.271651][T20722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.286788][T20844] loop5: detected capacity change from 0 to 64 [ 1447.316837][T20722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.011313][T20722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.924560][T20722] hsr_slave_0: entered promiscuous mode [ 1449.006570][T20722] hsr_slave_1: entered promiscuous mode [ 1449.262333][T20722] debugfs: 'hsr0' already exists in 'hsr' [ 1449.462629][T20859] loop3: detected capacity change from 0 to 1024 [ 1449.978840][T20722] Cannot create hsr debugfs directory [ 1449.991584][T20858] hfsplus: bad catalog entry type [ 1450.219055][ T77] hfsplus: b-tree write err: -5, ino 25 [ 1450.252958][ T77] hfsplus: b-tree write err: -5, ino 4 [ 1450.296884][ T77] hfsplus: b-tree write err: -5, ino 2 [ 1452.019645][T17977] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1452.509312][T17977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1452.571973][T17977] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1452.595626][T17977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1452.685956][T17977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.732920][T20873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1452.797219][T17977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1452.913732][T20885] netlink: 'syz.3.3411': attribute type 10 has an invalid length. [ 1453.106203][T20873] loop4: detected capacity change from 0 to 512 [ 1453.195065][T20885] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1453.480407][T20873] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3408: inode has both inline data and extents flags [ 1453.677494][T20898] loop5: detected capacity change from 0 to 1024 [ 1453.862307][T20898] hfsplus: bad catalog entry type [ 1454.209980][T20873] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1454.219075][T20893] loop0: detected capacity change from 0 to 4096 [ 1454.228418][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1454.228450][ C1] EXT4-fs (loop4): initial error at time 1774320858: ext4_orphan_get:1391: inode 15 [ 1454.228493][ C1] EXT4-fs (loop4): last error at time 1774320858: ext4_orphan_get:1391: inode 15 [ 1454.263457][T20873] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3408: couldn't read orphan inode 15 (err -117) [ 1454.286952][ T6822] hfsplus: b-tree write err: -5, ino 25 [ 1454.293035][ T6822] hfsplus: b-tree write err: -5, ino 4 [ 1454.305899][T20873] loop4: lost filesystem error report for type 5 error -117 [ 1454.308630][T20873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.312147][ T6822] hfsplus: b-tree write err: -5, ino 2 [ 1454.371195][T20890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1454.447156][T20893] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1454.765475][T20893] ntfs3(loop0): ino=19, mi_enum_attr [ 1454.771287][T20893] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1455.148313][T20915] loop3: detected capacity change from 0 to 1024 [ 1455.346177][T20915] hfsplus: bad catalog entry type [ 1455.696481][ T5906] usb 5-1: USB disconnect, device number 30 [ 1455.954180][ T996] hfsplus: b-tree write err: -5, ino 25 [ 1455.961156][ T996] hfsplus: b-tree write err: -5, ino 4 [ 1456.018875][ T996] hfsplus: b-tree write err: -5, ino 2 [ 1456.216666][T20919] loop5: detected capacity change from 0 to 64 [ 1456.225130][T18699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.791596][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1456.976931][ T1340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.057886][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a195c00: rx timeout, send abort [ 1457.069408][T20934] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1457.795103][ T1340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.092504][ T1340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.229639][ T5899] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1458.583349][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 1458.606202][ T5899] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.778179][T20969] loop4: detected capacity change from 0 to 1024 [ 1458.821641][ T5899] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1458.990762][T20969] hfsplus: bad catalog entry type [ 1459.361187][ T5899] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1459.375032][ T5899] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1459.389947][ T33] hfsplus: b-tree write err: -5, ino 25 [ 1459.402285][ T5899] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1459.430350][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.437362][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1459.444115][ T33] hfsplus: b-tree write err: -5, ino 2 [ 1459.457114][ T5899] usb 4-1: Product: syz [ 1459.489008][ T5899] usb 4-1: Manufacturer: syz [ 1459.545372][ T5899] usb 4-1: SerialNumber: syz [ 1459.610300][ T1340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.681829][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1459.861391][ T5899] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input48 [ 1460.273054][ T5899] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1460.357562][ T5899] (id 0x00) [ 1460.982124][T20985] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1461.427766][ T5899] rc_core: IR keymap rc-imon-pad not found [ 1461.578125][ T5899] Registered IR keymap rc-empty [ 1461.583125][ T5899] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1461.695697][ T5899] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1461.820283][ T1340] bridge_slave_1: left allmulticast mode [ 1461.826075][ T1340] bridge_slave_1: left promiscuous mode [ 1461.872961][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.976552][ T1340] bridge_slave_0: left allmulticast mode [ 1462.011959][ T1340] bridge_slave_0: left promiscuous mode [ 1462.052700][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.108994][ T5899] imon:send_packet: packet tx failed (-71) [ 1463.134119][ T5899] imon 4-1:155.0: remote input dev register failed [ 1463.163974][ T5899] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 1463.312860][ T5899] imon 4-1:155.0: unable to initialize intf0, err 0 [ 1463.343453][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.381692][ T5899] imon:imon_probe: failed to initialize context! [ 1463.406357][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.442494][ T5899] imon 4-1:155.0: unable to register, err -19 [ 1463.462416][ T1340] bond0 (unregistering): Released all slaves [ 1463.510199][T20722] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1463.538854][ T5899] usb 4-1: USB disconnect, device number 34 [ 1463.611841][T20722] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1463.698405][T20722] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1463.844611][T20722] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1465.995218][T21023] loop5: detected capacity change from 0 to 32768 [ 1466.043402][T21023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3446 (21023) [ 1466.179073][T21023] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1466.209169][T21023] BTRFS info (device loop5): using crc32c checksum algorithm [ 1466.461138][T21023] BTRFS info (device loop5): enabling ssd optimizations [ 1466.477261][T21023] BTRFS info (device loop5): turning on async discard [ 1466.532409][T21023] BTRFS info (device loop5): enabling free space tree [ 1467.277162][T18525] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1467.614454][T21085] loop4: detected capacity change from 0 to 128 [ 1467.664651][T21085] msdos: Unknown parameter '˙˙˙˙˙˙' [ 1469.400677][T21085] loop4: detected capacity change from 0 to 32768 [ 1471.581193][T21116] loop4: detected capacity change from 0 to 1024 [ 1471.761942][T21116] hfsplus: bad catalog entry type [ 1472.209549][ T33] hfsplus: b-tree write err: -5, ino 25 [ 1472.216382][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1472.260963][ T33] hfsplus: b-tree write err: -5, ino 2 [ 1473.816884][T21127] loop5: detected capacity change from 0 to 64 [ 1475.276126][T21146] binder_alloc: 21145: binder_alloc_buf size -416 failed, no address space [ 1475.285357][T21146] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1475.519204][T21148] loop5: detected capacity change from 0 to 4096 [ 1475.997378][T21152] netlink: 'syz.5.3464': attribute type 1 has an invalid length. [ 1476.461039][T17977] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1476.677276][T17977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1476.715793][T17977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1476.745422][T17977] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1476.759530][T17977] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1476.812275][T17977] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1476.837584][T17977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.850757][T17977] usb 6-1: Product: syz [ 1476.854978][T17977] usb 6-1: Manufacturer: syz [ 1476.893442][T17977] usb 6-1: SerialNumber: syz [ 1479.882591][T17983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1479.898502][T17983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1479.915376][T17983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1479.938862][T17983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1479.962359][T17983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1480.086571][T21020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.094092][T21020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.398788][T21020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.497856][T17983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1480.546139][T17983] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1480.580743][T17983] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1480.595461][T17983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1480.604236][T17983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1480.769185][T21152] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1481.081096][T17977] smsusb:smsusb_probe: board id=8, interface number 0 [ 1481.140208][T17977] smsusb:smsusb_probe: Device initialized with return code -19 [ 1481.261883][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.313105][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.372937][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.420917][T17977] usb 6-1: USB disconnect, device number 29 [ 1481.670226][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.773833][T21161] lo speed is unknown, defaulting to 1000 [ 1482.010554][T21168] loop4: detected capacity change from 0 to 32768 [ 1482.036828][T21168] JBD2: Ignoring recovery information on journal [ 1482.102882][T21168] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1482.161620][ T5838] Bluetooth: hci4: command tx timeout [ 1482.182489][T21156] lo speed is unknown, defaulting to 1000 [ 1482.367179][ T1340] hsr_slave_0: left promiscuous mode [ 1482.367317][ T30] audit: type=1800 audit(1774320885.121:736): pid=21168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3468" name="file1" dev="loop4" ino=17060 res=0 errno=0 [ 1482.417940][ T1340] hsr_slave_1: left promiscuous mode [ 1482.447687][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.483425][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.546345][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.589644][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.656585][ T1340] veth1_macvtap: left promiscuous mode [ 1482.675903][ T1340] veth0_macvtap: left promiscuous mode [ 1482.708447][ T1340] veth1_vlan: left promiscuous mode [ 1482.736375][ T1340] veth0_vlan: left promiscuous mode [ 1482.758767][T18699] ocfs2: Unmounting device (7,4) on (node local) [ 1482.852286][ T5838] Bluetooth: hci7: command tx timeout [ 1483.928013][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 1483.963966][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 1484.075887][T21200] overlayfs: failed to clone upperpath [ 1484.380609][ T5838] Bluetooth: hci4: command tx timeout [ 1485.064606][ T5838] Bluetooth: hci7: command tx timeout [ 1485.476388][T20722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.870778][T21161] chnl_net:caif_netlink_parms(): no params data found [ 1486.342974][T21254] loop4: detected capacity change from 0 to 1024 [ 1486.492831][T21254] hfsplus: bad catalog entry type [ 1486.603555][ T5838] Bluetooth: hci4: command tx timeout [ 1486.759989][ T996] hfsplus: b-tree write err: -5, ino 25 [ 1486.772463][ T996] hfsplus: b-tree write err: -5, ino 4 [ 1486.820347][ T996] hfsplus: b-tree write err: -5, ino 2 [ 1486.942486][T21156] chnl_net:caif_netlink_parms(): no params data found [ 1487.009050][T20722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.064345][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.071706][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.102961][T21263] overlayfs: failed to get inode (-116) [ 1487.127536][T21263] overlayfs: failed to get inode (-116) [ 1487.287559][ T5838] Bluetooth: hci7: command tx timeout [ 1488.019244][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.026548][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.260697][T21161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.288689][T21161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.336615][T21161] bridge_slave_0: entered allmulticast mode [ 1488.336948][T21266] loop4: detected capacity change from 0 to 32768 [ 1488.345004][T21161] bridge_slave_0: entered promiscuous mode [ 1488.401258][T21161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.429219][T21266] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1488.450822][T21161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.496930][T21266] XFS (loop4): Ending clean mount [ 1488.506973][T21161] bridge_slave_1: entered allmulticast mode [ 1488.518241][T21161] bridge_slave_1: entered promiscuous mode [ 1488.584057][T20722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1488.596255][T20722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1488.826654][ T5838] Bluetooth: hci4: command tx timeout [ 1488.971939][T21161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.006215][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3495'. [ 1489.055882][T21161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.057976][T18699] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1489.166045][T21156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.200402][T21156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.261070][T21156] bridge_slave_0: entered allmulticast mode [ 1489.296679][T21156] bridge_slave_0: entered promiscuous mode [ 1489.352796][T21156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.409702][T21156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.429549][T21156] bridge_slave_1: entered allmulticast mode [ 1489.462403][T21156] bridge_slave_1: entered promiscuous mode [ 1489.510523][ T5838] Bluetooth: hci7: command tx timeout [ 1490.006294][T21161] team0: Port device team_slave_0 added [ 1490.038371][T21156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.084705][T21156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.106489][T21161] team0: Port device team_slave_1 added [ 1490.312316][T21156] team0: Port device team_slave_0 added [ 1491.201502][T21156] team0: Port device team_slave_1 added [ 1491.274186][T21161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.282149][T21161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.369227][T21161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.477287][T20722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.543360][T21161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.560817][T21161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.713488][T21161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.924220][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1492.872036][T21156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.909162][T21156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.058442][T21156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.093153][T21156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.100138][T21156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.256689][T21156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.294277][ T1340] bridge_slave_1: left allmulticast mode [ 1493.300078][ T1340] bridge_slave_1: left promiscuous mode [ 1493.334537][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.366063][ T1340] bridge_slave_0: left allmulticast mode [ 1493.379259][ T1340] bridge_slave_0: left promiscuous mode [ 1493.385144][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.118557][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.157089][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.219113][ T1340] bond0 (unregistering): Released all slaves [ 1494.782997][T21372] loop4: detected capacity change from 0 to 1024 [ 1494.909655][T21372] hfsplus: bad catalog entry type [ 1495.013891][T21161] hsr_slave_0: entered promiscuous mode [ 1495.182457][T21161] hsr_slave_1: entered promiscuous mode [ 1495.191249][T21161] debugfs: 'hsr0' already exists in 'hsr' [ 1495.191422][ T33] hfsplus: b-tree write err: -5, ino 25 [ 1495.202526][T21161] Cannot create hsr debugfs directory [ 1495.274942][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1495.280629][ T33] hfsplus: b-tree write err: -5, ino 2 [ 1495.662947][T21384] loop4: detected capacity change from 0 to 64 [ 1495.863708][T21384] hfs: unable to locate alternate MDB [ 1495.891030][T21384] hfs: continuing without an alternate MDB [ 1495.999186][T21156] hsr_slave_0: entered promiscuous mode [ 1496.027807][T21156] hsr_slave_1: entered promiscuous mode [ 1496.049734][T21156] debugfs: 'hsr0' already exists in 'hsr' [ 1496.067202][T21156] Cannot create hsr debugfs directory [ 1496.439954][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3514'. [ 1497.992247][T20722] veth0_vlan: entered promiscuous mode [ 1498.205093][ T1340] hsr_slave_0: left promiscuous mode [ 1498.266253][ T1340] hsr_slave_1: left promiscuous mode [ 1498.294503][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.950096][T21454] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 1500.133108][T17983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1500.147077][T17983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1500.158374][T17983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1500.167073][T17983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1500.174883][T17983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1500.393065][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 1500.468229][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1500.977510][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 1501.706776][T21454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1501.889861][T21460] lo speed is unknown, defaulting to 1000 [ 1502.503602][ T5838] Bluetooth: hci0: command tx timeout [ 1502.866942][T21487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.876613][T21487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.436725][T21502] loop4: detected capacity change from 0 to 128 [ 1503.460603][T21502] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1503.511731][T21502] hpfs: filesystem error: improperly stopped [ 1503.521574][T21502] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1503.548463][T21502] hpfs: You really don't want any checks? You are crazy... [ 1503.584440][T21502] hpfs: hpfs_map_sector(): read error [ 1503.635398][T21502] hpfs: code page support is disabled [ 1503.649702][T21502] hpfs: hpfs_map_4sectors(): unaligned read [ 1503.656024][T21502] hpfs: hpfs_map_4sectors(): unaligned read [ 1503.701571][T21502] hpfs: filesystem error: unable to find root dir [ 1504.149501][ T1340] IPVS: stop unused estimator thread 0... [ 1504.734524][ T5838] Bluetooth: hci0: command tx timeout [ 1505.458592][T21551] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1505.920436][T21460] chnl_net:caif_netlink_parms(): no params data found [ 1506.807956][T21564] loop4: detected capacity change from 0 to 1024 [ 1506.944362][T21564] hfsplus: bad catalog entry type [ 1506.964925][ T5838] Bluetooth: hci0: command tx timeout [ 1507.326339][ T48] hfsplus: b-tree write err: -5, ino 25 [ 1507.366423][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1507.412096][ T48] hfsplus: b-tree write err: -5, ino 2 [ 1507.452596][T21568] overlayfs: missing 'lowerdir' [ 1508.347286][T21161] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1508.758785][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.768858][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1508.956685][ T30] audit: type=1326 audit(1774320910.001:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21597 comm="syz.5.3546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42a879c799 code=0x0 [ 1509.041837][T21161] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1509.175678][ T5838] Bluetooth: hci0: command tx timeout [ 1509.719831][T21161] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1509.766730][T21161] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1509.816731][ T30] audit: type=1800 audit(1774320910.806:738): pid=21612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3548" name="bus" dev="overlay" ino=606 res=0 errno=0 [ 1510.434576][T21625] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1510.479664][T21460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.487309][T21460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.506333][T21460] bridge_slave_0: entered allmulticast mode [ 1510.527560][T21460] bridge_slave_0: entered promiscuous mode [ 1510.571652][T21460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.588332][T21460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.607450][T21460] bridge_slave_1: entered allmulticast mode [ 1510.632218][T21460] bridge_slave_1: entered promiscuous mode [ 1510.722695][T17979] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1510.866489][T21460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.897543][T17979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1510.910642][T21460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.931185][T17979] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1510.950221][ T1340] bridge_slave_1: left allmulticast mode [ 1510.957823][T17979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1510.966840][ T1340] bridge_slave_1: left promiscuous mode [ 1510.981530][T17979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.990167][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.011912][T21635] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1511.046872][ T1340] bridge_slave_0: left allmulticast mode [ 1511.048552][T17979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1511.075162][ T1340] bridge_slave_0: left promiscuous mode [ 1511.084365][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.318083][T21635] loop4: detected capacity change from 0 to 512 [ 1511.412064][T21635] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3551: inode has both inline data and extents flags [ 1511.493161][T21635] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1511.494018][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1511.510129][ C1] EXT4-fs (loop4): initial error at time 1774320912: ext4_orphan_get:1391: inode 15 [ 1511.520053][ C1] EXT4-fs (loop4): last error at time 1774320912: ext4_orphan_get:1391: inode 15 [ 1511.543864][T21635] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3551: couldn't read orphan inode 15 (err -117) [ 1511.578755][T21635] loop4: lost filesystem error report for type 5 error -117 [ 1511.581283][T21635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.623183][T21647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.725421][T21647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.842963][T21647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.965488][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.989955][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.003555][ T1340] bond0 (unregistering): Released all slaves [ 1512.449790][T21460] team0: Port device team_slave_0 added [ 1512.479830][ T1340] hsr_slave_0: left promiscuous mode [ 1512.498947][ T1340] hsr_slave_1: left promiscuous mode [ 1512.505741][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.534180][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.580715][ T1340] veth0_vlan: left promiscuous mode [ 1513.107344][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 1513.162011][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 1513.431347][T21460] team0: Port device team_slave_1 added [ 1513.595870][T21460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.620270][T21460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.649235][ T5876] usb 5-1: USB disconnect, device number 31 [ 1513.683340][T21460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.828173][T18699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.860978][T21460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.298499][T21460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.511413][T21460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.536243][T21689] loop4: detected capacity change from 0 to 128 [ 1516.595119][T21689] syz.4.3567: attempt to access beyond end of device [ 1516.595119][T21689] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1516.610425][T21689] syz.4.3567: attempt to access beyond end of device [ 1516.610425][T21689] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 1516.625010][T21689] syz.4.3567: attempt to access beyond end of device [ 1516.625010][T21689] loop4: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 1516.640596][T21689] buffer_io_error: 11 callbacks suppressed [ 1516.640624][T21689] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 1516.654986][T21689] syz.4.3567: attempt to access beyond end of device [ 1516.654986][T21689] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 1516.668858][T21689] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 1516.797305][T21460] hsr_slave_0: entered promiscuous mode [ 1516.815771][T21460] hsr_slave_1: entered promiscuous mode [ 1516.848900][T21460] debugfs: 'hsr0' already exists in 'hsr' [ 1516.855841][T21460] Cannot create hsr debugfs directory [ 1517.387899][T21156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1517.456550][T21161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.477324][T21156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1517.528650][T21156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1517.664769][T21156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1517.810634][T21161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.027663][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.035943][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.517201][T21729] loop4: detected capacity change from 0 to 32768 [ 1518.572004][T21729] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1518.580779][T21729] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1518.680887][T21729] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1518.691200][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1518.752476][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1519.003851][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.011556][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.155235][T21740] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.3577'. [ 1519.229353][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 446ms [ 1519.287205][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 1519.292937][T21729] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1519.847198][T21156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.025259][T21156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.075870][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.083247][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.253615][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.260936][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.666111][T21460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1520.730017][T21460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1520.780544][T21460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1520.826943][T21460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1520.998826][T21161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.261174][T21460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.342526][T21460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.399354][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.406846][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.419206][T18195] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1521.494285][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.501512][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.593647][T18195] usb 5-1: Using ep0 maxpacket: 16 [ 1521.603393][T21156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.621795][T18195] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1521.658600][T18195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.724709][T18195] usb 5-1: config 0 descriptor?? [ 1521.748687][T18195] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1522.468128][T21161] veth0_vlan: entered promiscuous mode [ 1522.542853][T21161] veth1_vlan: entered promiscuous mode [ 1522.753294][T21161] veth0_macvtap: entered promiscuous mode [ 1522.826869][T21161] veth1_macvtap: entered promiscuous mode [ 1522.902712][T21161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.960352][T21161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.025267][ T1340] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.146363][ T1340] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.173957][ T1340] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.224380][ T1340] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.427461][T21460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.572641][T21156] veth0_vlan: entered promiscuous mode [ 1524.578921][T18195] gspca_sonixj: i2c_w8 err -71 [ 1524.583872][T18195] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1524.628293][T20633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.668246][T20633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.678901][T21156] veth1_vlan: entered promiscuous mode [ 1524.692708][T18195] usb 5-1: USB disconnect, device number 32 [ 1524.833160][T20633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.847610][T21156] veth0_macvtap: entered promiscuous mode [ 1524.889481][T20633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.912348][T21156] veth1_macvtap: entered promiscuous mode [ 1525.001920][T21156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.064433][T21156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.198223][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.236840][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.426586][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.471855][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.767704][T21849] loop9: detected capacity change from 0 to 4096 [ 1526.731363][T21844] loop4: detected capacity change from 0 to 4096 [ 1527.066438][T21853] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1527.592555][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.619086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.660789][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.896471][T21460] veth0_vlan: entered promiscuous mode [ 1529.401282][T21460] veth1_vlan: entered promiscuous mode [ 1529.477100][T21876] netlink: 'syz.9.3600': attribute type 10 has an invalid length. [ 1529.523872][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.787621][T21876] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1529.820926][T21883] loop4: detected capacity change from 0 to 64 [ 1531.140295][T21460] veth0_macvtap: entered promiscuous mode [ 1531.203495][T21460] veth1_macvtap: entered promiscuous mode [ 1531.220344][T21894] overlayfs: failed to clone upperpath [ 1531.462716][T21460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.538640][T21460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.585545][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.636272][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.410735][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.452737][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.248619][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.310783][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.459478][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.484649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.014229][T17977] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1539.193381][ T6038] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1539.217307][T17977] usb 5-1: Using ep0 maxpacket: 16 [ 1539.258376][T17977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1539.302583][T17977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1539.330336][T17977] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1539.350893][T17977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.377339][ T6038] usb 9-1: Using ep0 maxpacket: 32 [ 1539.418706][ T6038] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.433082][T17977] usb 5-1: Product: syz [ 1539.453675][T17977] usb 5-1: Manufacturer: syz [ 1539.458332][T17977] usb 5-1: SerialNumber: syz [ 1539.473847][ T6038] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.526817][ T6038] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1539.549539][T17977] usb 5-1: config 0 descriptor?? [ 1539.587303][T17977] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1539.588036][T21993] loop9: detected capacity change from 0 to 256 [ 1539.606966][ T6038] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.650523][T17977] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1539.683979][ T6038] usb 9-1: config 0 descriptor?? [ 1539.691829][T21993] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1539.819151][T21993] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1539.959908][T22004] loop7: detected capacity change from 0 to 64 [ 1540.424874][T17977] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1540.690002][T17977] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1540.740792][ T6038] savu 0003:1E7D:2D5A.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 1540.954683][T22006] minix-fs error (device loop7): minix_rename:227: inode #2: comm syz.7.3633: inode has corrupted nlink [ 1541.649659][T16666] usb 9-1: USB disconnect, device number 8 [ 1541.770946][T22026] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 1541.836785][T17977] em28xx 5-1:0.0: AC97 vendor ID = 0xb706b7fe [ 1542.850857][T17977] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1542.878921][T17977] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1542.936272][T17977] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1542.989038][T17977] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1543.232155][T17977] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1543.239500][T17977] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1543.255353][T17977] usb 5-1: USB disconnect, device number 33 [ 1543.369581][T22050] loop9: detected capacity change from 0 to 1024 [ 1544.782259][T22046] hfsplus: bad catalog entry type [ 1545.073078][T22026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1545.097249][T22054] hfsplus: b-tree write err: -5, ino 25 [ 1545.113503][T22054] hfsplus: b-tree write err: -5, ino 4 [ 1545.159189][T22054] hfsplus: b-tree write err: -5, ino 2 [ 1546.238392][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 1546.296723][T22070] loop9: detected capacity change from 0 to 64 [ 1546.311081][T22076] loop8: detected capacity change from 0 to 64 [ 1547.811672][T22076] minix-fs error (device loop8): minix_rename:227: inode #2: comm syz.8.3651: inode has corrupted nlink [ 1547.946301][ T139] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.922433][T22101] loop9: detected capacity change from 0 to 2048 [ 1548.926567][T22106] loop7: detected capacity change from 0 to 64 [ 1548.983110][ T139] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.984233][T22101] EXT4-fs: Ignoring removed mblk_io_submit option [ 1549.113740][T22101] EXT4-fs: Ignoring removed i_version option [ 1549.552744][T22101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1550.963222][T22106] minix-fs error (device loop7): minix_rename:227: inode #2: comm syz.7.3656: inode has corrupted nlink [ 1551.122019][ T30] audit: type=1800 audit(1774320949.431:739): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3654" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1551.208360][T22135] netlink: 'syz.8.3662': attribute type 1 has an invalid length. [ 1551.232133][ T139] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.293288][ T30] audit: type=1804 audit(1774320949.618:740): pid=22138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3654" name="/newroot/11/file0/bus" dev="loop9" ino=18 res=1 errno=0 [ 1551.568729][ T30] audit: type=1800 audit(1774320949.712:741): pid=22136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3654" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1551.647755][T18195] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1552.300841][ T30] audit: type=1800 audit(1774320949.955:742): pid=22138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3654" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1552.345096][T18195] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1552.368091][T18195] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1552.410716][T18195] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1552.491015][T21161] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1552.566379][T21161] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1552.575350][T18195] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1552.683260][T18195] usb 9-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1552.716808][T18195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.724968][T18195] usb 9-1: Product: syz [ 1552.740140][T22153] loop7: detected capacity change from 0 to 64 [ 1552.779784][T18195] usb 9-1: Manufacturer: syz [ 1552.784471][T18195] usb 9-1: SerialNumber: syz [ 1553.347268][ T139] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.113914][T22153] minix-fs error (device loop7): minix_rename:227: inode #2: comm syz.7.3665: inode has corrupted nlink [ 1554.312625][T18195] smsusb:smsusb_probe: board id=8, interface number 0 [ 1554.361161][T18195] smsusb:smsusb_probe: Device initialized with return code -19 [ 1554.817030][T18195] usb 9-1: USB disconnect, device number 9 [ 1554.917715][T21161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1555.060399][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3670'. [ 1555.079651][T22175] loop4: detected capacity change from 0 to 4096 [ 1556.325299][T22185] loop8: detected capacity change from 0 to 1024 [ 1556.638568][T22185] hfsplus: bad catalog entry type [ 1557.174157][ T139] bridge_slave_1: left allmulticast mode [ 1557.179972][ T139] bridge_slave_1: left promiscuous mode [ 1557.273138][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.380082][ T139] bridge_slave_0: left allmulticast mode [ 1557.685769][T22204] loop7: detected capacity change from 0 to 1024 [ 1557.701759][T22204] EXT4-fs: inline encryption not supported [ 1557.708569][T22204] EXT4-fs: Ignoring removed bh option [ 1557.978826][ T139] bridge_slave_0: left promiscuous mode [ 1558.059804][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.102733][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 1558.144749][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 1558.151512][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 1558.421957][T17983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1558.442212][T17983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1558.454642][T17983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1558.471741][T17983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1558.487249][T17983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1558.535959][T22204] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 73 [ 1560.751967][ T5838] Bluetooth: hci1: command tx timeout [ 1561.897053][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.958704][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.001773][ T139] bond0 (unregistering): Released all slaves [ 1562.285718][T22213] lo speed is unknown, defaulting to 1000 [ 1562.465936][T22260] loop4: detected capacity change from 0 to 4096 [ 1563.420089][ T5838] Bluetooth: hci1: command tx timeout [ 1565.615755][ T5838] Bluetooth: hci1: command tx timeout [ 1567.826530][ T5838] Bluetooth: hci1: command tx timeout [ 1569.165721][T22290] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3692'. [ 1569.548932][T22322] tipc: Started in network mode [ 1569.553938][T22322] tipc: Node identity 5686bec70b6b, cluster identity 4711 [ 1569.632241][T22322] tipc: Enabled bearer , priority 0 [ 1569.836281][ T139] hsr_slave_0: left promiscuous mode [ 1569.870809][ T139] hsr_slave_1: left promiscuous mode [ 1569.921459][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.954689][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.184083][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.832365][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.613041][ T139] veth1_macvtap: left promiscuous mode [ 1571.618857][ T139] veth0_macvtap: left promiscuous mode [ 1571.630872][ T139] veth1_vlan: left promiscuous mode [ 1571.652508][ T139] veth0_vlan: left promiscuous mode [ 1571.917940][T22333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1573.616185][T22355] loop4: detected capacity change from 0 to 1024 [ 1574.462965][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.469466][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1574.500975][T22353] hfsplus: bad catalog entry type [ 1574.763027][ T1340] hfsplus: b-tree write err: -5, ino 25 [ 1574.853866][ T1340] hfsplus: b-tree write err: -5, ino 4 [ 1574.881745][ T1340] hfsplus: b-tree write err: -5, ino 2 [ 1575.290714][T22362] loop4: detected capacity change from 0 to 128 [ 1575.348039][T22362] vfat: Unknown parameter '18446744073709551615˙˙˙' [ 1576.126200][ T139] team0 (unregistering): Port device team_slave_1 removed [ 1576.230188][ T139] team0 (unregistering): Port device team_slave_0 removed [ 1579.409159][T22390] loop4: detected capacity change from 0 to 4096 [ 1579.428853][T22300] tipc: Disabling bearer [ 1581.069121][ T10] tipc: Node number set to 1575861959 [ 1581.218669][T22403] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1581.757764][T22213] chnl_net:caif_netlink_parms(): no params data found [ 1583.269729][T22417] overlayfs: failed to clone lowerpath [ 1585.384849][T22213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.455002][T22213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.682712][T22213] bridge_slave_0: entered allmulticast mode [ 1585.723895][T22213] bridge_slave_0: entered promiscuous mode [ 1585.772066][T22213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.867580][T22213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.067163][T22213] bridge_slave_1: entered allmulticast mode [ 1586.157559][T22213] bridge_slave_1: entered promiscuous mode [ 1586.466603][T17983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1586.482205][T17983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1586.493242][T17983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1586.551647][T17983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1586.574413][T17983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1586.871758][T22213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.954829][T22213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.040395][ T5838] Bluetooth: hci3: command tx timeout [ 1589.966165][T22458] loop7: detected capacity change from 0 to 128 [ 1589.974427][T22455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3736'. [ 1590.332194][ T30] audit: type=1800 audit(1774321241.942:743): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3737" name="bus" dev="loop7" ino=1048786 res=0 errno=0 [ 1590.379912][T22213] team0: Port device team_slave_0 added [ 1591.231085][T22213] team0: Port device team_slave_1 added [ 1591.709335][ T5838] Bluetooth: hci3: command tx timeout [ 1591.812591][T22477] rdma_op ffff88806a33d1f0 conn xmit_rdma 0000000000000000 [ 1592.808885][T22475] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1594.059625][ T5838] Bluetooth: hci3: command tx timeout [ 1594.264792][T22213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.293727][T22213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.444987][T22213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.595463][T22431] lo speed is unknown, defaulting to 1000 [ 1595.385628][ T139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.294334][T22213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.303575][ T5838] Bluetooth: hci3: command tx timeout [ 1596.303965][T22213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.201958][T22213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.635068][ T139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.772428][ T139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.675785][T22213] hsr_slave_0: entered promiscuous mode [ 1601.683848][T22213] hsr_slave_1: entered promiscuous mode [ 1601.701650][T22213] debugfs: 'hsr0' already exists in 'hsr' [ 1602.529417][T22547] loop7: detected capacity change from 0 to 64 [ 1602.559459][T22213] Cannot create hsr debugfs directory [ 1603.477257][ T139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.678624][T22569] loop4: detected capacity change from 0 to 512 [ 1604.840147][T22569] EXT4-fs (loop4): 1 truncate cleaned up [ 1604.881293][T22569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.172663][ T30] audit: type=1800 audit(1774321256.035:744): pid=22587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3766" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1605.250214][T22580] loop7: detected capacity change from 0 to 1024 [ 1606.548691][T22593] hfsplus: b-tree write err: -5, ino 2 [ 1607.334519][T18699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.534552][ T139] bridge_slave_1: left allmulticast mode [ 1607.546032][ T139] bridge_slave_1: left promiscuous mode [ 1607.580506][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.703796][ T139] bridge_slave_0: left allmulticast mode [ 1607.727655][ T139] bridge_slave_0: left promiscuous mode [ 1607.733664][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.778383][T22056] hfsplus: b-tree write err: -5, ino 25 [ 1607.789422][T22056] hfsplus: b-tree write err: -5, ino 4 [ 1608.044821][T22056] hfsplus: b-tree write err: -5, ino 2 [ 1608.069630][T22056] hfsplus: b-tree write err: -5, ino 26 [ 1609.146590][T22598] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1610.011296][T22607] Invalid ELF header magic: != ELF [ 1611.447494][T22619] loop4: detected capacity change from 0 to 256 [ 1612.192519][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.205921][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.271304][ T139] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1612.379499][ T139] bond0 (unregistering): Released all slaves [ 1613.774477][T22641] loop7: detected capacity change from 0 to 512 [ 1613.969355][T22641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1616.192144][T22431] chnl_net:caif_netlink_parms(): no params data found [ 1616.308660][T17979] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1616.586436][T17979] usb 8-1: Using ep0 maxpacket: 16 [ 1616.618567][T17979] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1616.637743][T17979] usb 8-1: config 0 has no interface number 0 [ 1616.993181][T17979] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1617.067576][T17979] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1617.227031][T17979] usb 8-1: string descriptor 0 read error: -71 [ 1617.263083][T17979] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1617.279116][T21460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.323832][T17979] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1617.461344][T17979] usb 8-1: config 0 descriptor?? [ 1617.516323][T17979] usb 8-1: can't set config #0, error -71 [ 1617.733672][T17979] usb 8-1: USB disconnect, device number 11 [ 1618.075477][T22677] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3791'. [ 1618.683982][T22684] overlayfs: missing 'lowerdir' [ 1618.725874][ T139] hsr_slave_0: left promiscuous mode [ 1619.427606][ T139] hsr_slave_1: left promiscuous mode [ 1619.447615][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.506946][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.538279][ T139] veth1_macvtap: left promiscuous mode [ 1619.561352][ T139] veth0_macvtap: left promiscuous mode [ 1619.579473][ T139] veth1_vlan: left promiscuous mode [ 1619.594382][ T139] veth0_vlan: left promiscuous mode [ 1623.082373][T17983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1623.097934][T17983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1623.109711][T17983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1623.119527][T17983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1623.132225][T17983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1625.423859][ T5838] Bluetooth: hci4: command tx timeout [ 1625.568907][ T139] team0 (unregistering): Port device team_slave_1 removed [ 1626.638505][ T139] team0 (unregistering): Port device team_slave_0 removed [ 1627.354149][T22431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.361840][T22431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.370831][T22431] bridge_slave_0: entered allmulticast mode [ 1627.381780][T22431] bridge_slave_0: entered promiscuous mode [ 1627.586696][ T5838] Bluetooth: hci4: command tx timeout [ 1627.654628][T22693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1628.068913][T22431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.896921][T22431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.976389][T22431] bridge_slave_1: entered allmulticast mode [ 1629.006496][T22431] bridge_slave_1: entered promiscuous mode [ 1629.191651][ T1340] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.519482][ T1340] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.062020][ T5838] Bluetooth: hci4: command tx timeout [ 1630.291257][T22715] lo speed is unknown, defaulting to 1000 [ 1630.582155][T22056] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.663493][T22056] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.875407][T22431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.040084][T22431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.344393][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 1631.662804][T22431] team0: Port device team_slave_0 added [ 1631.912787][T22431] team0: Port device team_slave_1 added [ 1632.284500][T17983] Bluetooth: hci4: command tx timeout [ 1633.469696][T22431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.282653][T22431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.426729][T22431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1634.454946][T22810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1635.858925][T22431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.114464][T22431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.249200][T17983] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1636.258781][T22431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.925741][T22829] overlayfs: failed to clone lowerpath [ 1638.307557][T22840] tipc: Started in network mode [ 1638.322665][T22840] tipc: Node identity 669946364578, cluster identity 4711 [ 1638.361110][T22840] tipc: Enabled bearer , priority 0 [ 1638.461153][T22431] hsr_slave_0: entered promiscuous mode [ 1638.490042][T22431] hsr_slave_1: entered promiscuous mode [ 1638.519395][T22431] debugfs: 'hsr0' already exists in 'hsr' [ 1638.564457][T22431] Cannot create hsr debugfs directory [ 1638.589414][ T139] bridge_slave_1: left allmulticast mode [ 1638.606024][ T139] bridge_slave_1: left promiscuous mode [ 1638.627651][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.687211][T22861] netlink: 'syz.1.3835': attribute type 1 has an invalid length. [ 1638.736141][ T139] bridge_slave_0: left allmulticast mode [ 1638.754073][ T139] bridge_slave_0: left promiscuous mode [ 1638.774668][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.070447][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.140574][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.169432][ T139] bond0 (unregistering): Released all slaves [ 1639.211679][T22846] syzkaller0: entered promiscuous mode [ 1639.223030][T22846] syzkaller0: entered allmulticast mode [ 1639.468367][T22862] tipc: Resetting bearer [ 1639.643864][T22861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1639.666114][T22837] tipc: Resetting bearer [ 1639.744903][T22837] tipc: Disabling bearer [ 1639.806585][T17979] tipc: Node number set to 601966134 [ 1640.075061][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.081712][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1640.115047][ T139] hsr_slave_0: left promiscuous mode [ 1640.168419][ T139] hsr_slave_1: left promiscuous mode [ 1640.193567][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.698058][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.924467][ T139] team0 (unregistering): Port device team_slave_1 removed [ 1644.036924][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'. [ 1645.012225][ T139] team0 (unregistering): Port device team_slave_0 removed [ 1645.139089][T22908] loop7: detected capacity change from 0 to 4096 [ 1645.253981][T22912] loop4: detected capacity change from 0 to 8 [ 1645.275084][T22913] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1647.039563][T22923] loop4: detected capacity change from 0 to 2048 [ 1647.054937][T22875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1647.087072][T22925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1647.154874][T22923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1647.499469][ T30] audit: type=1800 audit(1774321295.648:745): pid=22923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3847" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 1647.584208][ T30] audit: type=1804 audit(1774321295.704:746): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3847" name="/newroot/155/file0/file1" dev="loop4" ino=1367 res=1 errno=0 [ 1647.638143][T22715] chnl_net:caif_netlink_parms(): no params data found [ 1647.893950][T22935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3850'. [ 1648.836433][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1648.854911][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1648.871233][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1648.889244][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1648.897678][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1650.489562][T22715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.540951][T22715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.559302][T22715] bridge_slave_0: entered allmulticast mode [ 1650.621218][T22715] bridge_slave_0: entered promiscuous mode [ 1650.652278][T22943] lo speed is unknown, defaulting to 1000 [ 1650.659001][T22715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.699957][T22715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.728141][T22715] bridge_slave_1: entered allmulticast mode [ 1650.764277][T22715] bridge_slave_1: entered promiscuous mode [ 1651.177271][T17983] Bluetooth: hci1: command tx timeout [ 1652.953018][T22969] loop4: detected capacity change from 0 to 8 [ 1653.013301][T22961] tipc: Enabling of bearer rejected, failed to enable media [ 1653.400127][T17983] Bluetooth: hci1: command tx timeout [ 1654.403852][T22715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.498393][T22715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.713568][ T9638] bridge_slave_1: left allmulticast mode [ 1655.004068][T22972] netlink: 'syz.1.3858': attribute type 10 has an invalid length. [ 1655.839216][T22978] loop4: detected capacity change from 0 to 1024 [ 1656.050031][T17983] Bluetooth: hci1: command tx timeout [ 1656.066271][ T9638] bridge_slave_1: left promiscuous mode [ 1656.078088][T22978] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1656.128567][T22978] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.3859: lblock 2 mapped to illegal pblock 2 (length 1) [ 1656.145470][T22978] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1656.146069][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1656.161749][ C1] EXT4-fs (loop4): initial error at time 1774321303: ext4_map_blocks:776: inode 3: block 2 [ 1656.172008][ C1] EXT4-fs (loop4): last error at time 1774321303: ext4_map_blocks:776: inode 3: block 2 [ 1656.185976][T22978] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1656.195872][T22978] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.3859: lblock 0 mapped to illegal pblock 48 (length 1) [ 1656.210281][T22978] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1656.247198][T22978] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1656.266346][T22978] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3859: Failed to acquire dquot type 0 [ 1656.278479][T22978] loop4: lost filesystem error report for type 5 error -117 [ 1656.280799][T22978] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1656.298380][T22978] loop4: lost filesystem error report for type 5 error -117 [ 1656.300323][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.312239][T22978] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.3859: mark_inode_dirty error [ 1656.326028][T22978] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1656.338953][T22978] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1656.358799][T22978] EXT4-fs (loop4): 1 orphan inode deleted [ 1656.372849][T22978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1656.414046][ T13] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1656.907284][ T9638] bridge_slave_0: left allmulticast mode [ 1656.913084][ T9638] bridge_slave_0: left promiscuous mode [ 1656.939859][ T13] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1656.968738][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.001949][ T13] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 1657.064310][T18699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.120616][T18699] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1657.146821][T18699] loop4: lost filesystem error report for type 5 error -117 [ 1657.147163][T18699] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1657.222721][T18699] loop4: lost filesystem error report for type 5 error -117 [ 1657.223070][T18699] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1657.269106][T18699] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1657.641541][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.423315][T17983] Bluetooth: hci1: command tx timeout [ 1658.424117][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.074708][ T9638] bond0 (unregistering): Released all slaves [ 1659.612684][T22972] team0: Port device dummy0 added [ 1660.657231][ T9638] hsr_slave_0: left promiscuous mode [ 1660.925136][ T9638] hsr_slave_1: left promiscuous mode [ 1660.931289][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.703768][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.575001][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1665.638224][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1666.025149][T22715] team0: Port device team_slave_0 added [ 1666.044266][T23017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1666.178489][T22715] team0: Port device team_slave_1 added [ 1667.580819][T23059] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 1677.195872][T23106] loop7: detected capacity change from 0 to 16 [ 1677.244227][T23106] erofs (device loop7): mounted with root inode @ nid 36. [ 1677.856738][T23106] syz.7.3893: attempt to access beyond end of device [ 1677.856738][T23106] loop7: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 1677.895731][T23106] syz.7.3893: attempt to access beyond end of device [ 1677.895731][T23106] loop7: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 1677.914959][T23106] erofs (device loop7): read error -5 @ 0 of nid 36 [ 1681.733056][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1681.745762][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1681.756841][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1681.768801][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1681.776791][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1684.080953][T22715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.090201][ T5838] Bluetooth: hci3: command tx timeout [ 1684.111905][T22715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.277240][T22715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.348797][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1684.488821][T22715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.528741][T22715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.663963][T22715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.929964][T23129] overlayfs: failed to clone lowerpath [ 1686.323530][ T5838] Bluetooth: hci3: command tx timeout [ 1686.426623][T23115] lo speed is unknown, defaulting to 1000 [ 1686.670776][T23138] tipc: Enabling of bearer rejected, failed to enable media [ 1687.461177][T17983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1687.513025][T17983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1687.531377][T17983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1687.560490][T17983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1687.568973][T17983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1688.173849][T22943] chnl_net:caif_netlink_parms(): no params data found [ 1688.547398][T17983] Bluetooth: hci3: command tx timeout [ 1689.424332][T23161] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1689.431458][T23161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1689.467009][T23161] vhci_hcd vhci_hcd.0: Device attached [ 1689.605919][T23162] vhci_hcd: connection closed [ 1689.606875][T11959] vhci_hcd vhci_hcd.7: stop threads [ 1689.732766][ T5876] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1689.821242][T17983] Bluetooth: hci6: command tx timeout [ 1689.854756][T11959] vhci_hcd vhci_hcd.7: release socket [ 1690.001741][T11959] vhci_hcd vhci_hcd.7: disconnect device [ 1690.156262][T23145] lo speed is unknown, defaulting to 1000 [ 1690.758528][T17983] Bluetooth: hci3: command tx timeout [ 1691.562510][T23179] netlink: 'syz.1.3901': attribute type 1 has an invalid length. [ 1691.818265][T23179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1692.094075][T17983] Bluetooth: hci6: command tx timeout [ 1692.337949][T23190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 1694.302148][T17983] Bluetooth: hci6: command tx timeout [ 1694.756954][T22943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.541921][T22943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.642503][ T5876] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1695.933007][T22943] bridge_slave_0: entered allmulticast mode [ 1695.942249][T22943] bridge_slave_0: entered promiscuous mode [ 1695.952614][T22943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.960938][T22943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.968959][T22943] bridge_slave_1: entered allmulticast mode [ 1696.496895][T17983] Bluetooth: hci6: command tx timeout [ 1696.622447][T22943] bridge_slave_1: entered promiscuous mode [ 1697.025598][T23115] chnl_net:caif_netlink_parms(): no params data found [ 1697.122322][T22943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.185109][T22943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.248448][T23217] tipc: Enabling of bearer rejected, failed to enable media [ 1699.591718][T23145] chnl_net:caif_netlink_parms(): no params data found [ 1699.672519][T22943] team0: Port device team_slave_0 added [ 1699.693074][T22943] team0: Port device team_slave_1 added [ 1699.725847][T23237] netlink: 'syz.5.3923': attribute type 1 has an invalid length. [ 1700.807744][T22943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.836478][T22943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.926121][T22943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.065860][T23251] loop7: detected capacity change from 0 to 256 [ 1701.077313][T23251] exfat: Deprecated parameter 'utf8' [ 1701.162183][T23251] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1701.807231][T23237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1701.871408][T22943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.879138][T22943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.910133][T22943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.271146][ T9638] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.797744][ T9638] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.129646][T23266] loop7: detected capacity change from 0 to 1024 [ 1704.530430][T23264] Invalid ELF header magic: != ELF [ 1705.244398][T23115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.246206][ T1340] hfsplus: b-tree write err: -5, ino 25 [ 1705.284253][T23115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.934313][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1705.940907][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1706.039120][ T1340] hfsplus: b-tree write err: -5, ino 4 [ 1706.044836][ T1340] hfsplus: b-tree write err: -5, ino 2 [ 1706.062395][T23115] bridge_slave_0: entered allmulticast mode [ 1706.156656][T23115] bridge_slave_0: entered promiscuous mode [ 1706.211349][T23115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.218706][T23115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.354574][T23115] bridge_slave_1: entered allmulticast mode [ 1706.394023][T23115] bridge_slave_1: entered promiscuous mode [ 1707.210438][T23145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.267632][T23145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.471549][T23145] bridge_slave_0: entered allmulticast mode [ 1707.489733][T23145] bridge_slave_0: entered promiscuous mode [ 1709.455692][ T9638] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.093026][T23145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.121411][T23145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.161727][T23145] bridge_slave_1: entered allmulticast mode [ 1710.196319][T23145] bridge_slave_1: entered promiscuous mode [ 1710.341426][T22943] hsr_slave_0: entered promiscuous mode [ 1710.355613][T22943] hsr_slave_1: entered promiscuous mode [ 1710.442163][T22943] debugfs: 'hsr0' already exists in 'hsr' [ 1710.448129][T22943] Cannot create hsr debugfs directory [ 1710.600508][T23115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.750479][ T9638] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.782841][T23296] netlink: 'syz.7.3938': attribute type 1 has an invalid length. [ 1710.943434][T23115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.209180][T23296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1711.238824][T23297] bond1: (slave gretap1): making interface the new active one [ 1711.248827][T23297] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1711.334711][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1711.405243][T23145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.169300][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1712.189821][T23145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.232013][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1712.251006][ T24] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1712.265224][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1712.310758][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1712.355107][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.364281][ T24] usb 8-1: Product: syz [ 1712.380047][ T24] usb 8-1: Manufacturer: syz [ 1712.398986][ T24] usb 8-1: SerialNumber: syz [ 1712.801295][T23145] team0: Port device team_slave_0 added [ 1712.802704][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 1712.843716][T23115] team0: Port device team_slave_0 added [ 1712.866154][T23115] team0: Port device team_slave_1 added [ 1712.889078][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 1712.903359][T23145] team0: Port device team_slave_1 added [ 1712.915117][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1712.929521][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1712.952608][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1712.976568][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1712.995107][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1713.114942][ T24] usb 8-1: USB disconnect, device number 12 [ 1713.557405][T23145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.565116][T23145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.608625][T23145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.724601][T23115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.707678][T17983] Bluetooth: hci4: command tx timeout [ 1715.805150][T23115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.848712][T23115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.860952][T23145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.870302][T23145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.112077][T23327] loop7: detected capacity change from 0 to 32768 [ 1717.221051][T23327] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3946 (23327) [ 1717.270001][T23327] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1717.280334][T23327] BTRFS info (device loop7): using crc32c checksum algorithm [ 1717.288024][T23145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.288038][T23327] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1717.905436][T23327] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1717.911008][T23327] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1717.921683][T23327] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1718.531800][T17983] Bluetooth: hci4: command tx timeout [ 1718.574321][T23327] BTRFS error (device loop7): open_ctree failed: -12 [ 1719.612802][T23115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.686210][T23115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.783848][T23357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1719.807497][T23115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.325254][T23314] lo speed is unknown, defaulting to 1000 [ 1720.544237][T23145] hsr_slave_0: entered promiscuous mode [ 1720.578433][T23145] hsr_slave_1: entered promiscuous mode [ 1720.607644][T23145] debugfs: 'hsr0' already exists in 'hsr' [ 1720.649712][T23145] Cannot create hsr debugfs directory [ 1720.764769][ T5838] Bluetooth: hci4: command tx timeout [ 1720.882860][T23369] netlink: 'syz.7.3955': attribute type 1 has an invalid length. [ 1721.103300][ T9638] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.303727][ T6018] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1721.484051][ T6018] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1721.505550][ T6018] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1721.526339][ T6018] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1721.570055][ T6018] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1721.590596][T23115] hsr_slave_0: entered promiscuous mode [ 1721.599029][T23115] hsr_slave_1: entered promiscuous mode [ 1721.605629][T23115] debugfs: 'hsr0' already exists in 'hsr' [ 1721.611670][T23115] Cannot create hsr debugfs directory [ 1721.669038][ T6018] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1721.737760][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.787886][ T6018] usb 8-1: Product: syz [ 1721.809937][ T6018] usb 8-1: Manufacturer: syz [ 1721.853410][ T6018] usb 8-1: SerialNumber: syz [ 1721.868555][T23369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1722.137606][ T6018] smsusb:smsusb_probe: board id=8, interface number 0 [ 1722.153874][ T6018] smsusb:smsusb_probe: Device initialized with return code -19 [ 1722.311777][ T6018] usb 8-1: USB disconnect, device number 13 [ 1722.380096][ T9638] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.006528][ T5838] Bluetooth: hci4: command tx timeout [ 1723.623203][ T9638] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.662352][ T9638] bond0: (slave netdevsim0): Releasing backup interface [ 1724.766209][ T9638] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.006834][T23406] xt_HMARK: spi-set and port-set can't be combined [ 1728.123561][T23145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1729.145192][T23145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1729.571656][T23314] chnl_net:caif_netlink_parms(): no params data found [ 1729.821860][T23432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1729.829247][T23432] IPv6: NLM_F_CREATE should be set when creating new route [ 1729.836655][T23432] IPv6: NLM_F_CREATE should be set when creating new route [ 1729.843930][T23432] IPv6: NLM_F_CREATE should be set when creating new route [ 1729.962683][T23145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1730.076494][T23145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1730.249233][T23446] loop7: detected capacity change from 0 to 256 [ 1732.250242][T23314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.262999][T23314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.270620][T23314] bridge_slave_0: entered allmulticast mode [ 1732.279451][T23314] bridge_slave_0: entered promiscuous mode [ 1732.468201][T23314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.538597][T23314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.568462][T23314] bridge_slave_1: entered allmulticast mode [ 1732.597426][T23314] bridge_slave_1: entered promiscuous mode [ 1732.638641][T23314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.669332][ T9638] bridge_slave_1: left allmulticast mode [ 1732.676570][ T9638] bridge_slave_1: left promiscuous mode [ 1732.694042][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.098611][T23471] netlink: set zone limit has 4 unknown bytes [ 1733.436958][T23468] overlayfs: missing 'lowerdir' [ 1733.450837][ T9638] bridge_slave_0: left allmulticast mode [ 1733.457795][ T9638] bridge_slave_0: left promiscuous mode [ 1733.480769][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.527540][ T9638] bridge_slave_1: left allmulticast mode [ 1733.533371][ T9638] bridge_slave_1: left promiscuous mode [ 1733.555191][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.585643][ T9638] bridge_slave_0: left allmulticast mode [ 1733.596896][ T9638] bridge_slave_0: left promiscuous mode [ 1733.604293][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.840758][T23488] netlink: 'syz.5.3980': attribute type 10 has an invalid length. [ 1734.848946][T23488] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3980'. [ 1735.686087][ T9638] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1735.787340][ T9638] team0: Port device bridge1 removed [ 1735.858203][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.881925][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.908257][ T9638] bond0 (unregistering): Released all slaves [ 1735.977870][ T9638] bond1 (unregistering): Released all slaves [ 1736.039190][ T9638] bond2 (unregistering): Released all slaves [ 1736.396457][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.413390][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.426970][ T9638] bond0 (unregistering): Released all slaves [ 1736.671932][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.683715][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.699821][ T9638] bond0 (unregistering): Released all slaves [ 1736.722159][T23314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.769742][T23488] batadv0: entered promiscuous mode [ 1736.775337][T23488] batadv0: entered allmulticast mode [ 1736.781363][T23488] bridge0: port 3(batadv0) entered blocking state [ 1736.788242][T23488] bridge0: port 3(batadv0) entered disabled state [ 1736.925996][T23314] team0: Port device team_slave_0 added [ 1736.958849][T23314] team0: Port device team_slave_1 added [ 1736.983664][T11959] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1736.993237][T11959] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1737.341333][T23497] loop7: detected capacity change from 0 to 512 [ 1737.433058][T23497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1737.492330][ T9638] tipc: Left network mode [ 1737.511478][T23314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.519293][T23314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.546701][T23497] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1737.623037][T23497] EXT4-fs (loop7): 1 truncate cleaned up [ 1737.648371][T23497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1737.660616][T23314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.714140][T23314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.756736][T23314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.976609][T23314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.614910][ T9638] tipc: Left network mode [ 1738.785736][T21460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.350971][T23314] hsr_slave_0: entered promiscuous mode [ 1739.358174][T23314] hsr_slave_1: entered promiscuous mode [ 1739.409322][T23314] debugfs: 'hsr0' already exists in 'hsr' [ 1739.444244][T23314] Cannot create hsr debugfs directory [ 1740.406697][T23523] loop7: detected capacity change from 0 to 1024 [ 1740.720062][T23523] hfsplus: bad catalog entry type [ 1741.134259][ T6822] hfsplus: b-tree write err: -5, ino 25 [ 1741.140036][ T6822] hfsplus: b-tree write err: -5, ino 4 [ 1741.211789][ T6822] hfsplus: b-tree write err: -5, ino 2 [ 1741.488507][T23115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1741.597040][T23145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1744.135025][T23115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1744.206099][T23115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1744.494178][T23543] loop7: detected capacity change from 0 to 32768 [ 1744.735717][T23543] JBD2: Ignoring recovery information on journal [ 1745.561009][T23543] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1745.879303][T23115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1745.924555][ T30] audit: type=1804 audit(1774321643.731:747): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3995" name="/newroot/70/file1/file0" dev="loop7" ino=17059 res=1 errno=0 [ 1745.977869][T23145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.052797][ T30] audit: type=1804 audit(1774321643.796:748): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3995" name="/newroot/70/file1/file0" dev="loop7" ino=17059 res=1 errno=0 [ 1746.366709][T21460] ocfs2: Unmounting device (7,7) on (node local) [ 1746.367269][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.380995][T11959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.712204][T17983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1746.732466][T17983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1746.756973][T17983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1746.787450][T17983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1746.807417][T17983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1747.074680][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.082145][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.250536][T23562] lo speed is unknown, defaulting to 1000 [ 1749.114935][T17983] Bluetooth: hci1: command tx timeout [ 1750.080816][ T9638] hsr_slave_0: left promiscuous mode [ 1750.119508][ T9638] hsr_slave_1: left promiscuous mode [ 1750.162518][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.243140][ T9638] hsr_slave_0: left promiscuous mode [ 1750.288900][ T9638] hsr_slave_1: left promiscuous mode [ 1750.365341][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.394831][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.448398][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.483157][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.876948][ T9638] hsr_slave_0: left promiscuous mode [ 1750.925962][ T9638] hsr_slave_1: left promiscuous mode [ 1750.996265][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1751.096193][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.125062][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1751.145514][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.284727][T17983] Bluetooth: hci1: command tx timeout [ 1751.339027][ T9638] veth1_macvtap: left promiscuous mode [ 1751.353920][ T9638] veth0_macvtap: left promiscuous mode [ 1751.386528][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1751.397082][ T9638] veth1_vlan: left promiscuous mode [ 1751.423111][ T9638] veth0_vlan: left promiscuous mode [ 1751.445271][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1751.578094][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1751.664769][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1751.672968][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1751.683556][ T9638] veth1_macvtap: left promiscuous mode [ 1751.694156][ T9638] veth0_macvtap: left promiscuous mode [ 1752.481040][ T9638] veth1_vlan: left promiscuous mode [ 1752.486364][ T9638] veth0_vlan: left promiscuous mode [ 1753.065029][T23612] loop7: detected capacity change from 0 to 1024 [ 1753.111402][T23612] journal_path: Non-blockdev passed as '' [ 1753.122941][T23612] EXT4-fs: error: could not find journal device path [ 1753.358883][T23614] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4010'. [ 1753.517484][T17983] Bluetooth: hci1: command tx timeout [ 1753.848952][T17983] Bluetooth: hci3: command tx timeout [ 1754.000625][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1754.115483][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1755.022470][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1755.045167][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1755.729514][T17983] Bluetooth: hci1: command tx timeout [ 1756.071344][T17983] Bluetooth: hci3: command tx timeout [ 1756.221071][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1756.248772][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1756.662573][T23595] lo speed is unknown, defaulting to 1000 [ 1757.289289][T23628] loop7: detected capacity change from 0 to 128 [ 1757.314138][ T24] Process accounting resumed [ 1758.294488][T17983] Bluetooth: hci3: command tx timeout [ 1759.082017][T23562] chnl_net:caif_netlink_parms(): no params data found [ 1759.090509][T17979] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1759.301713][T17979] usb 8-1: Using ep0 maxpacket: 16 [ 1759.369336][T17979] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1759.445241][T17979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.483228][T17979] usb 8-1: Product: syz [ 1759.527396][T17979] usb 8-1: Manufacturer: syz [ 1759.606022][T17979] usb 8-1: SerialNumber: syz [ 1759.716307][T17979] usb 8-1: config 0 descriptor?? [ 1760.570267][T17983] Bluetooth: hci3: command tx timeout [ 1761.503054][T23562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.570139][T23562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.600404][T23562] bridge_slave_0: entered allmulticast mode [ 1761.633360][T23562] bridge_slave_0: entered promiscuous mode [ 1761.829920][T23562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.887796][T23562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.944507][T23562] bridge_slave_1: entered allmulticast mode [ 1761.980808][T23562] bridge_slave_1: entered promiscuous mode [ 1762.092966][T17979] usb 8-1: USB disconnect, device number 14 [ 1762.334409][T23314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1762.401445][T23314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1762.514341][T23667] loop7: detected capacity change from 0 to 16 [ 1763.214454][T23667] erofs (device loop7): mounted with root inode @ nid 36. [ 1763.262407][T23562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.304370][T23314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1763.343494][T23314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1763.481103][T23595] chnl_net:caif_netlink_parms(): no params data found [ 1763.570770][T23562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.916169][T23562] team0: Port device team_slave_0 added [ 1766.108008][T23562] team0: Port device team_slave_1 added [ 1766.457284][T23700] overlayfs: failed to clone upperpath [ 1767.124149][T23562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.131256][T23562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.205982][T23562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.230493][T23562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.237531][T23562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.179159][T23562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1768.229490][T23595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.260373][T23595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.296798][T23595] bridge_slave_0: entered allmulticast mode [ 1768.346453][T23595] bridge_slave_0: entered promiscuous mode [ 1768.394904][T23714] ceph: No mds server is up or the cluster is laggy [ 1768.426787][T23712] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1768.437851][T23712] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1768.447842][T23712] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1770.072086][T23595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.079542][T23595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.143895][T23595] bridge_slave_1: entered allmulticast mode [ 1770.190235][T23595] bridge_slave_1: entered promiscuous mode [ 1770.559167][T23734] netlink: 'syz.5.4029': attribute type 12 has an invalid length. [ 1770.642055][T23595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.026834][T23748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1771.393384][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.400444][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1771.558264][T23595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.623973][T23562] hsr_slave_0: entered promiscuous mode [ 1771.656345][T23562] hsr_slave_1: entered promiscuous mode [ 1771.704494][T23562] debugfs: 'hsr0' already exists in 'hsr' [ 1771.768196][T23562] Cannot create hsr debugfs directory [ 1772.540684][T23758] bond0: entered allmulticast mode [ 1772.546391][T23758] bond_slave_0: entered allmulticast mode [ 1772.555378][T23758] bond_slave_1: entered allmulticast mode [ 1773.598597][T23772] loop7: detected capacity change from 0 to 1024 [ 1773.613504][T23772] hfsplus: Unknown parameter '¨ls' [ 1774.071150][T23595] team0: Port device team_slave_0 added [ 1774.080575][T23595] team0: Port device team_slave_1 added [ 1775.104019][T23314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.764180][T23595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.823714][T23595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.291498][T23595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.467162][T23595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.474243][T23595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.550597][T23595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.657902][T23786] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4039'. [ 1777.787611][T23789] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4039'. [ 1777.894891][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1777.912511][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1777.922707][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1777.931510][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1777.939494][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1780.198801][T17983] Bluetooth: hci6: command tx timeout [ 1780.973250][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'. [ 1781.092636][T23595] hsr_slave_0: entered promiscuous mode [ 1781.137727][T23595] hsr_slave_1: entered promiscuous mode [ 1781.171370][T23595] debugfs: 'hsr0' already exists in 'hsr' [ 1781.183558][T23595] Cannot create hsr debugfs directory [ 1781.252977][T23818] loop7: detected capacity change from 0 to 2048 [ 1781.280569][T23818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1781.641292][T23822] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1781.648351][T23822] PKCS7: Only support pkcs7_signedData type [ 1782.423170][T17983] Bluetooth: hci6: command tx timeout [ 1782.875095][T23831] syz.1.4048: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1782.899356][T23831] CPU: 1 UID: 0 PID: 23831 Comm: syz.1.4048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1782.899401][T23831] Tainted: [L]=SOFTLOCKUP [ 1782.899410][T23831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1782.899427][T23831] Call Trace: [ 1782.899437][T23831] [ 1782.899448][T23831] dump_stack_lvl+0xe8/0x150 [ 1782.899490][T23831] warn_alloc+0x249/0x340 [ 1782.899524][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.899559][T23831] ? stack_trace_save+0xa9/0x100 [ 1782.899594][T23831] ? __pfx_warn_alloc+0x10/0x10 [ 1782.899623][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.899673][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.899708][T23831] ? kasan_save_track+0x4f/0x80 [ 1782.899739][T23831] ? kasan_save_track+0x3e/0x80 [ 1782.899768][T23831] ? __kasan_kmalloc+0x93/0xb0 [ 1782.899799][T23831] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1782.899831][T23831] ? xskq_create+0x56/0x170 [ 1782.899859][T23831] ? xsk_setsockopt+0x54c/0x990 [ 1782.899903][T23831] ? do_sock_setsockopt+0x17c/0x1b0 [ 1782.899938][T23831] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1782.899976][T23831] ? do_syscall_64+0x14d/0xf80 [ 1782.900013][T23831] __vmalloc_node_range_noprof+0x132/0x1730 [ 1782.900079][T23831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1782.900116][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.900150][T23831] ? __kasan_kmalloc+0x93/0xb0 [ 1782.900184][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.900221][T23831] vmalloc_user_noprof+0xad/0xe0 [ 1782.900250][T23831] ? xskq_create+0xbf/0x170 [ 1782.900277][T23831] xskq_create+0xbf/0x170 [ 1782.900309][T23831] xsk_init_queue+0x8a/0xe0 [ 1782.900359][T23831] xsk_setsockopt+0x54c/0x990 [ 1782.900404][T23831] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1782.900446][T23831] ? __pfx_aa_sk_perm+0x10/0x10 [ 1782.900484][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.900519][T23831] ? aa_sock_opt_perm+0xff/0x1a0 [ 1782.900563][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.900594][T23831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1782.900625][T23831] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1782.900667][T23831] do_sock_setsockopt+0x17c/0x1b0 [ 1782.900703][T23831] __x64_sys_setsockopt+0x13d/0x1b0 [ 1782.900741][T23831] do_syscall_64+0x14d/0xf80 [ 1782.900770][T23831] ? trace_irq_disable+0x3b/0x150 [ 1782.900811][T23831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.900845][T23831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.900872][T23831] RIP: 0033:0x7f76cd39c799 [ 1782.900898][T23831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.900921][T23831] RSP: 002b:00007f76ce180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1782.900958][T23831] RAX: ffffffffffffffda RBX: 00007f76cd616090 RCX: 00007f76cd39c799 [ 1782.900978][T23831] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1782.900995][T23831] RBP: 00007f76cd432c99 R08: 0000000000007e00 R09: 0000000000000000 [ 1782.901013][T23831] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1782.901029][T23831] R13: 00007f76cd616128 R14: 00007f76cd616090 R15: 00007ffedd7453f8 [ 1782.901071][T23831] [ 1782.901082][T23831] Mem-Info: [ 1783.223099][T23831] active_anon:32451 inactive_anon:0 isolated_anon:0 [ 1783.223099][T23831] active_file:24288 inactive_file:41288 isolated_file:0 [ 1783.223099][T23831] unevictable:768 dirty:209 writeback:0 [ 1783.223099][T23831] slab_reclaimable:12875 slab_unreclaimable:113541 [ 1783.223099][T23831] mapped:40532 shmem:26398 pagetables:1725 [ 1783.223099][T23831] sec_pagetables:0 bounce:0 [ 1783.223099][T23831] kernel_misc_reclaimable:0 [ 1783.223099][T23831] free:1225635 free_pcp:21022 free_cma:0 [ 1783.270398][T23831] Node 0 active_anon:130304kB inactive_anon:0kB active_file:97112kB inactive_file:164916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97132kB dirty:836kB writeback:0kB shmem:104756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14340kB pagetables:6748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1783.303421][T23831] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65596kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1783.336360][T23831] Node 0 DMA free:11212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1783.369331][T23831] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1783.375509][T23831] Node 0 DMA32 free:1152016kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:131704kB inactive_anon:0kB active_file:97112kB inactive_file:164916kB unevictable:1536kB writepending:936kB zspages:0kB present:3129332kB managed:2552692kB mlocked:0kB bounce:0kB free_pcp:25444kB local_pcp:16812kB free_cma:0kB [ 1783.410839][T23831] lowmem_reserve[]: 0 0 0 0 0 [ 1783.415655][T23831] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1783.446864][T23831] lowmem_reserve[]: 0 0 0 0 0 [ 1783.452014][T23831] Node 1 Normal free:3735104kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:236kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60980kB local_pcp:28492kB free_cma:0kB [ 1783.469604][T23795] lo speed is unknown, defaulting to 1000 [ 1783.484772][T23831] lowmem_reserve[]: 0 0 0 0 0 [ 1783.495422][T23831] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11212kB [ 1783.510973][T23831] Node 0 DMA32: 1134*4kB (UE) 5958*8kB (UME) 3510*16kB (UME) 552*32kB (UME) 420*64kB (UM) 675*128kB (UME) 541*256kB (UM) 420*512kB (UM) 308*1024kB (UM) 117*2048kB (UM) 1*4096kB (U) = 1151944kB [ 1783.531087][T23831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1783.543299][T23831] Node 1 Normal: 2*4kB (U) 5*8kB (U) 7*16kB (U) 11*32kB (U) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 908*4096kB (UM) = 3735104kB [ 1783.560463][T23831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1783.570222][T23831] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1783.579609][T23831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1783.589401][T23831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1783.599009][T23831] 92321 total pagecache pages [ 1783.603874][T23831] 0 pages in swap cache [ 1783.608132][T23831] Free swap = 124996kB [ 1783.612492][T23831] Total swap = 124996kB [ 1783.616754][T23831] 2097051 pages RAM [ 1783.620685][T23831] 0 pages HighMem/MovableOnly [ 1783.625454][T23831] 427043 pages reserved [ 1783.629613][T23831] 0 pages cma reserved [ 1784.234021][T23851] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1784.245991][T23851] overlayfs: overlapping lowerdir path [ 1785.105345][T17983] Bluetooth: hci6: command tx timeout [ 1787.274822][T17983] Bluetooth: hci6: command tx timeout [ 1788.242880][T23886] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4056'. [ 1788.254861][T23886] netlink: 'syz.7.4056': attribute type 7 has an invalid length. [ 1788.263673][T23886] netlink: 'syz.7.4056': attribute type 8 has an invalid length. [ 1788.272373][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4056'. [ 1788.939242][ T9638] bridge_slave_1: left allmulticast mode [ 1788.945634][ T9638] bridge_slave_1: left promiscuous mode [ 1788.953888][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.985340][ T9638] bridge_slave_0: left allmulticast mode [ 1789.024525][ T9638] bridge_slave_0: left promiscuous mode [ 1789.049363][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.084151][ T9638] bridge_slave_1: left allmulticast mode [ 1789.099498][ T9638] bridge_slave_1: left promiscuous mode [ 1789.118136][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.139635][ T9638] bridge_slave_0: left allmulticast mode [ 1789.156203][ T9638] bridge_slave_0: left promiscuous mode [ 1789.168829][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.222347][ T9638] bridge_slave_1: left allmulticast mode [ 1789.228254][ T9638] bridge_slave_1: left promiscuous mode [ 1789.252027][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.280843][ T9638] bridge_slave_0: left allmulticast mode [ 1789.287186][ T9638] bridge_slave_0: left promiscuous mode [ 1789.293230][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.514283][ T9638] bridge_slave_1: left allmulticast mode [ 1789.522704][ T9638] bridge_slave_1: left promiscuous mode [ 1789.528769][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.539563][ T9638] bridge_slave_0: left allmulticast mode [ 1790.208366][ T9638] bridge_slave_0: left promiscuous mode [ 1790.214814][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.103271][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.258252][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.341117][ T9638] bond0 (unregistering): Released all slaves [ 1792.773849][T23931] loop7: detected capacity change from 0 to 32768 [ 1792.796706][T23931] (syz.7.4069,23931,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1792.811431][T23931] (syz.7.4069,23931,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1792.843342][T23931] JBD2: Ignoring recovery information on journal [ 1793.141227][T23931] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1793.320351][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.439039][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.613750][ T9638] bond0 (unregistering): Released all slaves [ 1794.511154][T23938] [ 1794.513533][T23938] ====================================================== [ 1794.518685][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.520735][T23938] WARNING: possible circular locking dependency detected [ 1794.520753][T23938] syzkaller #0 Tainted: G L [ 1794.520771][T23938] ------------------------------------------------------ [ 1794.520783][T23938] syz.7.4069/23938 is trying to acquire lock: [ 1794.520801][T23938] ffff888054272378 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_calc_xattr_init+0x20a/0xd90 [ 1794.567065][T23938] [ 1794.567065][T23938] but task is already holding lock: [ 1794.574516][T23938] ffff88806ab43480 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 1794.588510][T23938] [ 1794.588510][T23938] which lock already depends on the new lock. [ 1794.588510][T23938] [ 1794.599224][T23938] [ 1794.599224][T23938] the existing dependency chain (in reverse order) is: [ 1794.608333][T23938] [ 1794.608333][T23938] -> #3 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 1794.619493][T23938] down_write+0x96/0x200 [ 1794.624358][T23938] ocfs2_evict_inode+0x1539/0x44e0 [ 1794.630087][T23938] evict+0x61e/0xb10 [ 1794.634519][T23938] ocfs2_dentry_iput+0x24d/0x390 [ 1794.640043][T23938] __dentry_kill+0x1a2/0x5e0 [ 1794.645162][T23938] finish_dput+0xc9/0x480 [ 1794.650108][T23938] __fput+0x691/0xa70 [ 1794.654712][T23938] fput_close_sync+0x11f/0x240 [ 1794.660175][T23938] __x64_sys_close+0x7e/0x110 [ 1794.665377][T23938] do_syscall_64+0x14d/0xf80 [ 1794.670483][T23938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.676948][T23938] [ 1794.676948][T23938] -> #2 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}: [ 1794.687758][T23938] down_write+0x96/0x200 [ 1794.692585][T23938] ocfs2_del_inode_from_orphan+0x12e/0x7a0 [ 1794.698952][T23938] ocfs2_dio_end_io+0x543/0x1210 [ 1794.705148][T23938] dio_complete+0x25b/0x790 [ 1794.710543][T23938] __blockdev_direct_IO+0x2cb0/0x32f0 [ 1794.716666][T23938] ocfs2_direct_IO+0x251/0x2c0 [ 1794.722327][T23938] generic_file_direct_write+0x1db/0x3e0 [ 1794.728522][T23938] __generic_file_write_iter+0x11d/0x230 [ 1794.735501][T23938] ocfs2_file_write_iter+0x1663/0x1ed0 [ 1794.742023][T23938] iter_file_splice_write+0x9a1/0x10f0 [ 1794.748201][T23938] direct_splice_actor+0x101/0x160 [ 1794.753850][T23938] splice_direct_to_actor+0x53a/0xc70 [ 1794.760030][T23938] do_splice_direct+0x195/0x290 [ 1794.765426][T23938] do_sendfile+0x535/0x7d0 [ 1794.770559][T23938] __se_sys_sendfile64+0x144/0x1a0 [ 1794.776273][T23938] do_syscall_64+0x14d/0xf80 [ 1794.781500][T23938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.788071][T23938] [ 1794.788071][T23938] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}: [ 1794.796874][T23938] down_write+0x96/0x200 [ 1794.801648][T23938] ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 1794.808251][T23938] ocfs2_truncate_file+0xdf3/0x1540 [ 1794.814068][T23938] ocfs2_setattr+0x15e5/0x1cc0 [ 1794.819434][T23938] notify_change+0xc1a/0xf40 [ 1794.824584][T23938] do_truncate+0x1c2/0x250 [ 1794.829537][T23938] path_openat+0x2f89/0x3860 [ 1794.834674][T23938] do_file_open+0x23e/0x4a0 [ 1794.839898][T23938] do_sys_openat2+0x113/0x200 [ 1794.845114][T23938] __x64_sys_creat+0x8f/0xc0 [ 1794.850859][T23938] do_syscall_64+0x14d/0xf80 [ 1794.856120][T23938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.862736][T23938] [ 1794.862736][T23938] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1794.870746][T23938] __lock_acquire+0x15a5/0x2cf0 [ 1794.876128][T23938] lock_acquire+0xf0/0x2e0 [ 1794.881076][T23938] down_read+0x47/0x2e0 [ 1794.885821][T23938] ocfs2_calc_xattr_init+0x20a/0xd90 [ 1794.891669][T23938] ocfs2_mknod+0xf51/0x2290 [ 1794.896734][T23938] ocfs2_mkdir+0x181/0x490 [ 1794.901803][T23938] vfs_mkdir+0x413/0x630 [ 1794.906925][T23938] filename_mkdirat+0x285/0x510 [ 1794.912410][T23938] __se_sys_mkdirat+0x35/0x150 [ 1794.918247][T23938] do_syscall_64+0x14d/0xf80 [ 1794.923737][T23938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.930401][T23938] [ 1794.930401][T23938] other info that might help us debug this: [ 1794.930401][T23938] [ 1794.940847][T23938] Chain exists of: [ 1794.940847][T23938] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] --> &ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE] [ 1794.940847][T23938] [ 1794.960523][T23938] Possible unsafe locking scenario: [ 1794.960523][T23938] [ 1794.967977][T23938] CPU0 CPU1 [ 1794.973338][T23938] ---- ---- [ 1794.978892][T23938] lock(&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]); [ 1794.986276][T23938] lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]); [ 1794.996272][T23938] lock(&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]); [ 1795.006170][T23938] rlock(&oi->ip_xattr_sem); [ 1795.010922][T23938] [ 1795.010922][T23938] *** DEADLOCK *** [ 1795.010922][T23938] [ 1795.019861][T23938] 3 locks held by syz.7.4069/23938: [ 1795.025144][T23938] #0: ffff88807dd4e420 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1795.035776][T23938] #1: ffff888054272640 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 1795.046727][T23938] #2: ffff88806ab43480 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 1795.060605][T23938] [ 1795.060605][T23938] stack backtrace: [ 1795.067018][T23938] CPU: 1 UID: 0 PID: 23938 Comm: syz.7.4069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1795.067054][T23938] Tainted: [L]=SOFTLOCKUP [ 1795.067063][T23938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1795.067078][T23938] Call Trace: [ 1795.067090][T23938] [ 1795.067102][T23938] dump_stack_lvl+0xe8/0x150 [ 1795.067142][T23938] print_circular_bug+0x2e1/0x300 [ 1795.067188][T23938] check_noncircular+0x12e/0x150 [ 1795.067231][T23938] __lock_acquire+0x15a5/0x2cf0 [ 1795.067279][T23938] lock_acquire+0xf0/0x2e0 [ 1795.067311][T23938] ? ocfs2_calc_xattr_init+0x20a/0xd90 [ 1795.067353][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067389][T23938] down_read+0x47/0x2e0 [ 1795.067421][T23938] ? ocfs2_calc_xattr_init+0x20a/0xd90 [ 1795.067457][T23938] ? ocfs2_calc_xattr_init+0x1e0/0xd90 [ 1795.067496][T23938] ocfs2_calc_xattr_init+0x20a/0xd90 [ 1795.067540][T23938] ? __pfx_ocfs2_calc_xattr_init+0x10/0x10 [ 1795.067581][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067610][T23938] ? ocfs2_init_security_get+0x139/0x1a0 [ 1795.067651][T23938] ocfs2_mknod+0xf51/0x2290 [ 1795.067692][T23938] ? __pfx_ocfs2_mknod+0x10/0x10 [ 1795.067722][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067754][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067786][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067824][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067856][T23938] ? rcu_is_watching+0x15/0xb0 [ 1795.067893][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067939][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.067975][T23938] ? lockdep_hardirqs_on+0x7a/0x110 [ 1795.068003][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068034][T23938] ? __pfx___schedule+0x10/0x10 [ 1795.068064][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068093][T23938] ? do_raw_spin_lock+0x12b/0x2f0 [ 1795.068118][T23938] ? preempt_schedule_thunk+0x16/0x30 [ 1795.068146][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068176][T23938] ? preempt_schedule_common+0x82/0xd0 [ 1795.068201][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068231][T23938] ? preempt_schedule_thunk+0x16/0x30 [ 1795.068262][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068292][T23938] ? put_pid+0xef/0x130 [ 1795.068329][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068362][T23938] ocfs2_mkdir+0x181/0x490 [ 1795.068391][T23938] ? __pfx_ocfs2_permission+0x10/0x10 [ 1795.068421][T23938] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 1795.068453][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068482][T23938] ? inode_permission+0x346/0x5f0 [ 1795.068518][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068548][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068581][T23938] vfs_mkdir+0x413/0x630 [ 1795.068614][T23938] filename_mkdirat+0x285/0x510 [ 1795.068649][T23938] ? __pfx_filename_mkdirat+0x10/0x10 [ 1795.068682][T23938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1795.068712][T23938] ? do_getname+0x151/0x250 [ 1795.068748][T23938] __se_sys_mkdirat+0x35/0x150 [ 1795.068781][T23938] do_syscall_64+0x14d/0xf80 [ 1795.068810][T23938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.068839][T23938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.068865][T23938] RIP: 0033:0x7f7ed839b607 [ 1795.068888][T23938] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.068909][T23938] RSP: 002b:00007f7ed9191e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1795.068935][T23938] RAX: ffffffffffffffda RBX: 00007f7ed9191ee0 RCX: 00007f7ed839b607 [ 1795.068960][T23938] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 1795.068978][T23938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1795.068994][T23938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 1795.069011][T23938] R13: 00007f7ed9191ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1795.069038][T23938] [ 1796.342763][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1796.380057][ T9638] bond0 (unregistering): Released all slaves [ 1796.845669][T21460] ocfs2: Unmounting device (7,7) on (node local) [ 1796.888659][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1797.106919][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1797.137024][ T9638] bond0 (unregistering): Released all slaves [ 1797.632266][ T9638] hsr_slave_0: left promiscuous mode [ 1797.665448][ T9638] hsr_slave_1: left promiscuous mode [ 1797.676308][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.694218][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.738050][ T9638] hsr_slave_0: left promiscuous mode [ 1797.744327][ T9638] hsr_slave_1: left promiscuous mode [ 1797.812768][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.843854][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.859988][ T9638] hsr_slave_0: left promiscuous mode [ 1797.869486][ T9638] hsr_slave_1: left promiscuous mode [ 1797.886381][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.894218][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.918925][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.939728][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.185806][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1798.201827][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1798.489845][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1798.511385][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1798.708724][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1798.735484][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1798.882407][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1798.895991][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1800.491607][ T9638] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.562867][ T9638] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.628377][ T9638] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.691707][ T9638] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.035303][ T9638] bridge_slave_1: left allmulticast mode [ 1801.042891][ T9638] bridge_slave_1: left promiscuous mode [ 1801.048658][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.058080][ T9638] bridge_slave_0: left allmulticast mode [ 1801.064896][ T9638] bridge_slave_0: left promiscuous mode [ 1801.079521][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.102018][ T9638] bridge_slave_1: left allmulticast mode [ 1801.107954][ T9638] bridge_slave_1: left promiscuous mode [ 1801.113893][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.122353][ T9638] bridge_slave_0: left allmulticast mode [ 1801.128655][ T9638] bridge_slave_0: left promiscuous mode [ 1801.134800][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.145963][ T9638] bridge0: port 3(batadv0) entered disabled state [ 1801.158253][ T9638] bridge_slave_1: left allmulticast mode [ 1801.164550][ T9638] bridge_slave_1: left promiscuous mode [ 1801.170809][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.181032][ T9638] bridge_slave_0: left allmulticast mode [ 1801.186883][ T9638] bridge_slave_0: left promiscuous mode [ 1801.192728][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.204238][ T9638] bridge_slave_1: left allmulticast mode [ 1801.210632][ T9638] bridge_slave_1: left promiscuous mode [ 1801.216450][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.229881][ T9638] bridge_slave_0: left allmulticast mode [ 1801.236089][ T9638] bridge_slave_0: left promiscuous mode [ 1801.243033][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.387078][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.397757][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.407840][ T9638] bond0 (unregistering): Released all slaves [ 1801.496741][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.510696][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.520743][ T9638] bond0 (unregistering): Released all slaves [ 1801.603842][ T9638] bond0 (unregistering): Released all slaves [ 1801.708055][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.721099][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.732309][ T9638] bond0 (unregistering): Released all slaves [ 1801.742676][ T9638] bond1 (unregistering): (slave macvlan0): Releasing active interface [ 1801.756269][ T9638] bond1 (unregistering): Released all slaves [ 1801.769206][ T9638] bond2 (unregistering): Released all slaves [ 1801.901269][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.913213][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.930823][ T9638] bond0 (unregistering): Released all slaves [ 1802.353199][ T9638] hsr_slave_0: left promiscuous mode [ 1802.367281][ T9638] hsr_slave_1: left promiscuous mode [ 1802.384800][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.399943][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.421827][ T9638] hsr_slave_0: left promiscuous mode [ 1802.440140][ T9638] hsr_slave_1: left promiscuous mode [ 1802.446074][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.470889][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.484598][ T9638] hsr_slave_0: left promiscuous mode [ 1802.490669][ T9638] hsr_slave_1: left promiscuous mode [ 1802.497106][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.504733][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.517164][ T9638] hsr_slave_0: left promiscuous mode [ 1802.534200][ T9638] hsr_slave_1: left promiscuous mode [ 1802.540554][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.552428][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.566066][ T9638] veth1_macvtap: left promiscuous mode [ 1802.572233][ T9638] veth0_macvtap: left promiscuous mode [ 1802.577883][ T9638] veth1_vlan: left promiscuous mode [ 1802.583184][ T9638] veth0_vlan: left promiscuous mode [ 1802.748325][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1802.761481][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1802.932490][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1802.962638][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1803.233252][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1803.248050][ T9638] team0 (unregistering): Port device team_slave_0 removed [ 1803.470497][ T9638] team0 (unregistering): Port device team_slave_1 removed [ 1803.494081][ T9638] team0 (unregistering): Port device team_slave_0 removed